Skip to main content

Configure capabilities

Compute functions can access a number of capabilities:

  • Logger
  • HTTP requests
  • GraphQL requests
  • Key/value store (cache)
  • SQL databases
  • Static files

You can configure each capability. If you disable all capabilities, your users' functions will not be able to access the "outside world" in any way.

To configure capabilities, edit the scc-config.yaml file that subo created for you in your suborbital/config directory:

networkRules: &networkRules
allowIPs: false
allowPrivate: false
allowHTTP: true
blockedDomains:
- "*.cluster.local"
- "scc-controlplane-service"
- "scc-builder-service"

capabilities:
logger:
enabled: true
http:
enabled: true
rules: *networkRules
graphql:
enabled: true
rules: *networkRules
cache:
enabled: false
file:
enabled: false
db:
enabled: false

When you run subo compute deploy core, your installation will use the configuration file. If you do not create a config file, then the above default is used. The defaults are designed to be a sane configuration for the average use-case.

More capability types are being developed and will be available in upcoming versions.