Configure Kestra – Settings, Environments, and Defaults

Use this page when you need to know where Kestra configuration is defined, how it is overridden, and which part of the config tree controls a given capability.

Where Kestra configuration lives

Kestra configuration is YAML-based, but the place you edit it depends on how you run Kestra.

Deployment styleWhere you usually edit configuration
Local Docker or Docker ComposeThe KESTRA_CONFIGURATION environment variable or your docker-compose.yml
KubernetesYour Helm values or rendered manifests
VM or standalone serverA YAML config file plus environment variables such as JAVA_OPTS or KESTRA_*
Managed or shared environmentsA checked-in deployment config, then environment-specific overrides through environment variables or platform secrets

Environment variables override file-based configuration, so many teams keep a shared base config in YAML and inject deployment-specific values at runtime.

Start here

  • Use Configuration Basics to understand config sources, overrides, environment variable conversion, and the minimal setup required to boot Kestra.
  • Use Runtime and Storage for repository, queue, datasource, storage, server, and JVM settings.
  • Use Observability and Networking for telemetry, logs, metrics, Micronaut, endpoints, and webserver behavior.
  • Use Plugins and Execution for plugin installation, plugin defaults, retries, tasks, system flows, templates, and file access.
  • Use Security and Secrets for encryption, secret backends, auth-related security settings, and server hardening.
  • Use Enterprise and Advanced Features for EE license settings, Elasticsearch, Kafka, indexer, AI Copilot, and air-gapped deployments.

Common tasks

If you need to…Start here
Find the file or deployment surface where config is editedConfiguration Basics
Configure queue, repository, datasource, storage, or server settingsRuntime and Storage
Tune logs, metrics, telemetry, endpoints, CORS, SSL, or UI web settingsObservability and Networking
Configure plugin defaults, task temp storage, retries, or local flow syncPlugins and Execution
Set up encryption, secret backends, RBAC-adjacent security, or server authSecurity and Secrets
Configure Enterprise-only platform services such as Kafka, Elasticsearch, AI Copilot, or air-gapped operationEnterprise and Advanced Features

Browse configuration docs

Was this page helpful?