Instrumentation: ServiceName: "zitadel-setup" # ZITADEL_INSTRUMENTATION_SERVICENAME Trace: Fraction: 1.0 # ZITADEL_INSTRUMENTATION_TRACE_FRACTION Exporter: # The following exporter types are supported: # "none": Disables trace exporting # "stdOut": Exports traces to standard output # "stdErr": Exports traces to standard error # "grpc": Exports traces using the OTEL gRPC exporter (recommended) # "http": Exports traces using the OTEL HTTP exporter # "google": Exports traces to Google Cloud Trace Type: "none" # ZITADEL_INSTRUMENTATION_TRACE_EXPORTER_TYPE # Endpoint of the OTEL collector for grpc and http exporters Endpoint: "" # ZITADEL_INSTRUMENTATION_TRACE_EXPORTER_ENDPOINT # Disable https for grpc and http exporters Insecure: false # ZITADEL_INSTRUMENTATION_TRACE_EXPORTER_INSECURE # Interval for batching traces before export BatchDuration: 1s # ZITADEL_INSTRUMENTATION_TRACE_EXPORTER_BATCHDURATION # Project ID for Google Cloud Trace exporter GoogleProjectID: "" # ZITADEL_INSTRUMENTATION_TRACE_EXPORTER_GOOGLEPROJECTID Metric: Exporter: # The following exporter types are supported: # "none": Disables metric exporting # "stdOut": Exports metrics to standard output # "stdErr": Exports metrics to standard error # "grpc": Exports metrics using the OTEL gRPC exporter (recommended) # "http": Exports metrics using the OTEL HTTP exporter # "google": Exports metrics to Google Cloud Trace # "prometheus": Exposes metrics via an HTTP endpoint for Prometheus to scrape Type: "none" # ZITADEL_INSTRUMENTATION_METRIC_EXPORTER_TYPE # Endpoint of the OTEL collector for grpc and http exporters Endpoint: "" # ZITADEL_INSTRUMENTATION_METRIC_EXPORTER_ENDPOINT # Disable https for grpc and http exporters Insecure: false # ZITADEL_INSTRUMENTATION_METRIC_EXPORTER_INSECURE # Interval at which metrics are exported BatchDuration: 1s # ZITADEL_INSTRUMENTATION_METRIC_EXPORTER_BATCHDURATION # Project ID for Google Cloud Trace exporter GoogleProjectID: "" # ZITADEL_INSTRUMENTATION_METRIC_EXPORTER_GOOGLEPROJECTID # Structured logging can print logs on standard error and/or export them using OTEL. Log: # Log lines lower than this level are not emitted. Level: "INFO" # ZITADEL_INSTRUMENTATION_LOG_LEVEL # Enable printing structured logs to standard error in the specified format. # The following formats are supported: # - "disabled": Disables logging to standard error # - "text": Logs are printed as human-readable text # - "json": Logs are printed as JSON objects # - "gcp": JSON formatted logs compatible with Google Cloud Platform logging StdErr: "text" # ZITADEL_INSTRUMENTATION_LOG_STDERR # Adds the source file and line number where the log line was emitted. # Not to be confused with the source of an error. AddSource: true # ZITADEL_INSTRUMENTATION_LOG_ADDSOURCE Exporter: # The following exporter types are supported: # - "none": Disables log exporting # - "stdOut": Exports logs to standard output # - "stdErr": Exports logs to standard error # - "grpc": Exports logs using the OTEL gRPC exporter (recommended) # - "http": Exports logs using the OTEL HTTP exporter Type: "none" # ZITADEL_INSTRUMENTATION_LOG_EXPORTER_TYPE # Endpoint of the OTEL collector for grpc and http exporters Endpoint: "" # ZITADEL_INSTRUMENTATION_LOG_EXPORTER_ENDPOINT # Disable https for grpc and http exporters Insecure: false # ZITADEL_INSTRUMENTATION_LOG_EXPORTER_INSECURE # Interval at which metrics are exported BatchDuration: 1s # ZITADEL_INSTRUMENTATION_LOG_EXPORTER_BATCHDURATION # Project ID for Google Cloud Trace exporter GoogleProjectID: "" # ZITADEL_INSTRUMENTATION_LOG_EXPORTER_GOOGLEPROJECTID Profile: # The following profiler types are supported: # "none": Disables profiling # "google": Exports profiling data to Google Cloud Profiler Type: "none" # ZITADEL_INSTRUMENTATION_PROFILE_TYPE # Project ID for Google Cloud Profiler GoogleProjectID: "" # ZITADEL_INSTRUMENTATION_PROFILE_GOOGLEPROJECTID # By using the FirstInstance section, you can overwrite the DefaultInstance configuration for the first instance created by zitadel setup. FirstInstance: # If set to true zitadel is setup without initial data Skip: false # The machine key from the section FirstInstance.Org.Machine.MachineKey is written to the MachineKeyPath. MachineKeyPath: # ZITADEL_FIRSTINSTANCE_MACHINEKEYPATH # The personal access token from the section FirstInstance.Org.Machine.Pat is written to the PatPath. PatPath: # ZITADEL_FIRSTINSTANCE_PATPATH LoginClientPatPath: # ZITADEL_FIRSTINSTANCE_LOGINCLIENTPATPATH InstanceName: ZITADEL # ZITADEL_FIRSTINSTANCE_INSTANCENAME DefaultLanguage: en # ZITADEL_FIRSTINSTANCE_DEFAULTLANGUAGE Org: Name: ZITADEL # ZITADEL_FIRSTINSTANCE_ORG_NAME # In the FirstInstance.Org.Human section, the initial organization's admin user with the role IAM_OWNER is defined. # If FirstInstance.Org.Machine.Machine is defined, a service user is created with the IAM_OWNER role. Human: # In case UserLoginMustBeDomain is false (default) and you don't overwrite the username with an email, # it will be suffixed by the org domain (org-name + domain from config). # for example zitadel-admin in org ZITADEL on domain.tld -> zitadel-admin@zitadel.domain.tld UserName: zitadel-admin # ZITADEL_FIRSTINSTANCE_ORG_HUMAN_USERNAME FirstName: ZITADEL # ZITADEL_FIRSTINSTANCE_ORG_HUMAN_FIRSTNAME LastName: Admin # ZITADEL_FIRSTINSTANCE_ORG_HUMAN_LASTNAME NickName: # ZITADEL_FIRSTINSTANCE_ORG_HUMAN_NICKNAME DisplayName: # ZITADEL_FIRSTINSTANCE_ORG_HUMAN_DISPLAYNAME Email: # uses the username if empty Address: # ZITADEL_FIRSTINSTANCE_ORG_HUMAN_EMAIL_ADDRESS Verified: true # ZITADEL_FIRSTINSTANCE_ORG_HUMAN_EMAIL_VERIFIED PreferredLanguage: en # ZITADEL_FIRSTINSTANCE_ORG_HUMAN_PREFERREDLANGUAGE Gender: # ZITADEL_FIRSTINSTANCE_ORG_HUMAN_GENDER Phone: Number: # ZITADEL_FIRSTINSTANCE_ORG_HUMAN_PHONE_NUMBER Verified: # ZITADEL_FIRSTINSTANCE_ORG_HUMAN_PHONE_VERIFIED Password: Password1! # ZITADEL_FIRSTINSTANCE_ORG_HUMAN_PASSWORD PasswordChangeRequired: true # ZITADEL_FIRSTINSTANCE_ORG_HUMAN_PASSWORDCHANGEREQUIRED # In the FirstInstance.Org.Machine section, the initial organization's admin user with the role IAM_OWNER is defined. # If FirstInstance.Org.Machine.Machine is defined, a service user is created with the IAM_OWNER role. Machine: Machine: Username: # ZITADEL_FIRSTINSTANCE_ORG_MACHINE_MACHINE_USERNAME Name: # ZITADEL_FIRSTINSTANCE_ORG_MACHINE_MACHINE_NAME MachineKey: # date format: 2023-01-01T00:00:00Z ExpirationDate: # ZITADEL_FIRSTINSTANCE_ORG_MACHINE_MACHINEKEY_EXPIRATIONDATE # Currently, the only supported value is 1 for JSON Type: # ZITADEL_FIRSTINSTANCE_ORG_MACHINE_MACHINEKEY_TYPE Pat: # date format: 2023-01-01T00:00:00Z ExpirationDate: # ZITADEL_FIRSTINSTANCE_ORG_MACHINE_PAT_EXPIRATIONDATE LoginClient: Machine: Username: # ZITADEL_FIRSTINSTANCE_ORG_LOGINCLIENT_MACHINE_USERNAME Name: # ZITADEL_FIRSTINSTANCE_ORG_LOGINCLIENT_MACHINE_NAME Pat: # date format: 2023-01-01T00:00:00Z ExpirationDate: # ZITADEL_FIRSTINSTANCE_ORG_LOGINCLIENT_PAT_EXPIRATIONDATE CorrectCreationDate: FailAfter: 5m # ZITADEL_CORRECTCREATIONDATE_FAILAFTER AddEventCreatedAt: BulkAmount: 100 # ZITADEL_ADDEVENTCREATEDAT_BULKAMOUNT FillFields: BatchSize: 1000 # ZITADEL_EVENTSTORE_FILLFIELDS_BULKLIMIT