Server

What it does

The Server is the centralised service that every other piece of Snap CD talks to. It hosts the Dashboard, the Web API, the MCP server, the SignalR hubs for Runners and Agents, and the token endpoint. It owns the resource catalogue (Stacks, Namespaces, Modules, Inputs, Secrets, Runners, Agents, Missions, role assignments) and the durable record of every Job that has run.

The Server does not execute Terraform, OpenTofu or Pulumi commands itself. It does not hold cloud credentials. Job execution is delegated to Runners, and AI-driven event handling is delegated to Agents. The Server’s job is to authenticate callers, store resources and history, decide which Runner or Agent should handle a given piece of work, and dispatch that work over a hub connection.

Deployment Models

Snap CD is offered in two editions, sharing the same Server codebase:

  • Cloud — hosted by Schrieksoft at snapcd.io. You don’t operate the Server; sign up and start configuring your organization.
  • Self-Hosted — you run the Server yourself, on infrastructure you control. Source-available under the Snap CD Source-Available License, with tiering covered in the Licensing section below.

The remainder of this page is relevant primarily to Self-Hosted operators. Cloud users do not need to deploy, configure, or license the Server.

Hosted surfaces

The Server exposes the following surfaces over HTTP:

SurfacePurpose
/ (Dashboard)The Blazor-based web UI for managing organizations, Stacks, Modules, Jobs, Runners, Agents and so on
/api/**REST Web API — consumed by the Terraform provider, the Runner, the Agent, and any custom integration
/mcpModel Context Protocol endpoint — consumed by the Agent’s Sidecar and by interactive AI clients such as Claude Code
/connect/tokenOpenIddict token endpoint — issues JWTs for Users and Service Principals via client_credentials
/runnerhubSignalR hub — long-lived bidirectional connection used by Runners
/agenthubSignalR hub — long-lived bidirectional connection used by Agent Instances
/swaggerOpenAPI documentation for the Web API
/healthLiveness / readiness probe

Self-Deployment Dependencies

The Server connects to a small set of external systems at runtime. One is required; the rest are optional and enabled via settings.

Required

DependencyNotes
SQL Server (2019 or newer)The Server’s primary store. Used both for application data and as the default service-bus transport. Configured via ConnectionString

Optional

DependencyWhen to use it
RedisDistributed cache and SignalR backplane when running multiple Server replicas. Configured via Caching
Azure Service BusAlternative service-bus transport for higher-throughput deployments. Configured via ServiceBus
Secret Store (Azure Key Vault)Backing store for Snap CD Secrets — where Stack / Namespace / Module Secret values and sensitive Output Sets live encrypted at rest. Configured via SecretStore. Defaults to the Server’s SQL Server database; AKV is a paid feature
External Login Provider (GitHub, Google, Microsoft, Okta, Auth0)SSO sign-in providers. Configured via OpenIdConnect.ExternalLoginProviders. Paid feature — gated by license tier. The Server runs an embedded OpenIddict instance for User and Service Principal authentication regardless
Email Provider (Amazon SES, SendGrid, Mailgun, Postmark, generic SMTP)Outbound email for password resets and invitations. Configured via EmailSender. When unset (or set to NoOp), the Server runs in NoOp mode and email-driven flows are admin-mediated
External Settings Vault (Azure Key Vault, AWS Secrets Manager)Source of sensitive setting values loaded at startup via the External Settings provider

Deployment

For Self-Hosted operators, see Deployment > Guide > Server for the reference deployment repositories and the minimum Compose shape. Cloud users do not deploy the Server.

Operations & observability

The Server emits logs to stdout via the standard MEL pipeline. Filter levels are controlled by the Logging.LogLevel section.

For runtime visibility:

  • /health returns a basic liveness response and is suitable as a Kubernetes probe target
  • The Dashboard’s Jobs view shows real-time Job status and per-Job logs (logs come from Runners; see the Runner page)
  • The Dashboard’s Runners and Agents pages show real-time connection status for each connected Instance

Operational notes specific to Self-Hosted:

  • License caching — resolved license state is cached in-process for 8 hours; the background refresh job pulls fresh tokens from Cloud more frequently. Restarting the Server forces a fresh resolution
  • Default Organization — a Self-Hosted Server is single-organization by design. On first start, a default organization is pre-seeded; users register against it. There is no “platform” organization or multi-tenant separation on Self-Host
  • Scaling — the Server is stateless. To scale horizontally, run multiple replicas with Redis configured as both the cache provider and the SignalR backplane. SQL Server remains a single shared store across replicas

Licensing

Self-Hosted Snap CD is distributed under the Snap CD Source-Available License, derived from the Elastic License 2.0. The source code is available, but you may not provide Snap CD to third parties as a hosted or managed service.

Tiers

The Self-Hosted Server runs in one of three modes, gated by a license token:

TierLicense tokenNotes
CommunityNoneFree. A complete, supported configuration that you can run in production; it is not crippleware. Higher quotas and some features (SSO, bot protection) are reserved for higher tiers
Community PlusFreeSame feature set as Community, raised quotas. Claim a free token by registering an organization on snapcd.io
PaidSubscriptionHigher quotas still, plus additional features (SSO providers, the Agent and Missions). Subscriptions managed on snapcd.io

For the current tier comparison and quotas, see the Pricing page.

Obtaining a license

License tokens are issued by the Cloud instance to organizations on snapcd.io. To get one:

  1. Sign up on snapcd.io and create (or log in to) the organization that owns the Self-Hosted deployment.
  2. Claim a free Community Plus token, or visit the Pricing page and select a paid tier appropriate to your usage.
  3. Copy the resulting license key (format: shsk_…) from the Cloud portal.
  4. In your Self-Hosted Server’s Dashboard, navigate to the License page under your organization, paste the key, and save.

The Server round-trips the key through Cloud to obtain a signed JWT license token, then caches it locally. A background job periodically refreshes the token so that Cloud-side subscription state (cancellation, plan changes, expiry) propagates to the Self-Host. Brief network outages between the Self-Host and Cloud do not affect availability — the cached token continues to be honoured until its expiry.

Settings

The Server reads its settings from the standard layered pipeline described in Deployment > Settings — appsettings.json, environment-specific overrides, environment variables, command-line arguments, and the External Settings provider.

Generated from the Server’s published JSON Schema — the same schema operators reference via "$schema" in their appsettings.json to get editor IntelliSense. Click any section to expand its fields.

AllowHttp boolean

When false (default), the Server refuses to issue tokens over plain HTTP. Set to true only when terminating TLS upstream of the Server process (e.g. behind a reverse proxy that handles TLS itself).

Caching object

Distributed-cache and SignalR-backplane configuration. Single-replica deployments can leave the default InMemory provider; multi-replica deployments must use Redis so cache hits and SignalR group state are shared across replicas.

ConnectionString string | null

Connection string for the Redis instance. Required when Provider is Redis; ignored when InMemory. Sensitive in production — source via the External Settings provider when the Redis instance is auth-protected.

Provider string

Default: InMemory

Allowed values: InMemory, Redis

Cache backing. InMemory (default) keeps everything in-process — fine for single-replica deployments. Redis uses a shared Redis instance as both the cache provider and the SignalR backplane, required when running more than one Server replica.

ConnectionString string

SQL Server connection string. Used both for the application database and as the default ServiceBus transport. Sensitive — production deployments should source this via the External Settings provider rather than committing it to appsettings.json.

EmailSender object

Outbound email configuration. EmailProvider selects which transport sub-block the Server uses; the remaining blocks are ignored. When EmailProvider is "NoOp" (or unset), the Server runs in no-op mode and email-driven flows (password resets, invitations) are admin-mediated rather than self-service.

AmazonSES object

Amazon SES transport credentials and sender identity. Used when EmailProvider is "AmazonSES".

AccessKey string | null

IAM access key ID. Ignored when UseDefaultCredentials is true (the AWS SDK then resolves credentials via instance profile / env vars / etc.). Sensitive — source via the External Settings provider in production.

FromEmail string

"From" address every Server-sent email is delivered as. Must be verified in SES.

FromName string

Display name shown alongside FromEmail in clients.

Region string

AWS region the SES endpoint lives in (e.g. eu-north-1, us-east-1 ).

SecretKey string | null

IAM secret access key paired with AccessKey. Ignored when UseDefaultCredentials is true. Sensitive.

UseDefaultCredentials boolean

Default: true

When true (default), resolve credentials via the standard AWS SDK chain (instance profile, env vars, shared credentials file). When false, use AccessKey / SecretKey explicitly.

EmailProvider string

Default: NoOp

Which transport handles outbound email. Values: "NoOp" (default — disables email), "AmazonSES", "SendGrid", "Mailgun", "Postmark", "Smtp". Any value not in this set is treated the same as "NoOp".

Mailgun object

Mailgun transport credentials and sender identity. Used when EmailProvider is "Mailgun".

ApiKey string

Mailgun API key. Sensitive — source via the External Settings provider in production.

Domain string

Mailgun sending domain (e.g. mg.example.com ). Must be verified in Mailgun.

FromEmail string

"From" address every Server-sent email is delivered as. Must be on Domain.

FromName string

Display name shown alongside FromEmail in clients.

Postmark object

Postmark transport credentials and sender identity. Used when EmailProvider is "Postmark".

ApiKey string

Postmark server API token. Sensitive — source via the External Settings provider in production.

FromEmail string

"From" address every Server-sent email is delivered as. Must be a verified sender signature in Postmark.

FromName string

Display name shown alongside FromEmail in clients.

SendGrid object

SendGrid transport credentials and sender identity. Used when EmailProvider is "SendGrid".

ApiKey string

SendGrid API key. Sensitive — source via the External Settings provider in production.

FromEmail string

"From" address every Server-sent email is delivered as. Must be verified in SendGrid.

FromName string

Display name shown alongside FromEmail in clients.

Smtp object

Generic SMTP transport credentials and sender identity. Used when EmailProvider is "Smtp".

FromEmail string

"From" address every Server-sent email is delivered as.

FromName string

Display name shown alongside FromEmail in clients.

Password string

SMTP authentication password (or app password for accounts with 2FA). Sensitive — source via the External Settings provider in production.

SmtpHost string

Default: smtp-relay.gmail.com

SMTP server hostname (e.g. smtp-relay.gmail.com, smtp.office365.com ).

SmtpPort integer

Default: 587

SMTP port. Common values: 587 (submission with STARTTLS), 465 (implicit TLS), 25 (plain).

UseSsl boolean

Default: true

When true, connect with implicit SSL/TLS on connect. Use for port 465. Mutually exclusive in spirit with UseStartTls — most modern SMTP servers expect either implicit TLS or STARTTLS, not both.

UseStartTls boolean

Default: true

When true, issue STARTTLS to upgrade the plaintext connection to TLS before authentication. Use for port 587. The standard "submission" port flow.

Username string

SMTP authentication username. Often the same as FromEmail for hosted services.

InvitationSettings object

Lifecycle settings for User invitations — how long invitations remain valid, whether auto-cleanup runs for incomplete sign-ups, and whether email verification is required for the invited account to become active.

AutoDeleteIncompleteUsers boolean

Default: true

When true (default), the cleanup job deletes Identity rows for invitees who never completed sign-up after their invitation expired. Set false to retain expired-but-incomplete rows (useful for audit trails that must record every invitation attempt).

CleanupJobCron string

Default: 0 0 * * *

Quartz cron expression for the invitation-cleanup background job. Defaults to 00:00 daily.

ExpirationDays integer

Default: 30

How many days an invitation link remains valid before expiring. Defaults to 30.

RequireEmailVerification boolean

Default: true

When true (default), the invited User must confirm their email address before the account is enabled. Set false only in environments where email delivery is unreliable and the alternative-verification flow has been arranged out-of-band.

License object

Configures how the Server obtains, refreshes, and validates its license token against the Snap CD Licensing Service. Defaults point at the public Cloud licensing endpoint and a daily refresh schedule — operators typically only change LicenseServerBaseUrl when running the Server in a disconnected environment with a private license proxy.

LicenseServerBaseUrl string

Default: https://snapcd.io

Base URL of the Snap CD Licensing Service. Defaults to the public Cloud endpoint (https://snapcd.io). Self-Hosted deployments running on Community-Plus or higher round-trip license tokens through this endpoint at refresh time. In non-debug runs the value is force-set to https://snapcd.io regardless of appsettings.json — see Program.cs.

RefreshJobCron string

Default: 0 3 * * *

Quartz cron expression for the background license refresh job. Defaults to 03:00 daily, which is frequent enough to propagate Cloud-side state changes (cancellation, plan changes, expiry) within a day while staying well under the Cloud endpoint's rate limit.

RefreshWithinDaysOfExpiry integer

Default: 3

How many days before token expiry the refresh job tries to renew. Defaults to 3 — gives the scheduled job 3 daily opportunities to renew before a stale token actually expires.

Logging object

Standard .NET Logging configuration. See https://learn.microsoft.com/dotnet/core/extensions/logging-configuration for the full reference. Provider-specific sub-blocks (Console, Debug, EventSource, etc.) are accepted but not enumerated here.

LogLevel object

Map of log category names (or category prefixes) to minimum log levels. 'Default' applies when no more-specific category matches; longer keys override shorter ones (Microsoft.AspNetCore beats Microsoft beats Default).

additional keys → string

Allowed values: Trace, Debug, Information, Warning, Error, Critical, None

OpenIdConnect object

All OpenIdConnect / OpenIddict-related runtime settings: the symmetric key used to encrypt issued JWTs, the RSA keypair used to sign them, and the optional external SSO providers (Microsoft / Google / Okta / Auth0 / GitHub) the Server proxies authentication through.

ExternalLoginProviders object

Optional external SSO providers. SSO providers are a paid feature and are honoured only when the active license tier permits it; on tiers that don't include SSO, this block is silently zeroed out before the providers are registered.

Auth0 object

Auth0 login provider.

ClientId string

OAuth2 client ID issued by the provider's developer portal.

ClientSecret string

OAuth2 client secret paired with ClientId. Sensitive — source via the External Settings provider in production.

Enabled boolean

When true, surface this provider as a sign-in option on the Dashboard. Defaults to false — providers must be opted-in explicitly per deployment.

Issuer string

Auth0 tenant issuer URL, typically https://{your-tenant}.auth0.com/. Required when Enabled is true.

RedirectUri string

Redirect URI registered with the provider. Must match the URI configured at the provider's end exactly; typically {Server.Host}/signin-{provider}.

GitHub object

GitHub login provider.

ClientId string

OAuth2 client ID issued by the provider's developer portal.

ClientSecret string

OAuth2 client secret paired with ClientId. Sensitive — source via the External Settings provider in production.

Enabled boolean

When true, surface this provider as a sign-in option on the Dashboard. Defaults to false — providers must be opted-in explicitly per deployment.

RedirectUri string

Redirect URI registered with the provider. Must match the URI configured at the provider's end exactly; typically {Server.Host}/signin-{provider}.

Google object

Google login provider.

ClientId string

OAuth2 client ID issued by the provider's developer portal.

ClientSecret string

OAuth2 client secret paired with ClientId. Sensitive — source via the External Settings provider in production.

Enabled boolean

When true, surface this provider as a sign-in option on the Dashboard. Defaults to false — providers must be opted-in explicitly per deployment.

RedirectUri string

Redirect URI registered with the provider. Must match the URI configured at the provider's end exactly; typically {Server.Host}/signin-{provider}.

Microsoft object

Microsoft (Entra ID / Azure AD) login provider.

ClientId string

OAuth2 client ID issued by the provider's developer portal.

ClientSecret string

OAuth2 client secret paired with ClientId. Sensitive — source via the External Settings provider in production.

Enabled boolean

When true, surface this provider as a sign-in option on the Dashboard. Defaults to false — providers must be opted-in explicitly per deployment.

RedirectUri string

Redirect URI registered with the provider. Must match the URI configured at the provider's end exactly; typically {Server.Host}/signin-{provider}.

TenantId string

Azure AD tenant ID the registered application lives in. Use common for multi-tenant apps, or a specific tenant GUID for single-tenant apps. Required when Enabled is true.

Okta object

Okta login provider.

ClientId string

OAuth2 client ID issued by the provider's developer portal.

ClientSecret string

OAuth2 client secret paired with ClientId. Sensitive — source via the External Settings provider in production.

Enabled boolean

When true, surface this provider as a sign-in option on the Dashboard. Defaults to false — providers must be opted-in explicitly per deployment.

Issuer string

Okta authorization-server issuer URL, typically https://{your-okta-domain}/oauth2/default. Required when Enabled is true.

RedirectUri string

Redirect URI registered with the provider. Must match the URI configured at the provider's end exactly; typically {Server.Host}/signin-{provider}.

TokenEncryption object

Symmetric encryption key used to encrypt the access tokens the Server issues. Required.

SymmetricKey string

PEM-armoured base64-encoded AES-256 symmetric key, surrounded by -----BEGIN SYMMETRIC KEY----- / -----END SYMMETRIC KEY----- markers. Sensitive — production deployments must supply this via the External Settings provider rather than checking it into appsettings.json. The placeholder shipped in the default appsettings.json is for dev only.

TokenSigning object

RSA keypair used to sign the access tokens the Server issues. Required.

RsaPrivateKey string

PEM-armoured RSA private key. Sensitive — must be supplied via the External Settings provider in production. The placeholder shipped in the default appsettings.json is for dev only.

RsaPublicKey string

PEM-armoured RSA public key matching RsaPrivateKey. Not sensitive, but must be the genuine pair to the private key or token validation will fail.

OrphanedJobCleanup object

Cadence for the background job that reconciles Module Jobs whose owning Runner / Agent has disappeared (process crash, container kill, etc.) so that they don't linger as "running" forever. The reconciler marks orphaned Jobs as failed and frees any locks they held.

CleanupCronExpression string

Default: */10 * * * *

Quartz cron expression for the cleanup job. Defaults to every 10 minutes — frequent enough that operators see a wedged Job get marked failed within a reasonable window, infrequent enough to keep the DB-scan overhead negligible.

ProductionDataSeeder object

Production-time data seeding configuration. Drives what the Server inserts on first start so that a fresh deployment comes up with a working Organization, an admin User, a default Runner + Service Principal, and (on Enterprise) a default Agent + Mission set. Operators rarely change these from the defaults; the typical override is bumping the admin User's password.

Preseeded object

The single nested block that controls preseeding behaviour and identities.

Agent object

Default Agent identity, bound Service Principal credentials, and the set of Mission types to seed as organization-wide Missions targeting that Agent.

Id string | null

Agent ID. Defaults to DefaultAgentId.

Missions array of string

MissionType values seeded as organization-wide missions for the default Agent.

Name string

Default: default

Agent display name. Defaults to "default".

ServicePrincipalClientId string

Default: defaultAgent

Service Principal client ID the Agent authenticates with. Defaults to "defaultAgent".

ServicePrincipalClientSecret string

Default: defaultAgent

Service Principal client secret. Defaults to "defaultAgent" — replace before exposing. Sensitive — source via the External Settings provider in production.

ServicePrincipalId string | null

Bound Service Principal ID. Defaults to DefaultAgentId.

Enabled boolean

When true, the preseed runs on first start. Defaults to false so the seeder is opt-in — typical for Self-Hosted appsettings.json, which enables it for first-time setup and then leaves it enabled because the seed is idempotent.

Organization object

Default Organization identity and name.

Id string | null

Organization ID. Defaults to DefaultId so external IaC can reference it by literal.

Name string

Default: default

Organization display name. Defaults to "default".

Runner object

Default Runner identity and bound Service Principal credentials.

Id string | null

Runner ID. Defaults to DefaultId.

Name string

Default: default

Runner display name. Defaults to "default".

ServicePrincipalClientId string

Default: default

Service Principal client ID the Runner authenticates with. Defaults to "default".

ServicePrincipalClientSecret string

Default: default

Service Principal client secret. Defaults to "default" — replace before exposing the Server to traffic. Sensitive — source via the External Settings provider in production.

ServicePrincipalId string | null

Bound Service Principal ID. Defaults to DefaultId.

Stack object

Default Stack identity and sample Secret seeded under it.

Id string | null

Stack ID. Defaults to DefaultId.

Name string

Default: default

Stack display name. Defaults to "default".

SampleSecretId string | null

Sample Stack Secret ID. Defaults to DefaultId.

SampleSecretName string

Default: sample

Sample Stack Secret name. Defaults to "sample".

SampleSecretValue string

Default: sample

Sample Stack Secret value. Defaults to the placeholder "sample" — replace for any deployment that will see real traffic. Sensitive — source via the External Settings provider in production.

User object

Default admin User identity, email, and initial password.

Email string

Default: [email protected]

Admin email — doubles as the sign-in identifier. Defaults to [email protected]; operators typically change this to a real address so password resets and notifications work end-to-end.

Id string | null

User ID. Defaults to DefaultId.

IsSystemAdministrator boolean

Default: true

When true (default), the preseeded User is granted system-administrator role. Required for the Dashboard's first-login flow to succeed.

Password string

Default: Admin#123

Initial admin password. Defaults to a publicly-known placeholder; operators MUST change this before first start of any deployment exposed to traffic. Sensitive — source via the External Settings provider in production.

Repositories object

Per-entity repository overrides. Each sub-key binds a discrete *RepositorySettings POCO from SnapCd.Server.Core.Settings.Repositories. Almost all are empty placeholders in the default appsettings.json — operators set them only to override per-entity behaviour (typically just for advanced tuning).

Agent object

Per-Agent repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the Agent entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a Agent is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a Agent is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a Agent is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

AgentConnection object

Repository settings for AgentConnection entity. Events are disabled since connections are runtime state, not configuration changes.

EmitCreateEvents boolean

When true (default), publish a CreatedEvent on the bus when a AgentConnection is created.

EmitDeleteEvents boolean

When true (default), publish a DeletedEvent on the bus when a AgentConnection is deleted.

EmitUpdateEvents boolean

When true (default), publish an UpdatedEvent on the bus when a AgentConnection is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

AgentModuleAssignment object

Per-AgentModuleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the AgentModuleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a AgentModuleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a AgentModuleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a AgentModuleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

AgentNamespaceAssignment object

Per-AgentNamespaceAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the AgentNamespaceAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a AgentNamespaceAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a AgentNamespaceAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a AgentNamespaceAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

AgentRoleAssignment object

Per-AgentRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the AgentRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a AgentRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a AgentRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a AgentRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

AgentStackAssignment object

Per-AgentStackAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the AgentStackAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a AgentStackAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a AgentStackAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a AgentStackAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

DependsOnModule object

Per-DependsOnModule repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the DependsOnModule entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a DependsOnModule is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a DependsOnModule is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a DependsOnModule is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

Group object

Per-Group repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the Group entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a Group is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a Group is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a Group is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

GroupAgentRoleAssignment object

Per-GroupAgentRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the GroupAgentRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a GroupAgentRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a GroupAgentRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a GroupAgentRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

GroupGroupMember object

Per-GroupGroupMember repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the GroupGroupMember entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a GroupGroupMember is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a GroupGroupMember is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a GroupGroupMember is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

GroupMember object

Per-GroupMember repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the GroupMember entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a GroupMember is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a GroupMember is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a GroupMember is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

GroupModuleRoleAssignment object

Per-GroupModuleRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the GroupModuleRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a GroupModuleRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a GroupModuleRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a GroupModuleRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

GroupNamespaceRoleAssignment object

Per-GroupNamespaceRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the GroupNamespaceRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a GroupNamespaceRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a GroupNamespaceRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a GroupNamespaceRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

GroupOrganizationRoleAssignment object

Per-GroupOrganizationRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the GroupOrganizationRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a GroupOrganizationRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a GroupOrganizationRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a GroupOrganizationRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

GroupRunnerRoleAssignment object

Per-GroupRunnerRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the GroupRunnerRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a GroupRunnerRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a GroupRunnerRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a GroupRunnerRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

GroupStackRoleAssignment object

Per-GroupStackRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the GroupStackRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a GroupStackRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a GroupStackRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a GroupStackRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

Module object

Per-Module repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the Module entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a Module is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a Module is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a Module is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleExtraFile object

Per-ModuleExtraFile repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleExtraFile entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleExtraFile is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleExtraFile is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleExtraFile is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleHook object

Per-ModuleHook repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleHook entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleHook is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleHook is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleHook is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleInput object

Per-ModuleInput repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleInput entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleInput is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleInput is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleInput is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleInputFromDefinition object

Per-ModuleInputFromDefinition repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleInputFromDefinition entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleInputFromDefinition is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleInputFromDefinition is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleInputFromDefinition is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleInputFromLiteral object

Per-ModuleInputFromLiteral repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleInputFromLiteral entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleInputFromLiteral is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleInputFromLiteral is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleInputFromLiteral is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleInputFromNamespace object

Per-ModuleInputFromNamespace repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleInputFromNamespace entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleInputFromNamespace is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleInputFromNamespace is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleInputFromNamespace is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleInputFromOutput object

Per-ModuleInputFromOutput repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleInputFromOutput entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleInputFromOutput is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleInputFromOutput is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleInputFromOutput is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleInputFromOutputSet object

Per-ModuleInputFromOutputSet repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleInputFromOutputSet entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleInputFromOutputSet is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleInputFromOutputSet is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleInputFromOutputSet is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleInputFromSecret object

Per-ModuleInputFromSecret repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleInputFromSecret entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleInputFromSecret is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleInputFromSecret is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleInputFromSecret is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleJob object

Per-ModuleJob repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleJob entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleJob is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleJob is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleJob is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleJobApproval object

Per-ModuleJobApproval repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleJobApproval entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleJobApproval is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleJobApproval is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleJobApproval is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleMission object

Per-ModuleMission repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleMission entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleMission is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleMission is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleMission is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModulePulumiArrayFlag object

Per-ModulePulumiArrayFlag repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModulePulumiArrayFlag entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModulePulumiArrayFlag is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModulePulumiArrayFlag is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModulePulumiArrayFlag is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModulePulumiFlag object

Per-ModulePulumiFlag repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModulePulumiFlag entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModulePulumiFlag is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModulePulumiFlag is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModulePulumiFlag is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleRoleAssignment object

Per-ModuleRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleSecret object

Per-ModuleSecret repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleSecret entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleSecret is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleSecret is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleSecret is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleTerraformArrayFlag object

Per-ModuleTerraformArrayFlag repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleTerraformArrayFlag entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleTerraformArrayFlag is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleTerraformArrayFlag is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleTerraformArrayFlag is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ModuleTerraformFlag object

Per-ModuleTerraformFlag repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ModuleTerraformFlag entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ModuleTerraformFlag is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ModuleTerraformFlag is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ModuleTerraformFlag is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

Namespace object

Per-Namespace repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the Namespace entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a Namespace is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a Namespace is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a Namespace is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

NamespaceExtraFile object

Per-NamespaceExtraFile repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the NamespaceExtraFile entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a NamespaceExtraFile is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a NamespaceExtraFile is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a NamespaceExtraFile is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

NamespaceHook object

Per-NamespaceHook repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the NamespaceHook entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a NamespaceHook is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a NamespaceHook is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a NamespaceHook is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

NamespaceInput object

Per-NamespaceInput repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the NamespaceInput entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a NamespaceInput is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a NamespaceInput is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a NamespaceInput is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

NamespaceInputFromDefinition object

Per-NamespaceInputFromDefinition repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the NamespaceInputFromDefinition entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a NamespaceInputFromDefinition is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a NamespaceInputFromDefinition is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a NamespaceInputFromDefinition is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

NamespaceInputFromLiteral object

Per-NamespaceInputFromLiteral repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the NamespaceInputFromLiteral entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a NamespaceInputFromLiteral is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a NamespaceInputFromLiteral is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a NamespaceInputFromLiteral is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

NamespaceInputFromSecret object

Per-NamespaceInputFromSecret repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the NamespaceInputFromSecret entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a NamespaceInputFromSecret is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a NamespaceInputFromSecret is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a NamespaceInputFromSecret is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

NamespaceMission object

Per-NamespaceMission repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the NamespaceMission entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a NamespaceMission is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a NamespaceMission is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a NamespaceMission is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

NamespacePulumiArrayFlag object

Per-NamespacePulumiArrayFlag repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the NamespacePulumiArrayFlag entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a NamespacePulumiArrayFlag is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a NamespacePulumiArrayFlag is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a NamespacePulumiArrayFlag is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

NamespacePulumiFlag object

Per-NamespacePulumiFlag repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the NamespacePulumiFlag entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a NamespacePulumiFlag is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a NamespacePulumiFlag is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a NamespacePulumiFlag is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

NamespaceRoleAssignment object

Per-NamespaceRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the NamespaceRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a NamespaceRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a NamespaceRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a NamespaceRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

NamespaceSecret object

Per-NamespaceSecret repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the NamespaceSecret entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a NamespaceSecret is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a NamespaceSecret is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a NamespaceSecret is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

NamespaceTerraformArrayFlag object

Per-NamespaceTerraformArrayFlag repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the NamespaceTerraformArrayFlag entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a NamespaceTerraformArrayFlag is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a NamespaceTerraformArrayFlag is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a NamespaceTerraformArrayFlag is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

NamespaceTerraformFlag object

Per-NamespaceTerraformFlag repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the NamespaceTerraformFlag entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a NamespaceTerraformFlag is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a NamespaceTerraformFlag is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a NamespaceTerraformFlag is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

Organization object

Per-Organization repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the Organization entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a Organization is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a Organization is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a Organization is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

OrganizationMission object

Per-OrganizationMission repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the OrganizationMission entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a OrganizationMission is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a OrganizationMission is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a OrganizationMission is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

OrganizationRoleAssignment object

Per-OrganizationRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the OrganizationRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a OrganizationRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a OrganizationRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a OrganizationRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

OrganizationUser object

Per-OrganizationUser repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the OrganizationUser entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a OrganizationUser is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a OrganizationUser is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a OrganizationUser is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

Output object

Per-Output repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the Output entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a Output is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a Output is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a Output is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

OutputSet object

Per-OutputSet repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the OutputSet entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a OutputSet is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a OutputSet is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a OutputSet is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

PreviewFeatureAcceptance object

Per-PreviewFeatureAcceptance repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the PreviewFeatureAcceptance entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a PreviewFeatureAcceptance is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a PreviewFeatureAcceptance is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a PreviewFeatureAcceptance is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

RoleAssignment object

Per-RoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the RoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a RoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a RoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a RoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

Runner object

Per-Runner repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the Runner entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a Runner is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a Runner is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a Runner is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

RunnerConnection object

Repository settings for RunnerConnection entity. Events are disabled since connections are runtime state, not configuration changes.

EmitCreateEvents boolean

When true (default), publish a CreatedEvent on the bus when a RunnerConnection is created.

EmitDeleteEvents boolean

When true (default), publish a DeletedEvent on the bus when a RunnerConnection is deleted.

EmitUpdateEvents boolean

When true (default), publish an UpdatedEvent on the bus when a RunnerConnection is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

RunnerConnectionJob object

Repository settings for RunnerConnectionJob entity. Events are disabled since this tracks runtime job-to-connection associations, not configuration changes.

EmitCreateEvents boolean

When true (default), publish a CreatedEvent on the bus when a RunnerConnectionJob is created.

EmitDeleteEvents boolean

When true (default), publish a DeletedEvent on the bus when a RunnerConnectionJob is deleted.

EmitUpdateEvents boolean

When true (default), publish an UpdatedEvent on the bus when a RunnerConnectionJob is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

RunnerModuleAssignment object

Per-RunnerModuleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the RunnerModuleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a RunnerModuleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a RunnerModuleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a RunnerModuleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

RunnerNamespaceAssignment object

Per-RunnerNamespaceAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the RunnerNamespaceAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a RunnerNamespaceAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a RunnerNamespaceAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a RunnerNamespaceAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

RunnerRoleAssignment object

Per-RunnerRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the RunnerRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a RunnerRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a RunnerRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a RunnerRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

RunnerStackAssignment object

Per-RunnerStackAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the RunnerStackAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a RunnerStackAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a RunnerStackAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a RunnerStackAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

Secret object

Per-Secret repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the Secret entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a Secret is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a Secret is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a Secret is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ServicePrincipal object

Per-ServicePrincipal repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ServicePrincipal entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ServicePrincipal is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ServicePrincipal is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ServicePrincipal is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ServicePrincipalAgentRoleAssignment object

Per-ServicePrincipalAgentRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ServicePrincipalAgentRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ServicePrincipalAgentRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ServicePrincipalAgentRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ServicePrincipalAgentRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ServicePrincipalGroupMember object

Per-ServicePrincipalGroupMember repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ServicePrincipalGroupMember entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ServicePrincipalGroupMember is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ServicePrincipalGroupMember is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ServicePrincipalGroupMember is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ServicePrincipalModuleRoleAssignment object

Per-ServicePrincipalModuleRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ServicePrincipalModuleRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ServicePrincipalModuleRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ServicePrincipalModuleRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ServicePrincipalModuleRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ServicePrincipalNamespaceRoleAssignment object

Per-ServicePrincipalNamespaceRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ServicePrincipalNamespaceRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ServicePrincipalNamespaceRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ServicePrincipalNamespaceRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ServicePrincipalNamespaceRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ServicePrincipalOrganizationRoleAssignment object

Per-ServicePrincipalOrganizationRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ServicePrincipalOrganizationRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ServicePrincipalOrganizationRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ServicePrincipalOrganizationRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ServicePrincipalOrganizationRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ServicePrincipalRunnerRoleAssignment object

Per-ServicePrincipalRunnerRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ServicePrincipalRunnerRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ServicePrincipalRunnerRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ServicePrincipalRunnerRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ServicePrincipalRunnerRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

ServicePrincipalStackRoleAssignment object

Per-ServicePrincipalStackRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the ServicePrincipalStackRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a ServicePrincipalStackRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a ServicePrincipalStackRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a ServicePrincipalStackRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

SourceRefresherPreselection object

Per-SourceRefresherPreselection repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the SourceRefresherPreselection entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a SourceRefresherPreselection is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a SourceRefresherPreselection is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a SourceRefresherPreselection is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

Stack object

Per-Stack repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the Stack entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a Stack is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a Stack is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a Stack is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

StackMission object

Per-StackMission repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the StackMission entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a StackMission is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a StackMission is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a StackMission is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

StackRoleAssignment object

Per-StackRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the StackRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a StackRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a StackRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a StackRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

StackSecret object

Per-StackSecret repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the StackSecret entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a StackSecret is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a StackSecret is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a StackSecret is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

User object

Per-User repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the User entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a User is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a User is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a User is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

UserAgentRoleAssignment object

Per-UserAgentRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the UserAgentRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a UserAgentRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a UserAgentRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a UserAgentRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

UserGroupMember object

Per-UserGroupMember repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the UserGroupMember entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a UserGroupMember is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a UserGroupMember is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a UserGroupMember is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

UserModuleRoleAssignment object

Per-UserModuleRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the UserModuleRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a UserModuleRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a UserModuleRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a UserModuleRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

UserNamespaceRoleAssignment object

Per-UserNamespaceRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the UserNamespaceRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a UserNamespaceRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a UserNamespaceRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a UserNamespaceRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

UserOrganizationRoleAssignment object

Per-UserOrganizationRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the UserOrganizationRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a UserOrganizationRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a UserOrganizationRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a UserOrganizationRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

UserRunnerRoleAssignment object

Per-UserRunnerRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the UserRunnerRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a UserRunnerRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a UserRunnerRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a UserRunnerRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

UserStackRoleAssignment object

Per-UserStackRoleAssignment repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the UserStackRoleAssignment entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a UserStackRoleAssignment is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a UserStackRoleAssignment is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a UserStackRoleAssignment is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

Variable object

Per-Variable repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the Variable entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a Variable is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a Variable is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a Variable is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

VariableSet object

Per-VariableSet repository tuning. Almost always left at defaults — operators override only when they need to opt out of bus events or change the event TTL for the VariableSet entity specifically.

EmitCreateEvents boolean

Default: true

When true (default), publish a CreatedEvent on the bus when a VariableSet is created.

EmitDeleteEvents boolean

Default: true

When true (default), publish a DeletedEvent on the bus when a VariableSet is deleted.

EmitUpdateEvents boolean

Default: true

When true (default), publish an UpdatedEvent on the bus when a VariableSet is updated.

EventTtl string

Time-to-live for emitted events from this entity. Defaults to 30 minutes — increase only for entities whose downstream consumers might be offline long enough to miss the default window.

SecretStore object

Selects and configures the backing store for Snap CD Secret resources — the encrypted store where Stack, Namespace, and Module Secret values, plus sensitive Output Sets, live at rest. The block matching Provider is the only one read; the other is ignored. The Migrator utility moves secrets between stores in-place when an operator changes Provider.

AzureKeyVault object

Settings specific to the AzureKeyVault provider.

CredentialOptions object

Configures how the Azure Key Vault secret store authenticates. Property type at runtime is Azure.Identity.DefaultAzureCredentialOptions; the schema below covers the operator-relevant subset of its surface. Defaults follow Azure.Identity — most credential types are tried in order unless explicitly excluded.

AdditionallyAllowedTenants array of string

Tenant IDs (or the wildcard "*") this credential is allowed to acquire tokens for in addition to TenantId. Required for multi-tenant scenarios.

AuthorityHost string | null

Azure AD authority URL. Override for sovereign clouds — e.g. https://login.microsoftonline.us for US Government, https://login.partner.microsoftonline.cn for China. Defaults to the public cloud authority.

DisableInstanceDiscovery boolean

When true, disables Azure AD instance discovery. Required for disconnected / air-gapped environments where login.microsoftonline.com is unreachable; also useful when running against ADFS rather than Azure AD.

ExcludeAzureCliCredential boolean

Skip the Azure CLI credential. Recommended true on production hosts where no az login session exists.

ExcludeAzureDeveloperCliCredential boolean

Skip the Azure Developer CLI (azd) credential. Recommended true outside of developer machines.

ExcludeAzurePowerShellCredential boolean

Skip the Azure PowerShell credential. Recommended true outside of developer machines.

ExcludeBrokerCredential boolean

Skip the broker (WAM) credential. Almost always true on non-Windows hosts and on Windows hosts without the WAM broker installed.

ExcludeEnvironmentCredential boolean

Skip the environment-variable-based credential (AZURE_CLIENT_ID / AZURE_TENANT_ID / AZURE_CLIENT_SECRET, etc.) when probing for an Azure identity.

ExcludeInteractiveBrowserCredential boolean

Skip the interactive browser credential. Almost always true on server-class hosts — interactive sign-in won't work without a desktop session.

ExcludeManagedIdentityCredential boolean

Skip the Managed Identity credential. Set true when not running on Azure-hosted compute (App Service, AKS with MI, Azure VMs, etc.).

ExcludeSharedTokenCacheCredential boolean

Skip the developer shared-token-cache credential. Recommended true outside of developer machines.

ExcludeVisualStudioCodeCredential boolean

Skip the VS Code credential. Recommended true outside of developer machines.

ExcludeVisualStudioCredential boolean

Skip the Visual Studio credential. Recommended true outside of developer machines.

ExcludeWorkloadIdentityCredential boolean

Skip the Workload Identity Federation credential. Set true when not running on AKS with workload identity configured.

ManagedIdentityClientId string | null

Client ID of a user-assigned managed identity. Set when the host has multiple user-assigned MIs attached and Snap CD should use a specific one. Leave null to use the system-assigned MI.

TenantId string | null

Optional fallback tenant ID applied to credential types that don't have a more-specific tenant override (e.g. InteractiveBrowserTenantId). Leave null to let each credential resolve its own tenant.

WorkloadIdentityClientId string | null

Client ID of the Azure AD application federated to the AKS workload identity. Required when ExcludeWorkloadIdentityCredential is false and the host's Service Account token federates to a specific app registration.

DefaultInputKeyVaultUrl string

Default Key Vault URL used when fetching a Secret value at runtime. Per-Secret overrides are possible via metadata; this is the fallback.

DefaultOutputKeyVaultUrl string

Default Key Vault URL used when writing a Secret value (including sensitive Module outputs). Often the same as DefaultInputKeyVaultUrl; split when read- and write-paths need different vaults for compliance or geo-replication reasons.

ExplicitCredentials object

Explicit client_id / client_secret / tenant_id credentials. Required when UseExplicitCredentials is true. Sensitive — source via the External Settings provider in production.

ClientId string

The Azure AD application's client ID.

ClientSecret string

The Azure AD application's client secret. Sensitive — source via the External Settings provider.

TenantId string

Azure AD tenant ID hosting the application.

UseExplicitCredentials boolean

When true, bypass DefaultAzureCredential and use the client-credentials flow against ExplicitCredentials instead. Use when the host can't run as a managed identity and the credential chain doesn't resolve.

EnableMigrator boolean

When true, exposes the Secret Migrator utility (under System nav) for privileged users to copy secrets between the SQL and Azure Key Vault stores. Keep false by default.

Migrator object

Tuning knobs for the Secret Migrator utility. Ignored unless EnableMigrator is true.

MaxParallelism integer

Default: 8

Max concurrent Azure Key Vault calls during planning (existence probes) and execution (copies). AKV's default throttle is ~2000 ops / 10 s per vault — 8–16 is comfortable, 32 is an aggressive upper bound.

Provider string

Default: AzureKeyVault

Allowed values: AzureKeyVault, SqlServer

Backing store for Secret values. Defaults to AzureKeyVault; on Self-Hosted Community the License Service force-substitutes SqlServer at runtime since AKV is a paid feature.

SqlServer object | null

Settings specific to the SqlServer provider.

SymmetricKey string | null

Base64-encoded 32-byte (AES-256) symmetric key used to encrypt secret values at rest.

Server object

Settings describing the Server's own runtime identity — its public URL and the unique per-process instance ID used to disambiguate replicas on the message bus.

Host string

Public base URL of the Server (scheme + host + optional port), used for token issuance (set as the OpenIddict issuer claim), email link generation, and self-referential redirects. Required. Must be reachable from Runners, Agents and the Dashboard.

InstanceId string (uuid)

Unique identifier for this Server process. Generated automatically at startup (a fresh GUID per process) by the predefined configuration provider — operators should not set this in appsettings.json. Used to distinguish per-process MassTransit consumer endpoints when multiple Server replicas share one bus.

ServiceBus object

Configuration for the MassTransit service bus that carries internal events between Server components (saga endpoints, runner / agent dispatch, log fanout, etc.). Two transports are supported, selected by BusType: SqlServer — the default. Routes events through SQL Server tables sharing the application database. Suitable for single-region deployments up to moderate scale; requires no additional infrastructure. AzureServiceBus — routes events through an Azure Service Bus namespace. Suitable for higher-throughput deployments and any topology that wants the bus on managed infrastructure separate from SQL Server.

BusType string

Default: SqlServer

Allowed values: AzureServiceBus, SqlServer

Which transport carries internal events. SqlServer is the default; AzureServiceBus is the alternative for higher-throughput deployments.

EndpointsPrefix string

Prefix prepended to every consumer queue name. Useful for sharing one bus across multiple Snap CD deployments (each with a distinct prefix) without queue-name collisions.

EndpointsPrefixIncludeNameSpace boolean

When true, the consumer's .NET namespace is included in the generated queue name in addition to EndpointsPrefix. Defaults to false.

SagaConcurrencyLimit integer

Default: 20

Maximum number of concurrent messages processed by saga endpoints. Higher values can improve throughput but increase database load.

TransportOptions object

Per-transport configuration. The block matching BusType is the only one consumed; the other is ignored. Both transports' option types come straight from MassTransit (AzureServiceBusTransportOptions / SqlTransportOptions) so the full MassTransit-side surface remains available to operators — the generated JSON Schema documents the operator-relevant fields via hand-authored fragments.

AzureServiceBus object

Azure Service Bus transport configuration. Required when ServiceBus.BusType is AzureServiceBus. Property type at runtime is MassTransit.AzureServiceBusTransportOptions; the schema below covers the operator-settable surface (a single ConnectionString as of MassTransit 8.x).

ConnectionString string

Azure Service Bus namespace connection string. Accepts either the URI form (sb://{namespace}.servicebus.windows.net — uses managed identity via DefaultAzureCredential) or the standard SAS form (Endpoint=sb://...;SharedAccessKeyName=...;SharedAccessKey=...). Sensitive — production deployments should source this via the External Settings provider.

SqlServer object

SQL Server transport configuration. Required when ServiceBus.BusType is SqlServer. Property type at runtime is MassTransit.SqlTransport.SqlTransportOptions; the schema below covers its full declared surface.

AdminPassword string | null

Password for AdminUsername. Sensitive — source via the External Settings provider.

AdminUsername string | null

SQL login MassTransit uses during transport maintenance (schema migrations, queue creation). Falls back to Username when null.

ConnectionLimit integer | null

Maximum number of concurrent SQL connections the transport opens. Null lets MassTransit pick a default based on the configured concurrency.

ConnectionString string | null

Connection string for the SQL Server hosting the transport tables. When null (the default), the app's top-level ConnectionString is reused so transport tables live in the same database as application data.

Database string | null

Database name. Ignored when ConnectionString is set.

DisableMaintenance boolean

When true, the Server skips running MassTransit's transport-maintenance hosted service. Use when maintenance is performed out-of-band (e.g. by a dedicated ops process) and the Server should only consume / produce.

Host string | null

SQL Server host. Ignored when ConnectionString is set.

Password string | null

Password for the SQL login. Sensitive — source via the External Settings provider in production. Ignored when ConnectionString is set.

Port integer | null

SQL Server port. Ignored when ConnectionString is set.

Role string | null

Optional SQL role MassTransit assumes when running maintenance operations.

Schema string | null

SQL schema for transport tables. Defaults to "transport".

Username string | null

SQL login the transport runs as. Ignored when ConnectionString is set.

SourceRefresh object

Cadence and timeout for the background job that polls Module source repositories for new commits. Defaults are tuned for a moderate-sized organization with a handful of source repositories; large fleets with many Modules per repository may want to lengthen the interval to reduce SCM-API load.

RefreshIntervalCronExpression string

Default: */5 * * * *

Quartz cron expression for the source-refresh job. Defaults to every 5 minutes — fast enough that operators see new commits reflected quickly, slow enough not to hammer the SCM provider's rate limits.

TimeoutSeconds integer

Default: 120

Per-repository timeout for the refresh job, in seconds. Defaults to 120 — generous for a healthy clone but short enough that one wedged repository can't stall the rest of the run.

Turnstile object

Cloudflare Turnstile (bot-protection challenge) configuration for the Dashboard's public sign-up and password-reset flows. Paid feature on Self-Hosted — gated by license tier and silently no-ops on tiers that don't include it.

IsEnabled boolean

Enable or disable Turnstile verification globally.

SecretKey string

Cloudflare Turnstile secret key (private, used for server-side verification).

SiteKey string

Cloudflare Turnstile site key (public, used in widget).

Theme string

Default: auto

Widget theme: "light", "dark", or "auto" (matches app theme).

Last updated on