kit.yml

---
name: concourse
version: 3.13.0
authors:
- James Hunt  <jhunt@starkandwayne.com>
- Dennis Bell <dennis@rubidiumstudios.com>
docs:   https://concourse.ci
code:   https://github.com/genesis-community/concourse-genesis-kit

genesis_version_min: 2.7.6

certificates:
  self-signed-cert:
    ssl:
      ca: { valid_for: 10y }
      server: { valid_for: 1y, names: [ "${params.external_domain}" ] }

  +locker:
    locker:
      ca: { valid_for: 10y }
      server: { valid_for: 1y, names: [ "locker" ] }

credentials:
  base:
    tsa/host_key: ssh 2048 fixed
    tsa/worker_key: ssh 2048 fixed

    atc/token_signing_key: rsa 2048 fixed

    locker/api:
      password: random 16

    webui:
      password: random 16 fmt bcrypt

  shout:
    shout/ops:
      password: random 16
    shout/admin:
      password: random 32

  +internal-db:
    database/atc:
      password: random 64 fixed

provided:
  github-oauth:
    oauth:
      keys:
        provider_key:
          prompt: "GitHub OAuth Client ID"
        provider_secret:
          prompt: "GitHub OAuth Client Secret"
  github-enterprise-oauth:
    oauth:
      keys:
        provider_key:
          prompt: "GitHub OAuth Client ID"
        provider_secret:
          prompt: "GitHub OAuth Client Secret"
  cf-oauth:
    oauth:
      keys:
        provider_key:
          prompt: "UAA Client ID"
        provider_secret:
          prompt: "UAA Client Secret"
  provided-cert:
    ssl/server:
      # replace this with type: x509-cert when genesis supports that
      keys:
        certificate:
          prompt: "SSL certificate for Concourse"
          #multiline: true # not yet supported
        key:
          prompt: "SSL key for Concourse"
          #multiline: true # not yet supported
  external-db:
    database/external:
      keys:
        password:
          prompt: "Password for external database user"

  +vault-token-default:
    vault:
      keys:
        token:
          prompt: "Vault token"

  +vault-approle-default:
    approle/concourse:
      keys:
        approle-id:
          prompt: "Approle ID (generated from setup-approle addon)"
        approle-secret:
          prompt: "Approle Secret (generated from setup-approle addon)"