FirstInstance vs DefaultInstance
⚙️Configuration🏬Self-hosted❓Question❌Unsolved
FirstInstance vs DefaultInstance
Hello,
I am trying to figure out how to secure/harden my zitadel deployment in kubernetes. I am using helm charts.
I have been studying the configuration yaml file. And I ran into a confusion with
Question 1: After deploying Zitadel to kubernetes via helm with default configurations, what am I logging into? FirstInstance or DefaultInstance?
Here's what I understood so far, please correct me if I'm wrong:
- Configuring
- To configure the FirstInstance, I have to configure steps.yaml file.
-
Question 2: Does that mean I have to create a new instance so that I can have the
Question 3: What's the recommended way to configure / maintain the instances? Because if the answer to question 2 is "yes", then it seems like I should ignore the
I also saw this thread - https://discord.com/channels/927474939156643850/1116253718980075600/1116361734404440125. Sorry, but it didn't clear my confusion.
Hello,
I am trying to figure out how to secure/harden my zitadel deployment in kubernetes. I am using helm charts.
I have been studying the configuration yaml file. And I ran into a confusion with
DefaultInstanceDefaultInstance and FirstInstanceFirstInstance.Question 1: After deploying Zitadel to kubernetes via helm with default configurations, what am I logging into? FirstInstance or DefaultInstance?
Here's what I understood so far, please correct me if I'm wrong:
- Configuring
DefaultInstanceDefaultInstance in the YAML file will not affect the FirstInstance - but it would affect the instances created after that.- To configure the FirstInstance, I have to configure steps.yaml file.
-
PasswordComplexityPolicyPasswordComplexityPolicy is in DefaultInstanceDefaultInstance configuration. Not FirstInstanceFirstInstance.Question 2: Does that mean I have to create a new instance so that I can have the
DefaultInstance.PasswordComplexityPolicyDefaultInstance.PasswordComplexityPolicy?Question 3: What's the recommended way to configure / maintain the instances? Because if the answer to question 2 is "yes", then it seems like I should ignore the
FirstInstanceFirstInstance and make a new instance and use only that.I also saw this thread - https://discord.com/channels/927474939156643850/1116253718980075600/1116361734404440125. Sorry, but it didn't clear my confusion.
GitHub
ZITADEL - Identity infrastructure, simplified for you. - zitadel/zitadel
