1.15 Operation

The following sections describes operator-focused features and tools that Concourse provides, such as monitoring and credential management.

These concepts are not required to operate Concourse, but are for users that are looking to extend the capabilities of managing a Concourse deployment. For users that are new to these concepts, we do recommend learning how to set up Credential Management and Encryption.

Table of contents:
  1. 1.15.1 Metrics
    1. 1.15.1.1 Configuring Metrics
    2. 1.15.1.2 What's emitted?
  2. 1.15.2 Tracing
    1. 1.15.2.1 Configuring Tracing
    2. 1.15.2.2 Trace context propagation
    3. 1.15.2.3 What's emitted?
  3. 1.15.3 Encryption
    1. 1.15.3.1 What's encrypted?
    2. 1.15.3.2 Enabling Encryption
    3. 1.15.3.3 Rotating the Encryption Key
    4. 1.15.3.4 Disabling Encryption
  4. 1.15.4 Credential Management
    1. 1.15.4.1 The Vault credential manager
    2. 1.15.4.2 The CredHub credential manager
    3. 1.15.4.3 The AWS SSM credential manager
    4. 1.15.4.4 The AWS Secrets Manager credential manager
    5. 1.15.4.5 Kubernetes Credential Manager
    6. 1.15.4.6 The Conjur credential manager
    7. 1.15.4.7 Caching credentials
    8. 1.15.4.8 Redacting credentials
    9. 1.15.4.9 Retrying failed fetches
  5. 1.15.5 Container Placement
    1. 1.15.5.1 The volume-locality strategy
    2. 1.15.5.2 The fewest-build-containers strategy
    3. 1.15.5.3 The random strategy
    4. 1.15.5.4 The limit-active-tasks strategy
    5. 1.15.5.5 The limit-active-containers strategy
    6. 1.15.5.6 The limit-active-volumes strategy
    7. 1.15.5.7 Chaining Placement Strategies
  6. 1.15.6 Open Policy Agent Integration
    1. 1.15.6.1 Configuring Concourse
    2. 1.15.6.2 Writing OPA Rules
    3. 1.15.6.3 Special Actions
      1. 1.15.6.3.1 UseImage
      2. 1.15.6.3.2 SetPipeline
  7. 1.15.7 Performance Tuning
    1. 1.15.7.1 The Big Caveat
    2. 1.15.7.2 Build Logs
      1. 1.15.7.2.1 CONCOURSE_DEFAULT_BUILD_LOGS_TO_RETAIN
      2. 1.15.7.2.2 CONCOURSE_MAX_BUILD_LOGS_TO_RETAIN
      3. 1.15.7.2.3 CONCOURSE_DEFAULT_DAYS_TO_RETAIN_BUILD_LOGS
      4. 1.15.7.2.4 CONCOURSE_MAX_DAYS_TO_RETAIN_BUILD_LOGS
    3. 1.15.7.3 Resource Checking
      1. 1.15.7.3.1 CONCOURSE_RESOURCE_CHECKING_INTERVAL
      2. 1.15.7.3.2 CONCOURSE_RESOURCE_WITH_WEBHOOK_CHECKING_INTERVAL
      3. 1.15.7.3.3 CONCOURSE_MAX_CHECKS_PER_SECOND
    4. 1.15.7.4 Pipeline Management
      1. 1.15.7.4.1 CONCOURSE_PAUSE_PIPELINES_AFTER
      2. 1.15.7.4.2 CONCOURSE_DEFAULT_TASK_{CPU/MEMORY}_LIMIT
      3. 1.15.7.4.3 CONCOURSE_DEFAULT_{GET/PUT/TASK}_TIMEOUT
    5. 1.15.7.5 Container Placement
    6. 1.15.7.6 Garbage Collection
      1. 1.15.7.6.1 CONCOURSE_GC_FAILED_GRACE_PERIOD
      2. 1.15.7.6.2 Other GC Grace Periods
    7. 1.15.7.7 Web To Worker Ratio
  8. 1.15.8 Global Resources
    1. 1.15.8.1 Benefits of Global Resources
    2. 1.15.8.2 Risks and Side Effects
  9. 1.15.9 Administration
    1. 1.15.9.1 fly workers
    2. 1.15.9.2 fly prune-worker
    3. 1.15.9.3 fly land-worker
    4. 1.15.9.4 fly containers
    5. 1.15.9.5 fly volumes
    6. 1.15.9.6 fly curl