diff --git a/etc/kapacitor/kapacitor.conf b/etc/kapacitor/kapacitor.conf
index 0b7a6f2ed..b1388050a 100644
--- a/etc/kapacitor/kapacitor.conf
+++ b/etc/kapacitor/kapacitor.conf
@@ -14,6 +14,27 @@ skip-config-overrides = false
 # then the retention policy will be set to this value
 default-retention-policy = ""
 
+[auth]
+  # Auth config for kapacitor
+  enabled = false
+  # User permissions cache expiration time.
+  cache-expiration = "10m"
+  # Cost to compute bcrypt password hashes.
+  # bcrypt rounds = 2^cost
+  bcrypt-cost = 10
+  # Address of a meta server.
+  # If empty then meta is not used as a user backend.
+  # host:port
+  meta-addr = "172.17.0.2:8091"
+  meta-use-tls = false
+  # Absolute path to PEM encoded Certificate Authority (CA) file.
+  # A CA can be provided without a key/certificate pair.
+  meta-ca = "/etc/kapacitor/ca.pem"
+  # Absolute paths to PEM encoded private key and server certificate files.
+  meta-cert = "/etc/kapacitor/cert.pem"
+  meta-key = "/etc/kapacitor/key.pem"
+  meta-insecure-skip-verify = false
+
 [http]
   # HTTP API Server for Kapacitor
   # This server is always on,
@@ -21,6 +42,7 @@ default-retention-policy = ""
   # and as the API endpoint for all other
   # Kapacitor calls.
   bind-address = ":9092"
+  auth-enabled = false
   log-enabled = true
   write-tracing = false
   pprof-enabled = false
@@ -99,6 +121,21 @@ default-retention-policy = ""
   # The message of the alert. INTERVAL will be replaced by the interval.
   message = "{{ .ID }} is {{ if eq .Level \"OK\" }}alive{{ else }}dead{{ end }}: {{ index .Fields \"collected\" | printf \"%0.3f\" }} points/INTERVAL."
 
+[fluxtask]
+  # Configure flux tasks for kapacitor
+  enabled = false
+  # The influxdb instance to store historical task run data (the 'name' from the influxdb config section)
+  # Not recommended: use "none" to turn off historical task run data storage.
+  task-run-influxdb = "localhost"
+  # The bucket (for InfluxDB 1.x, use "db/rp" format) to store historical task run data.
+  # This bucket or database must already be created in the task-run-influxdb
+  task-run-bucket = "taskrun"
+  # The org or orgid if storing historical task run data in InfluxDB 2.x or InfluxDB Cloud
+  task-run-org = ""
+  task-run-orgid = ""
+  # The measurement name for the historical task run data
+  task-run-measurement = "runs"
+
 
 # Multiple InfluxDB configurations can be defined.
 # Exactly one must be marked as the default.
@@ -432,11 +469,16 @@ default-retention-policy = ""
   # A logical choice is the name of the slack workspace, e.g. <workspace>.slack.com
   workspace = ""
 
-  # The Slack webhook URL, can be obtained by adding
-  # an Incoming Webhook integration.
-  # Visit https://slack.com/services/new/incoming-webhook
-  # to add new webhook for Kapacitor.
+  # The Slack webhook URL
+  # For new-style slack apps, use "https://slack.com/api/chat.postMessage"
+  # For legacy Incoming Webhooks, visit https://slack.com/services/new/incoming-webhook
+  # to add new webhook for Kapacitor and use that URL.
   url = ""
+  # The Slack OAuth token
+  # For new-style slack apps, visit https://api.slack.com/apps -> your app -> 'OAuth & Permissions' to find
+  # the token. Ensure your app has 'chat:write' and 'chat:write.public' permissions.
+  # For legacy Incoming Webhooks this should be left empty.
+  token = ""
   # Default channel for messages
   channel = ""
   # If true all the alerts will be sent to Slack