Skip to content

tsa job from concourse/3.11.0

TSA registers workers with the ATC via a SSH interface.

Github source: 4ba43d2 or master branch

Properties

atc

urls

ATC API endpoints to which workers will be advertised. If not specified, they will be autodiscovered via BOSH links.

Default
- http://127.0.0.1:8080

authorized_keys

Public keys to authorize for SSH connections.

Default
[]

bind_port

Port on which to listen for SSH connections.

Default
2222

forward_host

Address to advertise forwarded worker connections to.

If not specified, the instance’s address is used.

heartbeat_interval

Interval on which to register workers with the ATC.

Default
30s

host_key

Must be specified, bosh can auto-generate, see sample manifest.yml.

Example
private_key: |+
  -----BEGIN RSA PRIVATE KEY-----
  ...
  -----END RSA PRIVATE KEY-----
public_key: |+
  ssh-rsa ...

log_level

The log level for the TSA.

Default
info

team_authorized_keys

Public keys to authorize team workers for SSH connections.

Default
[]
Example
|+
  - team: concourse
    ssh_key: ssh-rsa key [email protected]

token_signing_key

PEM RSA key used for minting ATC tokens.

Example
private_key: |+
  -----BEGIN RSA PRIVATE KEY-----
  ...
  -----END RSA PRIVATE KEY-----
public_key: |+
  -----BEGIN PUBLIC KEY-----
  ...
  -----END PUBLIC KEY-----

yeller

api_key

If configured, errors emitted to the logs will also be emitted to Yeller. This is only really useful for Concourse developers.

Default
""

environment_name

Environment name to specify for errors emitted to Yeller.

Default
""

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/tsa/ directory (learn more).

  • bin/tsa_ctl (from tsa_ctl.erb)
  • config/host_key (from host_key.erb)
  • config/token_signing_key (from token_signing_key.erb)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.