Skip to main content

Config API

Public client configuration​

GET /api/config

The only unauthenticated endpoint besides the login flow. Returns the public-safe subset of the effective configuration — no secrets — resolved at request time (never prerendered, since deploy-time env differs from build-time):

{
  "scope": "namespace",
  "etcdEncrypted": false,
  "authDisabled": false,
  "oidcConfigured": true,
  "historyLimit": 20,
  "managedOnly": true,
  "restartEnabled": false,
  "appNamespace": "krypton"
}

historyLimit is an integer 1–100 (default 20 when unset). Invalid KRYPTON_HISTORY_LIMIT configuration returns 503 { "error": "KRYPTON_HISTORY_LIMIT must be an integer from 1 to 100" } instead of advertising an unlimited or silently substituted retention policy.

Use it in deployment checks: assert authDisabled: false, oidcConfigured: true, and (once apiserver encryption is verified) etcdEncrypted: true. See Configuration for every variable behind these flags.