Configuration
dapr.io / v1alpha1
apiVersion: dapr.io/v1alpha1
kind: Configuration
metadata:
name: example
apiVersion
string
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kind
string
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadata
object
spec object
ConfigurationSpec is the spec for an configuration.
accessControl object
AccessControlSpec is the spec object in ConfigurationSpec.
defaultAction
string
policies []object
appId
string required
defaultAction
string
namespace
string
operations []object
action
string required
httpVerb
[]string
name
string required
trustDomain
string
trustDomain
string
api object
APISpec describes the configuration for Dapr APIs.
allowed []object
List of allowed APIs. Can be used in conjunction with denied.
name
string required
protocol
string
version
string required
denied []object
List of denied APIs. Can be used in conjunction with allowed.
name
string required
protocol
string
version
string required
appHttpPipeline object
PipelineSpec defines the middleware pipeline.
handlers []object required
name
string required
selector object
SelectorSpec selects target services to which the handler is to be applied.
fields []object required
field
string required
value
string required
type
string required
components object
ComponentsSpec describes the configuration for Dapr components
deny
[]string
Denylist of component types that cannot be instantiated
features []object
enabled
boolean required
name
string required
httpPipeline object
PipelineSpec defines the middleware pipeline.
handlers []object required
name
string required
selector object
SelectorSpec selects target services to which the handler is to be applied.
fields []object required
field
string required
value
string required
type
string required
logging object
LoggingSpec defines the configuration for logging.
apiLogging object
Configure API logging.
enabled
boolean
Default value for enabling API logging. Sidecars can always override this by setting `--enable-api-logging` to true or false explicitly. The default value is false.
obfuscateURLs
boolean
When enabled, obfuscates the values of URLs in HTTP API logs, logging the route name rather than the full path being invoked, which could contain PII. Default: false. This option has no effect if API logging is disabled.
omitHealthChecks
boolean
If true, health checks are not reported in API logs. Default: false. This option has no effect if API logging is disabled.
metric object
MetricSpec defines metrics configuration.
enabled
boolean required
http object
MetricHTTP defines configuration for metrics for the HTTP server
increasedCardinality
boolean
If true, metrics for the HTTP server are collected with increased cardinality. The default is true in Dapr 1.13, but will be changed to false in 1.14+
rules []object
labels []object required
name
string required
regex
object required
name
string required
metrics object
MetricSpec defines metrics configuration.
enabled
boolean required
http object
MetricHTTP defines configuration for metrics for the HTTP server
increasedCardinality
boolean
If true, metrics for the HTTP server are collected with increased cardinality. The default is true in Dapr 1.13, but will be changed to false in 1.14+
rules []object
labels []object required
name
string required
regex
object required
name
string required
mtls object
MTLSSpec defines mTLS configuration.
allowedClockSkew
string
controlPlaneTrustDomain
string
enabled
boolean required
sentryAddress
string
tokenValidators []object
Additional token validators to use. When Dapr is running in Kubernetes mode, this is in addition to the built-in "kubernetes" validator. In self-hosted mode, enabling a custom validator will disable the built-in "insecure" validator.
name
string required
Name of the validator
enum:
jwks
options
object
Options for the validator, if any
workloadCertTTL
string
nameResolution object
NameResolutionSpec is the spec for name resolution configuration.
component
string required
configuration
object required
DynamicValue is a dynamic value struct for the component.metadata pair value.
version
string required
secrets object
SecretsSpec is the spec for secrets configuration.
scopes []object required
allowedSecrets
[]string
defaultAccess
string
deniedSecrets
[]string
storeName
string required
tracing object
TracingSpec defines distributed tracing configuration.
otel object
OtelSpec defines Otel exporter configurations.
endpointAddress
string required
isSecure
boolean required
protocol
string required
samplingRate
string required
stdout
boolean
zipkin object
ZipkinSpec defines Zipkin trace configurations.
endpointAddress
string required
wasm object
WasmSpec describes the security profile for all Dapr Wasm components.
strictSandbox
boolean
No matches. Try .spec.accessControl for an exact path