Configurations

This section covers configuring Porch’s various features and integrations after deployment.

Component Configuration

Components

Configure individual Porch components:

• Porch Server - API server configuration
  • Git Authentication - Git repository authentication
  • Cert Manager Webhooks - Webhook certificate management
• Porch Controllers - Repository, PackageRevision, and variant controller settings
• Function Runner - Function execution environment
  • Private Registries - Container registry authentication

OTEL Metrics, Tracing, and Profiling

OpenTelemetry - Tracing, metrics, and pprof configuration

For a local Prometheus, Grafana, Jaeger, Pyroscope, and Grafana Alloy stack, see Local Performance Monitoring Deployment.

Core Configuration Options

Cache

Porch supports two caching mechanisms:

• CR Cache (default) - Uses Kubernetes Custom Resources
• Database Cache - Uses PostgreSQL for improved performance

Advanced Integrations

Repository Synchronization

Configure Git repository synchronization with ConfigSync or other GitOps tools.

Configuration Best Practices

• Start with default CR cache for simplicity
• Configure private registries only if using private KRM functions in Function Runner
• Enable tracing in development environments for debugging
• Deploy local performance monitoring when measuring latency or running performance tests
• Use cert-manager for production TLS certificate management
• Set appropriate resource limits for each component