Concourse packaged by Bitnami

Concourse is an automation system written in Go. It is most commonly used for CI/CD, and is built to scale to any kind of automation pipeline, from simple to complex.

Overview of Concourse

TL;DR

使用加速地址添加仓库:

helm repo add bitnami "https://helm-charts.itboon.top/bitnami" --force-update
helm update bitnami

helm install my-release bitnami/concourse

Introduction

This chart bootstraps a Concourse deployment on a Kubernetes cluster using the Helm package manager.

It also packages Bitnami Postgresql

Bitnami charts can be used with Kubeapps for deployment and management of Helm Charts in clusters.

Looking to use Concourse in production? Try VMware Application Catalog, the enterprise edition of Bitnami Application Catalog.

Prerequisites

• Kubernetes 1.19+
• Helm 3.2.0+
• PV provisioner support in the underlying infrastructure
• ReadWriteMany volumes for deployment scaling

Installing the Chart

To install the chart with the release name my-release:

helm install my-release bitnami/concourse

The command deploys concourse on the Kubernetes cluster in the default configuration. The Parameters section lists the parameters that can be configured during installation.

Tip: List all releases using helm list

Uninstalling the Chart

To uninstall/delete the my-release deployment:

helm delete my-release

The command removes all the Kubernetes components associated with the chart and deletes the release.

Parameters

Global parameters

Name	Description	Value
global.imageRegistry	Global Docker image registry	""
global.imagePullSecrets	Global Docker registry secret names as an array	[]
global.storageClass	Global StorageClass for Persistent Volume(s)	""

Common parameters

Name	Description	Value
kubeVersion	Override Kubernetes version	""
nameOverride	String to partially override common.names.fullname	""
fullnameOverride	String to fully override common.names.fullname	""
clusterDomain	Kubernetes Cluster Domain	cluster.local
commonLabels	Labels to add to all deployed objects	{}
commonAnnotations	Annotations to add to all deployed objects	{}
extraDeploy	Array of extra objects to deploy with the release	[]
diagnosticMode.enabled	Enable diagnostic mode (all probes will be disabled and the command will be overridden)	false
diagnosticMode.command	Command to override all containers in the deployment(s)/statefulset(s)	["sleep"]
diagnosticMode.args	Args to override all containers in the deployment(s)/statefulset(s)	["infinity"]

Common Concourse Parameters

Name	Description	Value
image.registry	image registry	docker.io
image.repository	image repository	bitnami/concourse
image.tag	image tag (immutable tags are recommended)	7.9.1-debian-11-r34
image.digest	image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag	""
image.pullPolicy	image pull policy	IfNotPresent
image.pullSecrets	image pull secrets	[]
secrets.localAuth.enabled	the use of local authentication (basic auth).	true
secrets.localUsers	List of username:password or username:bcrypted_password combinations for all your local concourse users. Auto-generated if not set	""
secrets.teamAuthorizedKeys	Array of team names and public keys for team external workers	[]
secrets.conjurAccount	Account for Conjur auth provider.	""
secrets.conjurAuthnLogin	Host username for Conjur auth provider.	""
secrets.conjurAuthnApiKey	API key for host used for Conjur auth provider. Either API key or token file can be used, but not both.	""
secrets.conjurAuthnTokenFile	Token file used for Conjur auth provider if running in Kubernetes or IAM. Either token file or API key can be used, but not both.	""
secrets.conjurCACert	CA Certificate to specify if conjur instance is deployed with a self-signed cert	""
secrets.hostKey	Concourse Host Keys.	""
secrets.hostKeyPub	Concourse Host Keys.	""
secrets.sessionSigningKey	Concourse Session Signing Keys.	""
secrets.workerKey	Concourse Worker Keys.	""
secrets.workerKeyPub	Concourse Worker Keys.	""
secrets.workerAdditionalCerts	Additional certificates to add to the worker nodes	""

Concourse Web parameters

Name	Description	Value
web.enabled	Enable Concourse web component	true
web.baseUrl	url	/
web.logLevel	Minimum level of logs to see. Possible options: debug, info, error.	debug
web.clusterName	A name for this Concourse cluster, to be displayed on the dashboard page.	""
web.bindIp	IP address on which to listen for HTTP traffic (web UI and API).	0.0.0.0
web.peerAddress	Network address of this web node, reachable by other web nodes.	""
web.externalUrl	URL used to reach any ATC from the outside world.	""
web.auth.cookieSecure	use cookie secure true or false	false
web.auth.duration	Length of time for which tokens are valid. Afterwards, users will have to log back in.	24h
web.auth.passwordConnector	The connector to use for password authentication for fly login -u ... -p ....	""
web.auth.mainTeam.config	Configuration file for specifying the main teams params.	""
web.auth.mainTeam.localUser	Comma-separated list of local Concourse users to be included as members of the main team.	user
web.existingSecret	Use an existing secret for the Web service credentials	""
web.enableAcrossStep	Enable the experimental across step to be used in jobs. The API is subject to change.	false
web.enablePipelineInstances	Enable the creation of instanced pipelines.	false
web.enableCacheStreamedVolumes	Enable caching streamed resource volumes on the destination worker.	false
web.baseResourceTypeDefaults	Configuration file for specifying defaults for base resource types	""
web.tsa.logLevel	Minimum level of logs to see. Possible values: debug, info, error	debug
web.tsa.bindIp	IP address on which to listen for SSH	0.0.0.0
web.tsa.debugBindIp	IP address on which to listen for the pprof debugger endpoints (default: 127.0.0.1)	127.0.0.1
web.tsa.heartbeatInterval	Interval on which to heartbeat workers to the ATC	30s
web.tsa.gardenRequestTimeout	How long to wait for requests to Garden to complete. 0 means no timeout	""
web.tls.enabled	enable serving HTTPS traffic directly through the web component.	false
web.configRBAC	Set RBAC configuration	""
web.conjur.enabled	Enable the use of Conjur as a credential manager	false
web.conjur.applianceUrl	URL of the Conjur instance.	""
web.conjur.pipelineSecretTemplate	Path used to locate pipeline-level secret	concourse/{{.Team}}/{{.Pipeline}}/{{.Secret}}
web.conjur.teamSecretTemplate	Path used to locate team-level secret	concourse/{{.Team}}/{{.Secret}}
web.conjur.secretTemplate	Path used to locate a vault or safe-level secret	concourse/{{.Secret}}
web.existingConfigmap	The name of an existing ConfigMap with your custom configuration for web	""
web.command	Override default container command (useful when using custom images)	[]
web.args	Override default container args (useful when using custom images)	[]
web.extraEnvVars	Array with extra environment variables to add to Concourse web nodes	[]
web.extraEnvVarsCM	Name of existing ConfigMap containing extra env vars for Concourse web nodes	""
web.extraEnvVarsSecret	Name of existing Secret containing extra env vars for Concourse web nodes	""
web.replicaCount	Number of Concourse web replicas to deploy	1
web.containerPorts.http	Concourse web UI and API HTTP container port	8080
web.containerPorts.https	Concourse web UI and API HTTPS container port	8443
web.containerPorts.tsa	Concourse web TSA SSH container port	2222
web.containerPorts.pprof	Concourse web TSA pprof server container port	2221
web.livenessProbe.enabled	Enable livenessProbe on Concourse web containers	true
web.livenessProbe.initialDelaySeconds	Initial delay seconds for livenessProbe	10
web.livenessProbe.periodSeconds	Period seconds for livenessProbe	15
web.livenessProbe.timeoutSeconds	Timeout seconds for livenessProbe	3
web.livenessProbe.failureThreshold	Failure threshold for livenessProbe	1
web.livenessProbe.successThreshold	Success threshold for livenessProbe	1
web.readinessProbe.enabled	Enable readinessProbe on Concourse web containers	true
web.readinessProbe.initialDelaySeconds	Initial delay seconds for readinessProbe	10
web.readinessProbe.periodSeconds	Period seconds for readinessProbe	15
web.readinessProbe.timeoutSeconds	Timeout seconds for readinessProbe	3
web.readinessProbe.failureThreshold	Failure threshold for readinessProbe	1
web.readinessProbe.successThreshold	Success threshold for readinessProbe	1
web.startupProbe.enabled	Enable startupProbe on Concourse web containers	false
web.startupProbe.initialDelaySeconds	Initial delay seconds for startupProbe	5
web.startupProbe.periodSeconds	Period seconds for startupProbe	10
web.startupProbe.timeoutSeconds	Timeout seconds for startupProbe	1
web.startupProbe.failureThreshold	Failure threshold for startupProbe	15
web.startupProbe.successThreshold	Success threshold for startupProbe	1
web.customLivenessProbe	Custom livenessProbe that overrides the default one	{}
web.customReadinessProbe	Custom readinessProbe that overrides the default one	{}
web.customStartupProbe	Custom startupProbe that overrides the default one	{}
web.resources.limits	The resources limits for the Concourse web containers	{}
web.resources.requests	The requested resources for the Concourse web containers	{}
web.podSecurityContext.enabled	Enabled web pods' Security Context	true
web.podSecurityContext.fsGroup	Set web pod's Security Context fsGroup	1001
web.containerSecurityContext.enabled	Enabled web containers' Security Context	true
web.containerSecurityContext.runAsUser	Set web containers' Security Context runAsUser	1001
web.hostAliases	Concourse web pod host aliases	[]
web.podLabels	Extra labels for Concourse web pods	{}
web.podAnnotations	Annotations for Concourse web pods	{}
web.podAffinityPreset	Pod affinity preset. Ignored if web.affinity is set. Allowed values: soft or hard	""
web.podAntiAffinityPreset	Pod anti-affinity preset. Ignored if web.affinity is set. Allowed values: soft or hard	soft
web.nodeAffinityPreset.type	Node affinity preset type. Ignored if web.affinity is set. Allowed values: soft or hard	""
web.nodeAffinityPreset.key	Node label key to match. Ignored if web.affinity is set	""
web.nodeAffinityPreset.values	Node label values to match. Ignored if web.affinity is set	[]
web.affinity	Affinity for web pods assignment	{}
web.nodeSelector	Node labels for web pods assignment	{}
web.tolerations	Tolerations for web pods assignment	[]
web.topologySpreadConstraints	Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template	[]
web.priorityClassName	Priority Class to use for each pod (Concourse web)	""
web.schedulerName	Use an alternate scheduler, e.g. "stork".	""
web.terminationGracePeriodSeconds	Seconds Concourse web pod needs to terminate gracefully	""
web.updateStrategy.rollingUpdate	Concourse web statefulset rolling update configuration parameters	{}
web.updateStrategy.type	Concourse web statefulset strategy type	RollingUpdate
web.lifecycleHooks	lifecycleHooks for the Concourse web container(s)	{}
web.extraVolumes	Optionally specify extra list of additional volumeMounts for the Concourse web container(s)	[]
web.extraVolumeMounts	Optionally specify extra list of additional volumeMounts for the Concourse web container(s)	[]
web.sidecars	Add additional sidecar containers to the Concourse web pod(s)	[]
web.initContainers	Add additional init containers to the Concourse web pod(s)	[]
web.psp.create	Whether to create a PodSecurityPolicy. WARNING: PodSecurityPolicy is deprecated in Kubernetes v1.21 or later, unavailable in v1.25 or later	false
web.rbac.create	Specifies whether RBAC resources should be created	true
web.rbac.rules	Custom RBAC rules to set	[]
web.serviceAccount.create	Specifies whether a ServiceAccount should be created	true
web.serviceAccount.name	Override Web service account name	""
web.serviceAccount.automountServiceAccountToken	Allows auto mount of ServiceAccountToken on the serviceAccount created	true
web.serviceAccount.annotations	Additional custom annotations for the ServiceAccount	{}

Concourse Worker parameters

Name	Description	Value
worker.enabled	Enable Concourse worker nodes	true
worker.runtime	Set CONCURSE_RUNTIME in worker nodes. Please note the default runtime (guardian) only supports cgroupsv1.	containerd
worker.logLevel	Minimum level of logs to see. Possible options: debug, info, error	debug
worker.bindIp	IP address on which to listen for the Garden server.	127.0.0.1
worker.tsa.hosts	TSA host(s) to forward the worker through	[]
worker.existingSecret	name of an existing secret resource containing the keys and the pub	""
worker.baggageclaim.logLevel	Minimum level of logs to see. Allowed values: debug, info, and error	info
worker.baggageclaim.bindIp	IP address on which to listen for API traffic	127.0.0.1
worker.baggageclaim.debugBindIp	IP address on which to listen for the pprof debugger endpoints	127.0.0.1
worker.baggageclaim.disableUserNamespaces	Disable remapping of user/group IDs in unprivileged volumes	""
worker.baggageclaim.volumes	Directory in which to place volume data	""
worker.baggageclaim.driver	Driver to use for managing volumes. Allowed values: detect, naive, btrfs, and overlay	""
worker.baggageclaim.btrfsBin	Path to btrfs binary	btrfs
worker.baggageclaim.mkfsBin	Path to mkfs.btrfs binary	mkfs.btrfs
worker.baggageclaim.overlaysDir	Path to directory in which to store overlay data	""
worker.command	Override default container command (useful when using custom images)	[]
worker.args	Override worker default args	[]
worker.replicaCount	Number of worker replicas	2
worker.mode	Selects kind of Deployment. Allowed values: deployment or statefulset	deployment
worker.containerPorts.garden	Concourse worker Garden server container port	7777
worker.containerPorts.health	Concourse worker health-check container port	8888
worker.containerPorts.baggageclaim	Concourse worker baggageclaim API container port	7788
worker.containerPorts.pprof	Concourse worker baggageclaim pprof server container port	7787
worker.livenessProbe.enabled	Enable livenessProbe on Concourse worker containers	true
worker.livenessProbe.initialDelaySeconds	Initial delay seconds for livenessProbe	10
worker.livenessProbe.periodSeconds	Period seconds for livenessProbe	15
worker.livenessProbe.timeoutSeconds	Timeout seconds for livenessProbe	3
worker.livenessProbe.failureThreshold	Failure threshold for livenessProbe	1
worker.livenessProbe.successThreshold	Success threshold for livenessProbe	1
worker.readinessProbe.enabled	Enable readinessProbe on Concourse worker containers	true
worker.readinessProbe.initialDelaySeconds	Initial delay seconds for readinessProbe	10
worker.readinessProbe.periodSeconds	Period seconds for readinessProbe	15
worker.readinessProbe.timeoutSeconds	Timeout seconds for readinessProbe	3
worker.readinessProbe.failureThreshold	Failure threshold for readinessProbe	1
worker.readinessProbe.successThreshold	Success threshold for readinessProbe	1
worker.startupProbe.enabled	Enable startupProbe on Concourse worker containers	false
worker.startupProbe.initialDelaySeconds	Initial delay seconds for startupProbe	5
worker.startupProbe.periodSeconds	Period seconds for startupProbe	10
worker.startupProbe.timeoutSeconds	Timeout seconds for startupProbe	1
worker.startupProbe.failureThreshold	Failure threshold for startupProbe	15
worker.startupProbe.successThreshold	Success threshold for startupProbe	1
worker.customLivenessProbe	Custom livenessProbe that overrides the default one	{}
worker.customReadinessProbe	Custom readinessProbe that overrides the default one	{}
worker.customStartupProbe	Custom startupProbe that overrides the default one	{}
worker.resources.limits	The resources limits for the Concourse worker containers	{}
worker.resources.requests	The requested resources for the Concourse worker containers	{}
worker.podSecurityContext.enabled	Enabled worker pods' Security Context	true
worker.podSecurityContext.fsGroup	Set worker pod's Security Context fsGroup	1001
worker.containerSecurityContext.enabled	Enabled worker containers' Security Context	true
worker.containerSecurityContext.privileged	Set worker containers' Security Context with privileged or not	true
worker.containerSecurityContext.runAsUser	Set worker containers' Security Context user	0
worker.hostAliases	Concourse worker pod host aliases	[]
worker.podLabels	Custom labels for Concourse worker pods	{}
worker.podAnnotations	Annotations for Concourse worker pods	{}
worker.podAffinityPreset	Pod affinity preset. Ignored if worker.affinity is set. Allowed values: soft or hard	""
worker.podAntiAffinityPreset	Pod anti-affinity preset	soft
worker.nodeAffinityPreset.type	Node affinity type	""
worker.nodeAffinityPreset.key	Node label key to match	""
worker.nodeAffinityPreset.values	Node label values to match	[]
worker.affinity	Affinity for pod assignment	{}
worker.nodeSelector	Node labels for pod assignment	{}
worker.tolerations	Tolerations for worker pod assignment	[]
worker.topologySpreadConstraints	Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template	[]
worker.priorityClassName	Priority Class to use for each pod (Concourse worker)	""
worker.schedulerName	Use an alternate scheduler, e.g. "stork".	""
worker.terminationGracePeriodSeconds	Seconds Concourse worker pod needs to terminate gracefully	""
worker.podManagementPolicy	Statefulset Pod Management Policy Type. Allowed values: OrderedReady or Parallel	OrderedReady
worker.updateStrategy.rollingUpdate	Concourse worker statefulset rolling update configuration parameters	{}
worker.updateStrategy.type	Concourse worker statefulset strategy type	RollingUpdate
worker.lifecycleHooks	for the Concourse worker container(s) to automate configuration before or after startup	{}
worker.extraEnvVars	Array with extra environment variables to add to Concourse worker nodes	[]
worker.extraEnvVarsCM	Name of existing ConfigMap containing extra env vars for Concourse worker nodes	""
worker.extraEnvVarsSecret	Name of existing Secret containing extra env vars for Concourse worker nodes	""
worker.extraVolumes	Optionally specify extra list of additional volumes for the Concourse worker pod(s)	[]
worker.extraVolumeMounts	Optionally specify extra list of additional volumeMounts for the Concourse worker container(s)	[]
worker.sidecars	Add additional sidecar containers to the Concourse worker pod(s)	[]
worker.initContainers	Add additional init containers to the Concourse worker pod(s)	[]
worker.autoscaling.enabled	Enable autoscaling for the Concourse worker nodes	false
worker.autoscaling.maxReplicas	Set maximum number of replicas to the Concourse worker nodes	""
worker.autoscaling.minReplicas	Set minimum number of replicas to the Concourse worker nodes	""
worker.autoscaling.builtInMetrics	Array with built-in metrics	[]
worker.autoscaling.customMetrics	Array with custom metrics	[]
worker.pdb.create	Create Pod disruption budget object for Concourse worker nodes	true
worker.pdb.minAvailable	Minimum number / percentage of Concourse worker pods that should remain scheduled	2
worker.pdb.maxUnavailable	Maximum number/percentage of Concourse worker pods that may be made unavailable	""
worker.psp.create	Whether to create a PodSecurityPolicy. WARNING: PodSecurityPolicy is deprecated in Kubernetes v1.21 or later, unavailable in v1.25 or later	false
worker.persistence.enabled	Enable Concourse worker data persistence using PVC	true
worker.persistence.existingClaim	Name of an existing PVC to use	""
worker.persistence.storageClass	PVC Storage Class for Concourse worker data volume	""
worker.persistence.accessModes	PVC Access Mode for Concourse worker volume	["ReadWriteOnce"]
worker.persistence.size	PVC Storage Request for Concourse worker volume	8Gi
worker.persistence.annotations	Annotations for the PVC	{}
worker.persistence.selector	Selector to match an existing Persistent Volume (this value is evaluated as a template)	{}
worker.rbac.create	Specifies whether RBAC resources should be created	true
worker.rbac.rules	Custom RBAC rules to set	[]
worker.serviceAccount.create	Specifies whether a ServiceAccount should be created	true
worker.serviceAccount.name	Override worker service account name	""
worker.serviceAccount.automountServiceAccountToken	Allows auto mount of ServiceAccountToken on the serviceAccount created	true
worker.serviceAccount.annotations	Additional custom annotations for the ServiceAccount	{}

Traffic exposure parameters

Name	Description	Value
service.web.type	Concourse web service type	LoadBalancer
service.web.ports.http	Concourse web service HTTP port	80
service.web.ports.https	Concourse web service HTTPS port	443
service.web.nodePorts.http	Node port for HTTP	""
service.web.nodePorts.https	Node port for HTTPS	""
service.web.sessionAffinity	Control where client requests go, to the same pod or round-robin	None
service.web.sessionAffinityConfig	Additional settings for the sessionAffinity	{}
service.web.clusterIP	Concourse web service Cluster IP	""
service.web.loadBalancerIP	Concourse web service Load Balancer IP	""
service.web.loadBalancerSourceRanges	Concourse web service Load Balancer sources	[]
service.web.externalTrafficPolicy	Concourse web service external traffic policy	Cluster
service.web.annotations	Additional custom annotations for Concourse web service	{}
service.web.extraPorts	Extra port to expose on Concourse web service	[]
service.workerGateway.type	Concourse worker gateway service type	ClusterIP
service.workerGateway.ports.tsa	Concourse worker gateway service port	2222
service.workerGateway.nodePorts.tsa	Node port for worker gateway service	""
service.workerGateway.sessionAffinity	Control where client requests go, to the same pod or round-robin	None
service.workerGateway.sessionAffinityConfig	Additional settings for the sessionAffinity	{}
service.workerGateway.clusterIP	Concourse worker gateway service Cluster IP	""
service.workerGateway.loadBalancerIP	Concourse worker gateway service Load Balancer IP	""
service.workerGateway.loadBalancerSourceRanges	Concourse worker gateway service Load Balancer sources	[]
service.workerGateway.externalTrafficPolicy	Concourse worker gateway service external traffic policy	Cluster
service.workerGateway.annotations	Additional custom annotations for Concourse worker gateway service	{}
service.workerGateway.extraPorts	Extra port to expose on Concourse worker gateway service	[]
ingress.enabled	Enable ingress record generation for Concourse	false
ingress.ingressClassName	IngressClass that will be be used to implement the Ingress (Kubernetes 1.18+)	""
ingress.pathType	Ingress path type	ImplementationSpecific
ingress.apiVersion	Force Ingress API version (automatically detected if not set)	""
ingress.hostname	Default host for the ingress record	concourse.local
ingress.path	Default path for the ingress record	/
ingress.annotations	Additional annotations for the Ingress resource. To enable certificate autogeneration, place here your cert-manager annotations.	{}
ingress.tls	Enable TLS configuration for the host defined at ingress.hostname parameter	false
ingress.selfSigned	Create a TLS secret for this ingress record using self-signed certificates generated by Helm	false
ingress.extraHosts	An array with additional hostname(s) to be covered with the ingress record	[]
ingress.extraPaths	An array with additional arbitrary paths that may need to be added to the ingress under the main host	[]
ingress.extraTls	TLS configuration for additional hostname(s) to be covered with this ingress record	[]
ingress.secrets	Custom TLS certificates as secrets	[]
ingress.extraRules	Additional rules to be covered with this ingress record	[]

Init Container Parameters

Name	Description	Value
volumePermissions.enabled	Enable init container that changes the owner and group of the persistent volume	false
volumePermissions.image.registry	Init container volume-permissions image registry	docker.io
volumePermissions.image.repository	Init container volume-permissions image repository	bitnami/bitnami-shell
volumePermissions.image.tag	Init container volume-permissions image tag (immutable tags are recommended)	11-debian-11-r118
volumePermissions.image.digest	Init container volume-permissions image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag	""
volumePermissions.image.pullPolicy	Init container volume-permissions image pull policy	IfNotPresent
volumePermissions.image.pullSecrets	Init container volume-permissions image pull secrets	[]
volumePermissions.resources.limits	Init container volume-permissions resource limits	{}
volumePermissions.resources.requests	Init container volume-permissions resource requests	{}
volumePermissions.containerSecurityContext.enabled	Enabled init container Security Context	true
volumePermissions.containerSecurityContext.runAsUser	User ID for the init container	0

Concourse database parameters

Name	Description	Value
postgresql.enabled	Switch to enable or disable the PostgreSQL helm chart	true
postgresql.auth.enablePostgresUser	Assign a password to the "postgres" admin user. Otherwise, remote access will be blocked for this user	false
postgresql.auth.username	Name for a custom user to create	bn_concourse
postgresql.auth.password	Password for the custom user to create	""
postgresql.auth.database	Name for a custom database to create	bitnami_concourse
postgresql.auth.existingSecret	Name of existing secret to use for PostgreSQL credentials	""
postgresql.architecture	PostgreSQL architecture (standalone or replication)	standalone

External PostgreSQL configuration

Name	Description	Value
externalDatabase.host	Database host	localhost
externalDatabase.port	Database port number	5432
externalDatabase.user	Non-root username for Concourse	bn_concourse
externalDatabase.password	Password for the non-root username for Concourse	""
externalDatabase.database	Concourse database name	bitnami_concourse
externalDatabase.existingSecret	Name of an existing secret resource containing the database credentials	""
externalDatabase.existingSecretPasswordKey	Name of an existing secret key containing the database credentials	""

See https://github.com/bitnami-labs/readme-generator-for-helm to create the table.

The above parameters map to the env variables defined in bitnami/concourse. For more information please refer to the bitnami/concourse image documentation.

Specify each parameter using the --set key=value[,key=value] argument to helm install. For example,

helm install my-release \
  --set secrets.localUsers=admin:password \
    bitnami/concourse

The above command sets the Concourse account username and password to admin and password respectively.

NOTE: Once this chart is deployed, it is not possible to change the application's access credentials, such as usernames or passwords, using Helm. To change these application credentials after deployment, delete any persistent volumes (PVs) used by the chart and re-deploy it, or use the application's built-in administrative tools if available.

Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart. For example,

helm install my-release -f values.yaml bitnami/concourse

Tip: You can use the default values.yaml

Configuration and installation details

Rolling vs Immutable tags

It is strongly recommended to use immutable tags in a production environment. This ensures your deployment does not change automatically if the same tag is updated with a different image.

Bitnami will release a new chart updating its containers if a new version of the main container, significant changes, or critical vulnerabilities exist.

Use an external database

Sometimes, you may want to have Concourse connect to an external database rather than a database within your cluster - for example, when using a managed database service, or when running a single database server for all your applications. To do this, set the mariadb.enabled parameter to false and specify the credentials for the external database using the externalDatabase.* parameters.

Refer to the chart documentation on using an external database for more details and an example.

Configure Ingress

This chart provides support for Ingress resources. If you have an Ingress controller installed on your cluster, such as nginx-ingress-controller or contour you can utilize the ingress controller to serve your application.

To enable Ingress integration, set ingress.enabled to true. The ingress.hostname property can be used to set the host name. The ingress.tls parameter can be used to add the TLS configuration for this host. It is also possible to have more than one host, with a separate TLS configuration for each host. Learn more about configuring and using Ingress.

Configure TLS Secrets for use with Ingress

The chart also facilitates the creation of TLS secrets for use with the Ingress controller, with different options for certificate management. Learn more about TLS secrets.

Persistence

The Bitnami Concourse image stores the concourse data and configurations at the /bitnami path of the container. Persistent Volume Claims are used to keep the data across deployments.

Configure extra environment variables

To add extra environment variables (useful for advanced operations like custom init scripts), use the extraEnvVars property.

extraEnvVars:
  - name: LOG_LEVEL
    value: DEBUG

Alternatively, use a ConfigMap or a Secret with the environment variables. To do so, use the extraEnvVarsCM or the extraEnvVarsSecret values.

Configure Sidecars and Init Containers

If additional containers are needed in the same pod as Concourse (such as additional metrics or logging exporters), they can be defined using the sidecars parameter. Similarly, you can add extra init containers using the initContainers parameter.

Learn more about configuring and using sidecar and init containers.

Set Pod affinity

This chart allows you to set your custom affinity using the affinity parameter. Find more information about Pod affinity in the Kubernetes documentation.

As an alternative, use one of the preset configurations for pod affinity, pod anti-affinity, and node affinity available at the bitnami/common chart. To do so, set the podAffinityPreset, podAntiAffinityPreset, or nodeAffinityPreset parameters.

Troubleshooting

Find more information about how to deal with common errors related to Bitnami's Helm charts in this troubleshooting guide.

Upgrading

To 2.0.0

This major updates the PostgreSQL subchart to its newest major, 12.0.0. Here you can find more information about the changes introduced in that version.

License

Copyright © 2023 VMware, Inc.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.