> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Slurm login parameter reference

> Complete parameter reference for the Slurm login Helm chart, including directory cache and affinity settings

![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)

## Parameters

<table>
  <thead>
    <th style={{ width: '45%', textAlign: 'left' }}>Key & Description</th>
    <th style={{ textAlign: 'left' }}>Type</th>
    <th style={{ textAlign: 'left' }}>Default</th>
  </thead>

  <tbody>
    <tr>
      <td id="directoryCache--affinity">
        <b>directoryCache.affinity</b><br />
        The affinity for the directory-cache controller. This overrides the value of <a href="/products/sunk/reference/slurm-parameters#global--nodeSelector--affinity"> <code>global.nodeSelector.affinity</code></a>.
      </td>

      <td>object</td>

      <td>
        ```yaml wrap theme={"system"}
        null
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--directoryService--directories">
        <b>directoryCache.directoryService.directories</b><br />
        The directory services to configure. Click to expand examples.

        <Accordion title="Google Secure LDAP">
          ```yaml theme={"system"}
          directories:
            - name: google-example.com
              enabled: true
              ldapUri: ldaps://ldap.google.com:636
              user:
                canary: user@google-example.com
              defaultShell: "/bin/bash"
              fallbackHomeDir: "/home/%u"
              overrideHomeDir: /mnt/nvme/home/%u
              ldapsCert: google-ldaps-cert
              schema: rfc2307bis
          ```
        </Accordion>

        <Accordion title="CoreWeave LDAP">
          ```yaml theme={"system"}
          directories:
            - name: coreweave.cloud
              enabled: true
              ldapUri: ldap://openldap
              user:
                bindDn: cn=admin,dc=coreweave,dc=cloud
                searchBase: dc=coreweave,dc=cloud
                existingSecret: bind-user-sssd-config
                canary: admin
              defaultShell: "/bin/bash"
              fallbackHomeDir: "/home/%u"
              schema: rfc2307
          ```
        </Accordion>

        <Accordion title="Authentik">
          ```yaml theme={"system"}
          directories:
            - name: coreweave.cloud
              enabled: true
              ldapUri: ldap://authentik-outpost-ldap-outpost
              user:
                bindDn: cn=ldapsvc,dc=coreweave,dc=cloud
                searchBase: dc=coreweave,dc=cloud
                existingSecret: bind-user-sssd-config
                canary: ldapsvc
              startTLS: true
              userObjectClass: user
              groupObjectClass: group
              userNameAttr: cn
              groupNameAttr: cn
              schema: rfc2307bis
          ```
        </Accordion>

        <Accordion title="Active Directory">
          ```yaml theme={"system"}
          directories:
            - name: contoso.com
              enabled: true
              ldapUri: ldap://domaincontroller.tenant-my-tenant.coreweave.cloud
              user:
                bindDn: CN=binduser,CN=Users,DC=contoso,DC=com
                searchBase: DC=contoso,DC=com
                existingSecret: bind-user-sssd-config
                canary: binduser
              defaultShell: "/bin/bash"
              fallbackHomeDir: "/home/%u"
              schema: AD
          ```
        </Accordion>
      </td>

      <td>list</td>
      <td>See individual settings below.</td>
    </tr>

    <tr>
      <td id="directoryCache--directoryService--directories[0]--enabled">
        <b>directoryCache.directoryService.directories\[0].enabled</b><br />
        Enable the directory service.
      </td>

      <td>bool</td>

      <td>
        ```yaml wrap theme={"system"}
        false
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--directoryService--directories[0]--ldapsCert">
        <b>directoryCache.directoryService.directories\[0].ldapsCert</b><br />
        Name of existing TLS certificate for LDAP-S. <br />

        <Accordion title="Example: click to expand">
          ```yaml theme={"system"}
          kubectl create secret tls google-ldaps-cert \
                  --cert=Google_2025_08_24_55726.crt \
                  --key=Google_2025_08_24_55726.key
          ```
        </Accordion>
      </td>

      <td>string</td>

      <td>
        ```yaml wrap theme={"system"}
        null
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--directoryService--directories[0]--name">
        <b>directoryCache.directoryService.directories\[0].name</b><br />
        Name of the directory service. <br /> The primary domain should always be named: <code>default</code>
      </td>

      <td>string</td>

      <td>
        ```yaml wrap theme={"system"}
        "default"
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--directoryService--directories[0]--user--existingSecret">
        <b>directoryCache.directoryService.directories\[0].user.existingSecret</b><br />
        Name of an existing secret containing an SSSD configuration snippet with the <code>ldap\_default\_authtok</code> set for this domain.
      </td>

      <td>string</td>

      <td>
        ```yaml wrap theme={"system"}
        null
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--directoryService--directories[0]--user--existingSecretFileName">
        <b>directoryCache.directoryService.directories\[0].user.existingSecretFileName</b><br />
        The name of the file in the existing secret that contains the ldap passwords.
      </td>

      <td>string</td>

      <td>
        ```yaml wrap theme={"system"}
        "ldap-password.conf"
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--directoryService--watchInterval">
        <b>directoryCache.directoryService.watchInterval</b><br />
        The interval in seconds to check for changes in sssd configuration.
      </td>

      <td>int</td>

      <td>
        ```yaml wrap theme={"system"}
        60
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--image">
        <b>directoryCache.image</b><br />
        The image to use for the directory-cache controller.
      </td>

      <td>object</td>

      <td>
        ```yaml wrap theme={"system"}
        repository: registry.gitlab.com/coreweave/sunk/directory-cache
        tag:

        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--interval">
        <b>directoryCache.interval</b><br />
        Polling interval for updates to user database
      </td>

      <td>int</td>

      <td>
        ```yaml wrap theme={"system"}
        null
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--leaderElection--enabled">
        <b>directoryCache.leaderElection.enabled</b><br />
        This forces the directory-cache controller to use leader election even if the number of replicas is set to 1. <br /> Useful if planning to scale after deployment.
      </td>

      <td>bool</td>

      <td>
        ```yaml wrap theme={"system"}
        false
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--logLevel">
        <b>directoryCache.logLevel</b><br />
        The log level. <br /> Uses integers or <a href="https://pkg.go.dev/go.uber.org/zap#pkg-constants">zap log level strings</a>: <ul> <li><code>debug</code></li> <li><code>info</code></li> <li><code>warn</code></li> <li><code>error</code></li> <li><code>dpanic</code></li> <li><code>panic</code></li> <li><code>fatal</code></li> </ul>
      </td>

      <td>string</td>

      <td>
        ```yaml wrap theme={"system"}
        "info"
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--minimumUID">
        <b>directoryCache.minimumUID</b><br />
        The minimum UID to be used to filter users. <br />
      </td>

      <td>int</td>

      <td>
        ```yaml wrap theme={"system"}
        1000
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--nsscacheMaps">
        <b>directoryCache.nsscacheMaps</b><br />
        The nsscache maps used to configure the directory-cache controller. This is only used if <code>source</code> is set to <code>nsscache</code>.
      </td>

      <td>list</td>

      <td>
        ```yaml wrap theme={"system"}
        [
          "passwd",
          "group"
        ]
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--podMonitor--enabled">
        <b>directoryCache.podMonitor.enabled</b><br />
        Enable monitoring via the Prometheus operator <code>PodMonitor</code> CRD.
      </td>

      <td>bool</td>

      <td>
        ```yaml wrap theme={"system"}
        true
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--replicas">
        <b>directoryCache.replicas</b><br />
        The number of replicas of the directory-cache controller pod to run. <br /> Leader election will be enabled if this is greater than 1 or leader election is explicitly enabled.
      </td>

      <td>int</td>

      <td>
        ```yaml wrap theme={"system"}
        1
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--resources">
        <b>directoryCache.resources</b><br />
        The resource to request for the directory-cache controller.
      </td>

      <td>object</td>

      <td>
        ```yaml wrap theme={"system"}
        limits:
            memory: 2Gi
        requests:
            cpu: 2
            memory: 2Gi

        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--selectGroups">
        <b>directoryCache.selectGroups</b><br />
        Groups to select users from which
      </td>

      <td>list</td>

      <td>
        ```yaml wrap theme={"system"}
        []
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--source">
        <b>directoryCache.source</b><br />
        The source of user information for the directory-cache controller. Can be <code>sssd</code>, or <code>nsscache</code>.
      </td>

      <td>string</td>

      <td>
        ```yaml wrap theme={"system"}
        "nsscache"
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--sssdContainer--livenessProbe">
        <b>directoryCache.sssdContainer.livenessProbe</b><br />
        The liveness probe for the sssd container.
      </td>

      <td>object</td>

      <td>
        ```yaml wrap theme={"system"}
        map[]
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--sssdContainer--readinessProbe">
        <b>directoryCache.sssdContainer.readinessProbe</b><br />
        The readiness probe for the sssd container.
      </td>

      <td>object</td>

      <td>
        ```yaml wrap theme={"system"}
        map[]
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--sssdContainer--resources">
        <b>directoryCache.sssdContainer.resources</b><br />
        Resources for the sssd container.
      </td>

      <td>object</td>

      <td>
        ```yaml wrap theme={"system"}
        limits:
            memory: 2Gi
        requests:
            cpu: 1
            memory: 2Gi

        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--sssdContainer--startupProbe">
        <b>directoryCache.sssdContainer.startupProbe</b><br />
        The startup probe for the sssd container.
      </td>

      <td>object</td>

      <td>
        ```yaml wrap theme={"system"}
        map[]
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--tolerations">
        <b>directoryCache.tolerations</b><br />
        The tolerations for the directory-cache controller deployment.
      </td>

      <td>list</td>

      <td>
        ```yaml wrap theme={"system"}
        null
        ```
      </td>
    </tr>

    <tr>
      <td id="directoryCache--vmPodScrape--enabled">
        <b>directoryCache.vmPodScrape.enabled</b><br />
        Enable monitoring via VictoriaMetrics operator <code>VMPodScrape</code> CRD. Note: To enable this, <code>podMonitor</code> must be disabled in addition to setting <code>vmPodScrape.enabled</code> to <code>true</code>.
      </td>

      <td>bool</td>

      <td>
        ```yaml wrap theme={"system"}
        false
        ```
      </td>
    </tr>

    <tr>
      <td id="imagePullSecrets">
        <b>imagePullSecrets</b><br />
        Image pull secrets to configure if using custom private images.
      </td>

      <td>list</td>

      <td>
        ```yaml wrap theme={"system"}
        []
        ```
      </td>
    </tr>

    <tr>
      <td id="loginController--affinity">
        <b>loginController.affinity</b><br />
        The affinity for the login controller. This overrides the value of <a href="https://docs.coreweave.com/products/sunk/reference/slurm-parameters#global--nodeSelector--affinity"> <code>global.nodeSelector.affinity</code></a>.
      </td>

      <td>object</td>

      <td>
        ```yaml wrap theme={"system"}
        null
        ```
      </td>
    </tr>

    <tr>
      <td id="loginController--image">
        <b>loginController.image</b><br />
        The image to use for the login-controller.
      </td>

      <td>object</td>

      <td>
        ```yaml wrap theme={"system"}
        repository: registry.gitlab.com/coreweave/sunk/login-controller
        tag:

        ```
      </td>
    </tr>

    <tr>
      <td id="loginController--leaderElection--enabled">
        <b>loginController.leaderElection.enabled</b><br />
        This forces the login-controller to use leader election even if the number of replicas is set to 1. <br /> Useful if planning to scale after deployment.
      </td>

      <td>bool</td>

      <td>
        ```yaml wrap theme={"system"}
        false
        ```
      </td>
    </tr>

    <tr>
      <td id="loginController--logLevel">
        <b>loginController.logLevel</b><br />
        The log level. <br /> Uses integers or <a href="https://pkg.go.dev/go.uber.org/zap#pkg-constants">zap log level strings</a>: <ul> <li><code>debug</code></li> <li><code>info</code></li> <li><code>warn</code></li> <li><code>error</code></li> <li><code>dpanic</code></li> <li><code>panic</code></li> <li><code>fatal</code></li> </ul>
      </td>

      <td>string</td>

      <td>
        ```yaml wrap theme={"system"}
        "info"
        ```
      </td>
    </tr>

    <tr>
      <td id="loginController--podMonitor--enabled">
        <b>loginController.podMonitor.enabled</b><br />
        Enable monitoring via the Prometheus operator <code>PodMonitor</code> CRD.
      </td>

      <td>bool</td>

      <td>
        ```yaml wrap theme={"system"}
        true
        ```
      </td>
    </tr>

    <tr>
      <td id="loginController--replicas">
        <b>loginController.replicas</b><br />
        The number of replicas of the login-controller pod to run. <br /> Leader election will be enabled if this is greater than 1 or leader election is explicitly enabled.
      </td>

      <td>int</td>

      <td>
        ```yaml wrap theme={"system"}
        1
        ```
      </td>
    </tr>

    <tr>
      <td id="loginController--resources">
        <b>loginController.resources</b><br />
        The resource to request for the login-controller.
      </td>

      <td>object</td>

      <td>
        ```yaml wrap theme={"system"}
        limits:
            memory: 2Gi
        requests:
            cpu: 2
            memory: 2Gi

        ```
      </td>
    </tr>

    <tr>
      <td id="loginController--tolerations">
        <b>loginController.tolerations</b><br />
        The tolerations for the login-controller deployment.
      </td>

      <td>list</td>

      <td>
        ```yaml wrap theme={"system"}
        null
        ```
      </td>
    </tr>

    <tr>
      <td id="loginController--vmPodScrape--enabled">
        <b>loginController.vmPodScrape.enabled</b><br />
        Enable monitoring via the VictoriaMetrics operator <code>VMPodScrape</code> CRD. Note: To enable this, <code>podMonitor</code> must be disabled in addition to setting <code>vmPodScrape.enabled</code> to <code>true</code>.
      </td>

      <td>bool</td>

      <td>
        ```yaml wrap theme={"system"}
        false
        ```
      </td>
    </tr>
  </tbody>
</table>