| GCP target | NAVIGATOR_GCP_PROJECT_ID, NAVIGATOR_GCP_LOCATION |
| GKE target | NAVIGATOR_GKE_CLUSTER_NAME, NAVIGATOR_GKE_CONTEXT, NAVIGATOR_K8S_NAMESPACE |
| VPC, subnet | NAVIGATOR_VPC_NAME, NAVIGATOR_SUBNETWORK_NAME |
| Gateway IP | NAVIGATOR_GATEWAY_IP_NAME |
| Runtime identities | NAVIGATOR_GCP_SERVICE_ACCOUNT_ID, NAVIGATOR_DRIVE_GCP_SERVICE_ACCOUNT_ID |
| Assets/documents | NAVIGATOR_ASSETS_BUCKET, NAVIGATOR_DOCUMENTS_BUCKET |
| Exports/logs | NAVIGATOR_EXPORTS_BUCKET, NAVIGATOR_LOGS_BUCKET |
| Optional fork Config Sync | NAVIGATOR_CONFIG_SYNC_REPO, NAVIGATOR_CONFIG_SYNC_DIR (unset for Navigator's three) |
| Image registry | NAVIGATOR_IMAGE_REGISTRY, NAVIGATOR_WEB_IMAGE |
| Manifest source | NAVIGATOR_GKE_OVERLAY |
| Public OAuth clients | NAVIGATOR_OAUTH_CLIENT_ID_BROWSER (required), NAVIGATOR_OAUTH_CLIENT_ID_GEMINI |
| Brand and base URL | NAVIGATOR_CUSTOM_BRANDING, NAVIGATOR_PRIMARY_DOMAIN, NAV_BASE_URL |
| Public hosts | NAVIGATOR_PUBLIC_HOST, NAVIGATOR_WORKFLOWS_HOST, GOOGLE_OAUTH_REQUIRED_HD |
| Runtime Secret | NAVIGATOR_WEB_SECRET_NAME |
| Worker registration | NAVIGATOR_WORKFLOWS_URL |
| Restate admin | RESTATE_ADMIN_URL, RESTATE_ADMIN_TOKEN |