Settings

What This Is For

Settings is the largest single screen in the console — sectioned configuration for nearly everything that is not a resource in its own right. Account and appearance (theme, language, date format); node enrollment and WireGuard VPN configuration for remote nodes; mTLS agent authentication; registry credentials for pulling images from private registries; OAuth social login providers and Slack/email notification integrations; invite codes; the vulnerability scanner’s upgrade-recommendation behaviour; audit and notification retention windows; Docker system cleanup (prune unused containers, images, networks and volumes, scoped to your tenant); and a set of Consul-availability and TLS-certificate diagnostic tools for testing failure modes before they happen in production. Each section loads, saves and reports its own errors independently.

How You Get Here

Sidebar section Admin → Settings.

What It Looks Like

What It Shows

/settings (Settings)

• settings:settings.1-day — “1 day”
• settings:settings.1-minute — “1 minute”
• settings:settings.1-week — “1 week”
• settings:settings.10-seconds — “10 seconds”
• settings:settings.168-hours-1-week — “168 hours (1 week)”
• settings:settings.2-weeks — “2 weeks”
• settings:settings.24-hours-1-day — “24 hours (1 day)”
• settings:settings.3-days — “3 days”
• settings:settings.30-days — “30 days”
• settings:settings.30-seconds — “30 seconds”
• settings:settings.336-hours-2-weeks — “336 hours (2 weeks)”
• settings:settings.48-hours-2-days — “48 hours (2 days)”
• settings:settings.5-minutes — “5 minutes”
• settings:settings.72-hours-3-days — “72 hours (3 days)”
• settings:settings.account — “Account”
• settings:settings.actions — “Actions”
• settings:settings.active — “Active”
• settings:settings.active-2 — “(Active)”
• settings:settings.active-fallback — “Active (Fallback)”
• settings:settings.actual-final-state — “Actual Final State”
• settings:settings.add-registry-credential — “+ Add Registry Credential”
• settings:settings.admin — “Admin”
• settings:settings.agent-client-certificate-pem — “Agent Client Certificate (PEM)”
• settings:settings.ai-assistant — “AI Assistant”
• settings:settings.alerts — “#alerts”
• settings:settings.alerts-example-com — “alerts@example.com”
• settings:settings.api-key — “API Key”
• settings:settings.appearance — “Appearance”
• settings:settings.are-you-sure-you-want — “Are you sure you want to remove the following resources?”
• settings:settings.athena-ai — “Athena AI”
• settings:settings.audit-retention — “Audit Retention”
• settings:settings.authentication — “Authentication”
• settings:settings.authentication-setup — “Authentication Setup”
• settings:settings.auto-refresh-dashboard-data — “Auto-refresh dashboard data”
• settings:settings.beta-versions-may-contain-bugs — “Beta versions may contain bugs or breaking changes. Use with caution in production environments.”
• settings:settings.boltdb-cache-is — “BoltDB cache is”
• settings:settings.bot-token — “Bot Token”
• settings:settings.bot-username — “Bot Username”
• settings:settings.cache-age — “Cache Age:”
• settings:settings.cache-mode — “Cache Mode:”
• settings:settings.callback-url-add-this-to — “Callback URL (add this to your”
• settings:settings.cancel — “Cancel”
• settings:settings.chat-write — “chat:write”
• settings:settings.claude-cli-authentication — “Claude CLI Authentication”
• settings:settings.claude-login — “claude login”
• settings:settings.cli-oauth-authenticated — “CLI OAuth authenticated”
• settings:settings.click-simulate-rapid-consul-changes — “Click "Simulate Rapid Consul Changes" to test event ordering.”
• settings:settings.client-id — “Client ID”
• settings:settings.client-secret — “Client Secret”
• settings:settings.cluster — “Cluster”
• settings:settings.cluster-status — “Cluster Status”
• settings:settings.code — “Code”
• settings:settings.completed-restart-to-see-the — “Completed! Restart to see the welcome guide again.”
• settings:settings.configure — “Configure”
• settings:settings.configure-a-daily-backup-schedule — “Configure a daily backup schedule with timezone-aware overdue detection.”
• settings:settings.configure-a-webhook-url-to — “Configure a webhook URL to receive notifications about deployment events.”
• settings:settings.configure-an-anthropic-api-key — “Configure an Anthropic API key for the organization.”
• settings:settings.configure-and-test-your-consul — “Configure and test your Consul ACL token. When Consul ACLs are enabled, a valid token is required for all operations.”
• settings:settings.configure-credentials-for-private-container — “Configure credentials for private container registries (GHCR, Docker Hub private repos, etc.). These credentials are used when pulling images for deployments.”
• settings:settings.configure-how-the-security-scanner — “Configure how the security scanner checks for image upgrades and vulnerabilities.”
• settings:settings.configure-mutual-tls-mtls-for — “Configure mutual TLS (mTLS) for secure communication between control plane and agents. When enabled, agents must present a valid client certificate to connect.”
• settings:settings.configure-smtp-and-slack-credentials — “Configure SMTP and Slack credentials here. These settings serve as platform defaults for the platform. SRE-specific routing rules (channels, recipients by severity) are configured in the SRE Automation page.”
• settings:settings.configure-social-login-providers-client — “Configure social login providers. Client IDs and secrets are stored securely in Vault.”
• settings:settings.configure-your-organizations-smtp-and — “Configure your organization’s SMTP and Slack settings for email notifications and alerts.”
• settings:settings.configured — “Configured”
• settings:settings.confirm-prune — “Confirm Prune”
• settings:settings.confirm-prune-operation — “Confirm Prune Operation”
• settings:settings.connected — “Connected”
• settings:settings.connection-test-log — “Connection Test Log”
• settings:settings.console-anthropic-com — “console.anthropic.com”
• settings:settings.consul-acl-token — “Consul ACL Token”
• settings:settings.consul-acl-token-configuration — “Consul ACL Token Configuration”
• settings:settings.consul-acls-enabled — “Consul ACLs Enabled”
• settings:settings.consul-availability-log — “Consul Availability Log”
• settings:settings.consul-availability-testing — “Consul Availability Testing”
• settings:settings.consul-connection-status — “Consul Connection Status”
• settings:settings.consul-watch-event-ordering — “Consul Watch Event Ordering”
• settings:settings.consul-watch-log — “Consul Watch Log”
• settings:settings.containers-removed — “Containers removed:”
• settings:settings.containers-removes-stopped-containers — “Containers: Removes stopped containers”
• settings:settings.continue-setup — “Continue Setup”
• settings:settings.control-plane-url — “Control Plane URL”
• settings:settings.copy — “Copy”
• settings:settings.copy-code — “Copy code”
• settings:settings.copy-the-callback-url-shown — “Copy the Callback URL shown above and add it as an authorized redirect URI”
• settings:settings.copy-to-clipboard — “Copy to clipboard”
• settings:settings.create-an-oauth-app-in — “Create an OAuth app in the provider’s developer console”
• settings:settings.create-invite — “Create Invite”
• settings:settings.create-invite-codes-so-new — “Create invite codes so new users can join your organization during signup.”
• settings:settings.create-select-app-oauth-permissions — “→ Create/Select App → OAuth & Permissions → Bot Token Scopes → add”
• settings:settings.created — “Created”
• settings:settings.creating — “Creating…”
• settings:settings.credential-name — “Credential Name”
• settings:settings.current-client-id — “Current Client ID”
• settings:settings.current-leader — “Current Leader:”
• settings:settings.danger-zone — “Danger Zone”
• settings:settings.dark — “Dark”
• settings:settings.data-refresh — “Data Refresh”
• settings:settings.date-format — “Date Format”
• settings:settings.default-channel — “Default Channel”
• settings:settings.default-email — “Default Email”
• settings:settings.default-recipient — “Default Recipient”
• settings:settings.delete — “Delete”
• settings:settings.developer — “Developer”
• settings:settings.disabled — “Disabled”
• settings:settings.disabled-2 — “(Disabled)”
• settings:settings.dismiss — “Dismiss”
• settings:settings.e-g-ghcr-io-or — “e.g., ghcr.io or registry.example.com”
• settings:settings.e-g-my-ghcr — “e.g., my-ghcr”
• settings:settings.email-configuration — “Email Configuration”
• settings:settings.email-for-notifications-optional — “Email for notifications (optional)”
• settings:settings.enable-browser-notifications — “Enable browser notifications”
• settings:settings.enable-consul-acls-to-configure — “Enable Consul ACLs to configure token authentication”
• settings:settings.enable-mtls-to-configure-certificate — “Enable mTLS to configure certificate authentication”
• settings:settings.enable-node-enrollment — “Enable Node Enrollment”
• settings:settings.enable-the-provider-and-save — “Enable the provider and save”
• settings:settings.enabled — “Enabled”
• settings:settings.enrollment-disabled — “Enrollment Disabled”
• settings:settings.enrollment-enabled — “Enrollment Enabled”
• settings:settings.enter-a-valid-url-starting — “Enter a valid URL starting with http:// or https://”
• settings:settings.enter-client-id — “Enter Client ID”
• settings:settings.enter-client-secret — “Enter Client Secret”
• settings:settings.enter-consul-acl-token-e — “Enter Consul ACL token (e.g., consul-token-xxxxx)”
• settings:settings.enter-new-client-id-to — “Enter new Client ID to update”
• settings:settings.enter-new-value-to-update — “(enter new value to update)”
• settings:settings.enter-the-client-id-and — “Enter the Client ID and Client Secret from the provider”
• settings:settings.enters-node-name-and-receives — “Enters node name and receives a bootstrap command”
• settings:settings.error-code — “Error code:”
• settings:settings.estimated-space-to-reclaim — “Estimated space to reclaim:”
• settings:settings.eu-11-01-2026 — “EU (11.01.2026)”
• settings:settings.event-log — “Event Log”
• settings:settings.events-queue-processed-in-order — “Events Queue (processed in order)”
• settings:settings.execute-prune — “Execute Prune”
• settings:settings.exhausted — “Exhausted”
• settings:settings.expected-final-state — “Expected Final State”
• settings:settings.expired — “Expired”
• settings:settings.expires — “Expires”
• settings:settings.expires-in — “Expires In”
• settings:settings.failed-to-load-wireguard-settings — “Failed to load WireGuard settings. Please try again.”
• settings:settings.fallback-channel-for-notifications-e — “Fallback channel for notifications (e.g., #alerts)”
• settings:settings.for-testing-use-token-starting — “For testing, use token starting with "consul-token-" (e.g., consul-token-abc123xyz)”
• settings:settings.from-address — “From Address”
• settings:settings.general — “General”
• settings:settings.get-your-api-key-from — “Get your API key from”
• settings:settings.go-to — “Go to”
• settings:settings.healthy — “Healthy”
• settings:settings.how-node-enrollment-works — “How Node Enrollment Works”
• settings:settings.images-removed — “Images removed:”
• settings:settings.images-removes-dangling-images-untagged — “Images: Removes dangling images (untagged/intermediate)”
• settings:settings.important-notes — “Important Notes”
• settings:settings.include-beta-versions-in-upgrade — “Include beta versions in upgrade recommendations”
• settings:settings.install — “Install:”
• settings:settings.install-to-workspace-copy-the — “→ Install to Workspace → copy the”
• settings:settings.integrations — “Integrations”
• settings:settings.interactive-tours — “Interactive Tours”
• settings:settings.invite-codes — “Invite Codes”
• settings:settings.invites — “Invites”
• settings:settings.is-the-only-language-available — “is the only language available at the moment.”
• settings:settings.iso-2026-01-11 — “ISO (2026-01-11)”
• settings:settings.items — “items…”
• settings:settings.language — “Language”
• settings:settings.last-run — “Last run:”
• settings:settings.leader-election-consul — “Leader Election (Consul)”
• settings:settings.light — “Light”
• settings:settings.listen-port — “Listen Port:”
• settings:settings.loading-credentials — “Loading credentials…”
• settings:settings.loading-invites — “Loading invites…”
• settings:settings.loading-oauth-providers — “Loading OAuth providers…”
• settings:settings.loading-preview — “Loading Preview…”
• settings:settings.loading-scanner-settings — “Loading scanner settings…”
• settings:settings.loading-wireguard-settings — “Loading WireGuard settings…”
• settings:settings.log-out — “Log Out”
• settings:settings.long-running-operation — “Long-Running Operation”
• settings:settings.maintenance — “Maintenance”
• settings:settings.matches — “✓ Matches!”
• settings:settings.max-24h — “(max 24h)”
• settings:settings.max-uses-0-unlimited — “Max Uses (0 = unlimited)”
• settings:settings.mtls-agent-authentication — “mTLS Agent Authentication”
• settings:settings.name — “Name”
• settings:settings.network-cidr — “Network CIDR:”
• settings:settings.networks-only-removes-networks-not — “Networks: Only removes networks not in use by any container”
• settings:settings.networks-removed — “Networks removed:”
• settings:settings.never-expire — “Never expire”
• settings:settings.new-invite-code — “New Invite Code”
• settings:settings.no-events-yet-start-an — “No events yet. Start an operation and trigger leader election.”
• settings:settings.no-invite-codes-yet-create — “No invite codes yet. Create one to let users join your organization.”
• settings:settings.no-oauth-providers-available-vault — “No OAuth providers available. Vault may not be configured.”
• settings:settings.no-registry-credentials-configured-add — “No registry credentials configured. Add credentials to pull images from private registries.”
• settings:settings.no-unused-resources-found-for — “No unused resources found for the selected types.”
• settings:settings.node-appears-in-the-dashboard — “Node appears in the dashboard once connected”
• settings:settings.nodes — “Nodes”
• settings:settings.nodes-in-cluster — “Nodes in Cluster:”
• settings:settings.not-authenticated — “Not authenticated”
• settings:settings.not-configured — “Not configured”
• settings:settings.not-required-when-acls-disabled — “Not required when ACLs disabled”
• settings:settings.not-required-when-mtls-disabled — “Not required when mTLS disabled”
• settings:settings.note — “Note:”
• settings:settings.notification-expiry — “Notification Expiry”
• settings:settings.notifications — “Notifications”
• settings:settings.notifications-older-than-this-will — “Notifications older than this will be automatically hidden from the bell icon and activity feed.”
• settings:settings.npm-i-g-anthropic-ai — “npm i -g @anthropic-ai/claude-code”
• settings:settings.oauth-app — “OAuth app)”
• settings:settings.oauth-authentication-via-claude-cli — “OAuth authentication via Claude CLI for task agents.”
• settings:settings.oauth-provider-configuration — “OAuth Provider Configuration”
• settings:settings.odysseus — “Odysseus”
• settings:settings.odysseus-noreply-example-com — “Odysseus <noreply@example.com>”
• settings:settings.onboarding-tours — “Onboarding & Tours”
• settings:settings.onboarding-wizard — “Onboarding Wizard”
• settings:settings.once-you-log-out-you — “Once you log out, you will need to re-authenticate to access the dashboard.”
• settings:settings.operator — “Operator”
• settings:settings.ops-example-com — “ops@example.com”
• settings:settings.organization-api-key — “Organization API Key”
• settings:settings.organization-notification-settings — “Organization Notification Settings”
• settings:settings.overdue — “OVERDUE:”
• settings:settings.password — “Password”
• settings:settings.password-access-token — “Password / Access Token”
• settings:settings.paste-the-agents-client-certificate — “Paste the agent’s client certificate in PEM format for testing”
• settings:settings.pat-or-password — “PAT or password”
• settings:settings.pending — “Pending”
• settings:settings.pending-ops — “Pending Ops:”
• settings:settings.plan-information-unavailable — “Plan information unavailable.”
• settings:settings.plans — “Plans”
• settings:settings.platform-wide-notification-settings — “Platform-Wide Notification Settings”
• settings:settings.preview — “Preview”
• settings:settings.preview-select-items-to-remove — “Preview - Select items to remove:”
• settings:settings.processed — “✓ Processed”
• settings:settings.processing — “Processing…”
• settings:settings.progress — “Progress”
• settings:settings.prune-completed-successfully — “Prune completed successfully”
• settings:settings.prune-operations-are-scoped-to — “Prune operations are scoped to your tenant’s resources only.”
• settings:settings.pruning — “Pruning…”
• settings:settings.public-key — “Public Key:”
• settings:settings.read-only — “Read Only”
• settings:settings.read-operations-will-continue-using — “Read operations will continue using cached data.”
• settings:settings.reason — “Reason:”
• settings:settings.receive-critical-alerts-via-email — “Receive critical alerts via email when deployments fail or nodes go offline.”
• settings:settings.refresh — “Refresh”
• settings:settings.refresh-interval — “Refresh Interval”
• settings:settings.refresh-status — “Refresh Status”
• settings:settings.registry — “Registry”
• settings:settings.registry-credentials — “Registry Credentials”
• settings:settings.registry-url — “Registry URL”
• settings:settings.remove — “Remove”
• settings:settings.remove-unused-docker-resources-to — “Remove unused Docker resources to reclaim disk space. This operation is irreversible.”
• settings:settings.removing — “Removing…”
• settings:settings.require-mtls-for-agent-connections — “Require mTLS for Agent Connections”
• settings:settings.reset-all-tours — “Reset All Tours”
• settings:settings.restart-athena-ai-service — “Restart athena-ai service”
• settings:settings.restart-wizard — “Restart Wizard”
• settings:settings.restore-connection — “Restore Connection”
• settings:settings.results-are-scoped-to-tenant — “Results are scoped to tenant:”
• settings:settings.retries-after-leader-election — “Retries after leader election:”
• settings:settings.retry — “Retry”
• settings:settings.revoke — “Revoke”
• settings:settings.revoking — “Revoking…”
• settings:settings.role — “Role”
• settings:settings.run — “Run:”
• settings:settings.run-backup-now — “Run Backup Now”
• settings:settings.runs-the-command-on-the — “Runs the command on the remote machine (requires root)”
• settings:settings.save — “Save”
• settings:settings.save-all-integration-settings-including — “Save all integration settings including web tools and scheduled backup configuration.”
• settings:settings.save-credential — “Save Credential”
• settings:settings.save-notification-settings — “Save Notification Settings”
• settings:settings.save-preferences — “Save Preferences”
• settings:settings.save-settings — “Save Settings”
• settings:settings.saving — “Saving…”
• settings:settings.schedule-time-24h-format — “Schedule Time (24h format)”
• settings:settings.scheduled-backup-task — “Scheduled Backup Task”
• settings:settings.scoped-to-tenant — “Scoped to tenant:”
• settings:settings.script-installs-wireguard-configures-vpn — “Script installs WireGuard, configures VPN, and deploys the agent”
• settings:settings.security — “Security”
• settings:settings.select-resources-to-prune — “Select Resources to Prune”
• settings:settings.send-test-email — “Send Test Email”
• settings:settings.send-test-message — “Send Test Message”
• settings:settings.send-to-email-optional — “Send to Email (optional)”
• settings:settings.sending — “Sending…”
• settings:settings.server-endpoint — “Server Endpoint:”
• settings:settings.server-ip — “Server IP:”
• settings:settings.settings — “Settings”
• settings:settings.settings-sections — “Settings sections”
• settings:settings.setup-instructions — “Setup Instructions”
• settings:settings.show-all — “Show all”
• settings:settings.show-less — “Show less”
• settings:settings.simulate-acl-denied — “Simulate ACL Denied”
• settings:settings.simulate-chain-invalid — “Simulate Chain Invalid”
• settings:settings.simulate-consul-leader-election-during — “Simulate Consul leader election during long-running operations to test fault tolerance.”
• settings:settings.simulate-expired-cert — “Simulate Expired Cert”
• settings:settings.simulate-name-mismatch — “Simulate Name Mismatch”
• settings:settings.simulate-network-timeout — “Simulate Network Timeout”
• settings:settings.simulate-rapid-consul-changes — “Simulate Rapid Consul Changes”
• settings:settings.simulate-self-signed — “Simulate Self-Signed”
• settings:settings.simulate-unavailable — “Simulate Unavailable”
• settings:settings.simulates-a-consul-leader-election — “Simulates a Consul leader election event. During an active operation, this will pause, trigger election, then retry.”
• settings:settings.sk-ant-api — “sk-ant-api…”
• settings:settings.slack-bot-token — “Slack Bot Token:”
• settings:settings.slack-bot-user-oauth-token — “Slack Bot User OAuth Token (starts with xoxb-)”
• settings:settings.slack-configuration — “Slack Configuration”
• settings:settings.smtp-gmail-com — “smtp.gmail.com”
• settings:settings.smtp-host — “SMTP Host”
• settings:settings.smtp-port — “SMTP Port”
• settings:settings.sre-automation — “SRE automation”
• settings:settings.sre-automation-credentials-description — “The two credentials the incident automation holds. One lets it investigate an incident; the other lets it report what it found. Either can lapse without the incident list looking wrong.”
• settings:settings.standby — “Standby”
• settings:settings.start-long-operation — “Start Long Operation”
• settings:settings.status — “Status:”
• settings:settings.status-2 — “Status”
• settings:settings.sudo-deploy-setup-wireguard-server — “sudo ./deploy/setup-wireguard-server.sh –endpoint <PUBLIC_IP>:51820 –consul-url http://127.0.0.1:8500”
• settings:settings.suggestion — “Suggestion:”
• settings:settings.system — “System”
• settings:settings.system-cleanup — “System Cleanup”
• settings:settings.tenant-clicks-add-node-in — “Tenant clicks "Add Node" in the Nodes page”
• settings:settings.test-agent-connection — “Test Agent Connection”
• settings:settings.test-connection — “Test Connection”
• settings:settings.test-graceful-degradation-when-consul — “Test graceful degradation when Consul becomes unavailable. The system will fall back to BoltDB cache for read operations.”
• settings:settings.test-tls-connection — “Test TLS Connection”
• settings:settings.test-tls-ssl-certificate-connectivity — “Test TLS/SSL certificate connectivity or simulate certificate errors to understand error messages.”
• settings:settings.testing — “Testing…”
• settings:settings.the-public-url-for-this — “The public URL for this Odysseus control plane. Used in bootstrap commands for node enrollment.”
• settings:settings.theme — “Theme”
• settings:settings.this-action-cannot-be-undone — “This action cannot be undone. The selected items will be permanently deleted.”
• settings:settings.this-email-address-will-receive — “This email address will receive notifications from all Odysseus components unless overridden by component-specific settings.”
• settings:settings.this-node — “(this node)”
• settings:settings.timezone — “Timezone”
• settings:settings.tip-press — “Tip: Press”
• settings:settings.tls-certificate-testing — “TLS Certificate Testing”
• settings:settings.tls-testing-is-only-available — “TLS testing is only available for admin and operator roles.”
• settings:settings.to-access-tours-from-any — “to access tours from any page via the help menu.”
• settings:settings.to-use-a-credential-when — “To use a credential when creating a deployment, specify the credential name in the "Image Pull Secret" field. The image should include the full registry path (e.g., ghcr.io/owner/repo:tag).”
• settings:settings.token — “token.”
• settings:settings.total-space-reclaimed — “Total space reclaimed:”
• settings:settings.trigger-leader-election — “Trigger Leader Election”
• settings:settings.uk-11-01-2026 — “UK (11/01/2026)”
• settings:settings.unavailable — “Unavailable”
• settings:settings.unlimited — “/ unlimited”
• settings:settings.unlimited-2 — “Unlimited”
• settings:settings.update — “Update”
• settings:settings.update-api-key — “Update API Key”
• settings:settings.us-01-11-2026 — “US (01/11/2026)”
• settings:settings.use-tls — “Use TLS”
• settings:settings.user-example-com — “user@example.com”
• settings:settings.username — “Username”
• settings:settings.username-or-organization — “Username or organization”
• settings:settings.users — “Users”
• settings:settings.users-will-see-social-login — “Users will see social login buttons on the login and signup pages”
• settings:settings.uses — “Uses”
• settings:settings.using-oauth-token-from-servers — “Using OAuth token from server’s Claude CLI credentials.”
• settings:settings.verify-that-rapid-sequential-changes — “Verify that rapid sequential changes to Consul KV store are processed in the correct order.”
• settings:settings.view-plans — “View Plans →”
• settings:settings.view-plans-2 — “View Plans”
• settings:settings.view-technical-details — “View technical details”
• settings:settings.volumes-only-removes-volumes-not — “Volumes: Only removes volumes not in use by any container”
• settings:settings.vulnerability-scanner-settings — “Vulnerability Scanner Settings”
• settings:settings.webhook-configuration — “Webhook Configuration”
• settings:settings.webhook-url — “Webhook URL”
• settings:settings.when-enabled-tenants-can-add — “When enabled, tenants can add new nodes through the dashboard using bootstrap commands.”
• settings:settings.when-enabled-upgrade-suggestions-will — “When enabled, upgrade suggestions will include pre-release versions (alpha, beta, rc, preview, etc.). By default, only stable releases are recommended.”
• settings:settings.wireguard — “WireGuard”
• settings:settings.wireguard-enables-secure-vpn-tunnels — “WireGuard enables secure VPN tunnels for remote node enrollment. Configure the control plane URL and enable/disable enrollment.”
• settings:settings.wireguard-not-configured — “WireGuard Not Configured”
• settings:settings.wireguard-server-configured — “WireGuard Server Configured”
• settings:settings.wireguard-vpn-configuration — “WireGuard VPN Configuration”
• settings:settings.xoxb — “xoxb-…”
• settings:settings.your-plan — “Your Plan”

What You Can Do

/settings

This screen’s component declares no permission-gated controls.

Where To Go Next

The node-enrollment section here starts the flow that enrol a node walks through end to end. Registry credentials set up here are consumed by the imagePullSecret field described in give a deployment a credential, and OAuth provider secrets follow the same Vault-backed storage as secrets generally. If mTLS is enabled here and an agent upgrade then fails, see an agent upgrade did not take.