{:else if setting.fieldType == 'license_key'} {@const { valid, expiration } = parseLicenseKey($values[setting.key] ?? '')}

{ if ($values[setting.key] && typeof $values[setting.key] === 'string') { $values[setting.key] = $values[setting.key].trim() } }} bind:password={$values[setting.key]} />

{#if $values[setting.key]?.length > 0} {#if valid}

License key expires on {expiration ?? ''}

{:else if expiration}

{#if $values[setting.key]?.endsWith('__dev')} Dev license key expired on {expiration}.
If even after successful renewal, your dev license key is still expired, it means that your production key has expired due to unpaid invoices or excessive use of your production instance. {:else} License key expired on {expiration}. {/if}

{:else}

Invalid license key format

{/if} {/if} {#if latestKeyRenewalAttempt && !offlineCapStatus} {@const attemptedAt = new Date(latestKeyRenewalAttempt.attempted_at).toLocaleString()} {@const isTrial = latestKeyRenewalAttempt.result.startsWith('error: trial:')}

{#if latestKeyRenewalAttempt.result === 'success'} {:else} {/if} {#if latestKeyRenewalAttempt.result === 'success' && $values[setting.key]?.endsWith('__dev')} Latest dev key renewal succeeded on {attemptedAt}. The dev key expiry was updated to align with your current production key's expiration date. {:else} {latestKeyRenewalAttempt.result === 'success' ? 'Latest key renewal succeeded' : isTrial ? 'Latest key renewal ignored because in trial' : 'Latest key renewal failed'} on {attemptedAt} {/if}

{#snippet text()}

{#if latestKeyRenewalAttempt?.result === 'success'} Latest key renewal succeeded on {attemptedAt} {:else if isTrial} License key cannot be renewed during trial ({attemptedAt}) {:else} Latest key renewal failed on {attemptedAt}: {latestKeyRenewalAttempt?.result.replace( 'error: ', '' )} {/if}
As long as invoices are paid and usage corresponds to the subscription, the key is renewed daily with a validity of 35 days (grace period).

{/snippet}

{/if} {#if $values[setting.key]?.length > 0 && version.includes('CE')}

License key is set but the current image is Community Edition ({version}). Switch to the EE image to finalize the upgrade.

{/if} {#if offlineCapStatus} {@const cap = offlineCapStatus} {@const seatsOver = cap.seats_used > cap.seats_cap} {@const cuOver = cap.cu_over_cap}

{#if seatsOver} {:else} {/if} Seats: {cap.seats_used.toFixed(1)} / {cap.seats_cap}

{#if cuOver} {:else} {/if} CUs: {cap.current_cu.toFixed(2)} / {cap.cu_cap.toFixed(2)}

{/if} {#if valid || expiration}

{#if !offlineCapStatus} {/if}

{/if}

{:else if setting.fieldType == 'email'} {:else if setting.key == 'critical_alert_mute_ui'}

{:else if setting.fieldType == 'critical_error_channels'} {:else if setting.fieldType == 'otel'}

{#if $values[setting.key]}

Endpoint

Headers

Protocol

Service name, environment, resource attributes, metrics temporality and other options are set with environment variables. {/if}

{:else if setting.fieldType == 'otel_tracing_proxy'} {@const tracingProxyVal = $values[setting.key] ?? { enabled: false, enabled_languages: [...OTEL_TRACING_PROXY_LANGUAGES] }}

{ $values[setting.key] = { ...tracingProxyVal, enabled: e.detail } }} options={{ right: 'Enabled' }} /> {#if tracingProxyVal.enabled}

{#each OTEL_TRACING_PROXY_LANGUAGES as lang (lang)} {@const isEnabled = (tracingProxyVal.enabled_languages ?? []).includes(lang)} {/each}

NO_PROXY hosts (bypass tracing)

Comma-separated host patterns that job HTTP clients should bypass the tracing proxy for — those hosts will not be traced. Use this for clients that pin their own CA (kubectl, helm, terraform providers, aws cli for EKS, etc.) which would otherwise fail with x509: certificate signed by unknown authority. Independent of the worker's own NO_PROXY env, which governs the proxy's upstream relay (e.g. through a corporate proxy).

Insecure upstream hosts (skip TLS verification)

Comma-separated host/IP patterns the proxy still traces but for which it skips upstream TLS certificate verification. Use for internal endpoints with self-signed or otherwise untrusted certificates — unlike NO_PROXY above, these requests stay traced. Same matching as NO_PROXY (example.com matches subdomains; .example.com matches subdomains only).

Upstream CA certificates (PEM)

Extra CA certificates added to the proxy's upstream trust store, on top of the system roots. Use this to trace internal endpoints signed by a private CA while keeping certificate verification enabled — preferred over the insecure list above when you have the CA.

{/if}

{:else if setting.fieldType == 'object_store_config'} {:else if setting.fieldType == 'critical_alerts_on_db_oversize'} {#if $values[setting.key]}

{#if $values[setting.key].enabled} GB {/if}

{/if} {:else if setting.fieldType == 'number'} {:else if setting.fieldType == 'password'} {:else if setting.fieldType == 'boolean'} {:else if setting.fieldType == 'seconds'}

{:else if setting.fieldType == 'smtp_connect'} {:else if setting.fieldType == 'secret_backend'} {:else if setting.fieldType == 'external_instance_pg'} {:else if setting.fieldType == 'instance_pg'} {:else if setting.fieldType == 'github_enterprise_app'} {:else if setting.fieldType == 'webhook_base_url'} {:else if setting.fieldType == 'ws_connectivity'} {:else if setting.fieldType == 'instance_banner'} {:else if setting.fieldType == 'accent_color'} {/if} {#if hasError} {setting.error ?? ''} {/if} {:else} {/if}