Set Up Local Resolver Sidecar - Confidence Documentation

The local resolver sidecar is a container that resolves flags locally in your network. For an alternative approach using OpenFeature SDK providers, see Local Resolver.

Create API Client and Credentials

Go to Confidence

Select Admin > API Clients

On the bottom of the left sidebar, select Admin > API Clients.

Click Create

Give the API client a name

For example, “local resolver.”

Select Admin > Policies

On the bottom of the left sidebar, select Admin > Policies.

Click Create

Add the role Flags Resolver Sidecar

Add the role Flags Resolver Sidecar to the principal with the name you just created, “local resolver”.

Click Create

Make note of the Client ID and client secret.

Run with Docker

Set the following environment variables:

Variable	Required	Description
`CONFIDENCE_REGION`	Yes	Your account region (`EU` or `US`).
`CONFIDENCE_CLIENT_ID`	Yes	The client ID of the API client you created.
`CONFIDENCE_CLIENT_SECRET`	Yes	The client secret of the API client you created.

The examples use the Europe Artifact Registry mirror. Use the Asia or United States mirror when closer to where you deploy the sidecar: asia-docker.pkg.dev/spotify-confidence/public/flags-resolver-sidecar:latest or us-docker.pkg.dev/spotify-confidence/public/flags-resolver-sidecar:latest. The image registry region only controls which mirror serves the image. Keep CONFIDENCE_REGION set to your Confidence account region, EU or US. Run the local resolver:

docker run -it --rm \
  -p 8090:8090 \
  -e CONFIDENCE_REGION="$CONFIDENCE_REGION" \
  -e CONFIDENCE_CLIENT_ID="$CONFIDENCE_CLIENT_ID" \
  -e CONFIDENCE_CLIENT_SECRET="$CONFIDENCE_CLIENT_SECRET" \
  europe-docker.pkg.dev/spotify-confidence/public/flags-resolver-sidecar:latest

The local resolver is available at http://localhost:8090.

Deploy in Kubernetes

Add the sidecar container configuration to your Kubernetes pod spec:

spec:
  containers:
  - name: my-service
    image: gcr.io/my-service/image:latest
    # whatever you already had configured

  # add this sidecar container to your pod
  - name: confidence-resolver-sidecar
    image: europe-docker.pkg.dev/spotify-confidence/public/flags-resolver-sidecar:latest
    env:
      - name: CONFIDENCE_REGION
        value: "<your-account-region>"
      - name: CONFIDENCE_CLIENT_ID
        value: "<your-api-client-id>"
      - name: CONFIDENCE_CLIENT_SECRET
        value: "<your-api-client-secret>"
    ports:
      - name: http
        containerPort: 8090
    readinessProbe:
      exec:
        command: ["/bin/grpc_health_probe", "-addr=:5990"]
      initialDelaySeconds: 5
    livenessProbe:
      exec:
        command: ["/bin/grpc_health_probe", "-addr=:5990"]
      initialDelaySeconds: 10
    resources:
      requests:
        cpu: 1
        memory: 256M
      limits:
        cpu: 2
        memory: 512M

Do Not Propagate Apply Logs

By default, the sidecar sends apply logs to Confidence for exposure and experiment analysis. In certain cases, such as when you have critical privacy concerns, you might need to keep apply data within your network. Set CONFIDENCE_SEND_APPLY_LOGS to false. The sidecar continues to accept and validate ApplyFlags requests and resolves with apply=true. It doesn’t send assignment events or apply distinct counts to Confidence. The sidecar continues to send aggregate operational metadata, including the apply request rate.

Disabling apply logs degrades Confidence functionality. Confidence can’t observe which entities were exposed to each variant. Experiments and rollouts that use flags resolved by this sidecar won’t work correctly: exposure counts, experiment results, and rollout monitoring will be missing or incomplete. Only disable apply logs if you accept this loss of functionality or provide equivalent assignment data through another source.

This setting doesn’t disable resolve telemetry or other communication required to fetch resolver state. For more information, see Data Transfer.

Local Resolver Reference

Deep dive into local resolver configuration

Data Transfer

Understand flag resolution options

Manage Clients

Configure API clients and credentials

SDKs Reference

Learn about SDK integrations

​Create API Client and Credentials

​Run with Docker

​Deploy in Kubernetes

​Do Not Propagate Apply Logs

​Related Resources

Local Resolver Reference

Data Transfer

Manage Clients

SDKs Reference

Create API Client and Credentials

Run with Docker

Deploy in Kubernetes

Do Not Propagate Apply Logs

Related Resources