Skip to content

tsa job from concourse/4.2.1

TSA registers workers with the ATC via a SSH interface.

Github source: 0631bd9 or master branch

Properties

atc

urls

ATC API endpoints to which workers will be advertised. If not specified, they will be autodiscovered via BOSH links.

Default
- http://127.0.0.1:8080

authorized_keys

Public keys to authorize for SSH connections.

Default
[]

bind_port

Port on which to listen for SSH connections.

Default
2222

forward_host

Address to advertise forwarded worker connections to.

If not specified, the instance’s address is used.

heartbeat_interval

Interval on which to register workers with the ATC.

Default
30s

host_key

Must be specified, bosh can auto-generate, see sample manifest.yml.

Example
private_key: |+
  -----BEGIN RSA PRIVATE KEY-----
  ...
  -----END RSA PRIVATE KEY-----
public_key: |+
  ssh-rsa ...

log_level

The log level for the TSA.

Default
info

team_authorized_keys

Public keys to authorize team workers for SSH connections.

Default
[]
Example
|+
  - team: concourse
    ssh_key: ssh-rsa key key@pivotal.io

token_signing_key

PEM RSA key used for minting ATC tokens.

Example
private_key: |+
  -----BEGIN RSA PRIVATE KEY-----
  ...
  -----END RSA PRIVATE KEY-----
public_key: |+
  -----BEGIN PUBLIC KEY-----
  ...
  -----END PUBLIC KEY-----

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/tsa/ directory (learn more).

  • bin/tsa_ctl (from tsa_ctl.erb)
  • config/host_key (from host_key.erb)
  • config/token_signing_key (from token_signing_key.erb)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.