Operations - Console

This page describes the operating procedures of the Console module: startup, logs, monitoring and backup. The module settings are described in Configuration - Console.

Startup and shutdown

The module is deployed with the Datachain stack, or in its own stack depending on the architecture. The startup and shutdown scripts are described in Operations - General. The module requires Keycloak and its database to be started.

Configuration file: console.env.

Access

Port Url Purpose

8093

/

Business operations of the console (IAM)

9093

/actuator-console/*

Spring Actuator (metrics and health information)

Logs

Logs are written under /logs/datachain/console (mounting a volume on /logs is recommended):

  • dc-console.log: application logs (debug), rolled over every day and every 200MB, compressed, kept for 30 days within a limit of 10GB;

  • access.log: access logs;

  • management.log: management logs, which can be ignored.

Monitoring

Monitoring is native to the component, through Spring Actuator, with metrics enabled and made available.

Module configuration (usually console.env)
# Prometheus configuration
management.endpoints.web.base-path=/actuator-console
management.server.address=0.0.0.0
management.prometheus.metrics.export.enabled=true
docker-compose.yml file
version: "3.7"
services:

  # Déclaration des autres services
  # Other service declaration

  console:
    image: ${HARBOR_REGISTRY}/dc/console:${PRODUCT_VERSION}
    networks:
      # Disponible sur le réseau traefik, car disponible via le proxy traefik
      traefik_network:
      # Disponible sur le réseau dc_network
      dc_network:
        aliases:
          - dc-console
    env_file: console.env
    deploy:
      mode: replicated
      replicas: 1
      labels:
        # Exposition via traefik
        - "traefik.enable=true"
        - "traefik.docker.network=traefik_network"
        # console disponible sur son port Standard sur son url public
        - "traefik.http.routers.console.rule=Host(`${CONSOLE_URL}`) && PathPrefix(`/`)"
        - "traefik.http.routers.console.entrypoints=websecure"
        - "traefik.http.routers.console.tls=true"
        - "traefik.http.routers.console.tls.certresolver=resolver1"
        - "traefik.http.routers.console.service=console"
        - "traefik.http.services.console.loadbalancer.server.port=8093"
        # métriques disponibles sur l'URL ADMIN_URL à l'uri /actuator-backend (voir configuration ci-dessous)
        - "traefik.http.routers.dc_console_actuator.rule=Host(`${ADMIN_URL}`) && PathPrefix(`/actuator-console`)"
        # URL traefik sécurisée
        - "traefik.http.routers.dc_console_actuator.entrypoints=websecure"
        - "traefik.http.routers.dc_console_actuator.tls=true"
        - "traefik.http.routers.dc_console_actuator.tls.certresolver=resolver1"
        - "traefik.http.routers.dc_console_actuator.service=dc_console_actuator"
        - "traefik.http.services.dc_console_actuator.loadbalancer.server.port=9093"
        - "traefik.http.routers.dc_console_actuator.middlewares=dc_console_actuator-auth@docker"
        # Protection de l'url par un mot de passe traefik généré avec la commande : echo $(htpasswd -nbB  adobis motdepasse) | sed -e s/\\$/\\$\\$/g
        - "traefik.http.middlewares.dc_console_actuator-auth.basicauth.users=adobis:$$2y$$05$$zMWiM6s1zgLJ8zBnTf3Dm.gxnEKhyt6.099nsOWkdyVon4tElSLIm"
        - "traefik.http.middlewares.dc_console_actuator-auth.basicauth.removeheader=true"

Backup

The module does not store data on its file system: data is in the dc_console database (see Operations - Data management).

Certificates

To add a trusted authority, place the certificate in the /java_cert_import volume: see Application certificates.

Dernière mise à jour le 2 novembre 2026 à 15:16