# Buildkite Self-Hosted Agent Documentation > Buildkite documentation for self-hosted agents, covering installation on Linux, macOS, Windows, and Docker, running on AWS, GCP, and Kubernetes, agent configuration, security, monitoring, and the CLI reference. ## Pipelines ### Best practices - [Agent management](https://buildkite.com/docs/pipelines/best-practices/agent-management.md): Best practices for agent infrastructure: cloud compute, Kubernetes, hosted agents, queue design, lifecycle, and autoscaling. ### Agent - [Overview](https://buildkite.com/docs/agent.md): Overview of the Buildkite agent, comparing self-hosted and Buildkite hosted agents, architecture, lifecycle, and CLI usage. #### Self-hosted agents - [Overview](https://buildkite.com/docs/agent/self-hosted.md): Running agents on your own infrastructure, covering installation, configuration, starting agents, and experimental features. - [Tokens](https://buildkite.com/docs/agent/self-hosted/tokens.md): Creating, managing, and revoking agent tokens used to connect self-hosted agents to Buildkite clusters. - [Code access](https://buildkite.com/docs/agent/self-hosted/code-access.md): Configuring SSH keys on self-hosted agents to clone private Git repositories, including GitHub-specific setup. ##### Run on Kubernetes - [Overview](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s.md): Architecture and prerequisites for the Agent Stack for Kubernetes controller that runs Buildkite jobs as Kubernetes pods. - [Installation](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/installation.md): Installing the Agent Stack for Kubernetes controller using Helm, including chart configuration and namespace setup. - [Git credentials](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/git-credentials.md): Configuring SSH keys and HTTPS git-credentials for cloning private repositories in Kubernetes agent pods. - [Default parameters](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/default-parameters.md): Adding environment variables using envFrom to default checkout, command, and sidecar containers in agent-stack-k8s. - [Controller configuration](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/controller-configuration.md): Reference for agent-stack-k8s controller CLI flags, commands, and configuration options. - [Agent configuration](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/agent-configuration.md): Setting Buildkite agent configuration options (shell, hooks, experiments, security flags) within agent-stack-k8s values.yaml. - [Running builds](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/running-builds.md): Defining pipeline steps that target Kubernetes queues, using the kubernetes plugin for container and checkout configuration. - [Long-running jobs](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/long-running-jobs.md): Configuring job timeout duration (activeDeadlineSeconds) globally or per-step in agent-stack-k8s. - [Git settings](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/git-settings.md): Overriding git clone, fetch, and clean flags on a per-step basis in agent-stack-k8s pipelines. - [Pipeline signing](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/pipeline-signing.md): Setting up JWKS key pairs as Kubernetes secrets to enable signed pipeline verification in agent-stack-k8s. - [Agent hooks and plugins](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/agent-hooks-and-plugins.md): Configuring agent hooks using ConfigMaps and using Buildkite plugins within agent-stack-k8s controller. - [Pipeline validation](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/pipeline-validation.md): Validating agent-stack-k8s pipeline and plugin configurations using JSON Schema linting. - [Job metadata](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/job-metadata.md): Adding default Kubernetes labels and annotations to jobs created by the agent-stack-k8s controller. - [Sidecars](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/sidecars.md): Running sidecar containers alongside job command containers in agent-stack-k8s pipelines. - [Kubernetes PodSpec](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/podspec.md): How agent-stack-k8s generates Kubernetes PodSpecs from controller config, pipeline definitions, and podSpecPatch. - [Custom images](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/custom-images.md): Specifying custom container images for command and checkout containers in agent-stack-k8s, including image requirements. - [Pod templates](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/pod-template.md): Using Kubernetes PodTemplate resources as reusable pod specs for agent-stack-k8s pipeline steps. - [Container resource limits](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/container-resource-limits.md): Setting CPU and memory requests/limits for containers using resource classes or PodSpec patches in agent-stack-k8s. - [Volume mounts](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/volume-mounts.md): Attaching extra volume mounts to agent-stack-k8s pod containers for sharing data between containers. - [Command override](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/overriding-commands.md): Rules and limitations for overriding container commands using PodSpecPatch in agent-stack-k8s. - [Securing the stack](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/securing-the-stack.md): Using prohibit-kubernetes-plugin to prevent pipeline-level PodSpec overrides in agent-stack-k8s. - [Prometheus metrics](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/prometheus-metrics.md): Exposing and scraping Prometheus metrics from the agent-stack-k8s controller, with available metric descriptions. ###### Build container images - [Buildah](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/buildah-container-builds.md): Building OCI container images with Buildah in agent-stack-k8s, covering privileged and rootless configurations. - [BuildKit](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/buildkit-container-builds.md): Building container images with BuildKit in agent-stack-k8s, covering privileged, rootless, and strict modes. - [Docker Compose](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/docker-compose-container-builds.md): Running Docker Compose plugin builds in agent-stack-k8s with Docker socket mounting or Docker-in-Docker. - [Docker-in-Docker (DinD)](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/dind-container-builds.md): Running Docker-in-Docker as a sidecar container for standard Docker builds in agent-stack-k8s. - [Kaniko](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/kaniko-container-builds.md): Building container images with Kaniko in agent-stack-k8s without a Docker daemon, pushing to various registries. - [Namespace remote builders](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/namespace-container-builds.md): Using Namespace remote Docker builders to offload container builds from agent-stack-k8s pods. - [Depot remote builders](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/depot-agent-kubernetes-container-builds.md): Using Depot remote builders for container builds on agent-stack-k8s, with authentication and caching setup. - [Troubleshooting](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/troubleshooting.md): Debugging agent-stack-k8s issues using debug mode, Kubernetes log collection, and common error solutions. ###### Migrate from Elastic CI Stack for AWS - [Amazon ECR authentication](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/migrate-from-elastic-ci-stack-for-aws/ecr.md): Migrating Amazon ECR authentication from Elastic CI Stack for AWS to agent-stack-k8s using the ecr plugin. - [Docker registry authentication](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/migrate-from-elastic-ci-stack-for-aws/docker-login.md): Migrating Docker registry authentication from Elastic CI Stack for AWS to agent-stack-k8s using docker-login plugin. - [Pre-installed packages](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/migrate-from-elastic-ci-stack-for-aws/packages.md): Handling missing pre-installed packages when migrating from Elastic CI Stack for AWS AMIs to agent-stack-k8s containers. - [Hook execution differences](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/migrate-from-elastic-ci-stack-for-aws/hook-execution-differences.md): How agent hooks execute differently in agent-stack-k8s (separate containers) versus Elastic CI Stack for AWS (single process). - [Secrets](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/migrate-from-elastic-ci-stack-for-aws/secrets.md): Migrating secrets from S3 buckets to Kubernetes Secrets or Buildkite secrets when moving to agent-stack-k8s. - [Docker daemon access](https://buildkite.com/docs/agent/self-hosted/agent-stack-k8s/migrate-from-elastic-ci-stack-for-aws/docker-daemon.md): Configuring Docker daemon access in agent-stack-k8s using sidecar containers or DaemonSets when migrating from AWS. ##### Run on AWS - [Overview](https://buildkite.com/docs/agent/self-hosted/aws.md): Options for running Buildkite agents on AWS: Elastic CI Stack, Agent Stack for Kubernetes, or self-managed EC2 instances. ###### Architectural considerations - [VPC design](https://buildkite.com/docs/agent/self-hosted/aws/architecture/vpc.md): VPC network design options (public, private, split subnets) for Elastic CI Stack for AWS deployments. - [Securing your setup](https://buildkite.com/docs/agent/self-hosted/aws/architecture/securing-your-setup.md): Preventing builds from accessing EC2 metadata and restricting IAM permissions in AWS agent deployments. - [Recommendations](https://buildkite.com/docs/agent/self-hosted/aws/architecture/recommendations.md): Guidance on sizing agent pools and balancing performance, cost, and availability for AWS CI/CD infrastructure. ###### Elastic CI Stack - [Overview](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack.md): Overview of the Elastic CI Stack for AWS: an autoscaling agent cluster with Docker, S3, and CloudWatch integration. - [Architecture](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/architecture.md): Internal architecture of the Elastic CI Stack for AWS: ASG, launch templates, AMI software stack, and autoscaling. ###### EC2 Linux and Windows - [Setup with AWS CloudFormation](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/setup.md): Step-by-step CloudFormation setup for the Elastic CI Stack for AWS on Linux and Windows EC2 instances. - [Setup with Terraform](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/terraform.md): Deploying the Elastic CI Stack for AWS using the Terraform module instead of CloudFormation. - [Security](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/security.md): Security configuration for Elastic CI Stack for AWS: S3 secrets, VPC settings, IAM permissions, and CloudFormation. - [Managing the Stack](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/managing-elastic-ci-stack.md): Managing Elastic CI Stack for AWS: Docker registries, ECR, custom hooks, bootstrap scripts, and autoscaling. - [Configuration parameters](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/configuration-parameters.md): Complete reference of all CloudFormation and Terraform configuration parameters for Elastic CI Stack for AWS. - [Creating custom AMIs](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/creating-custom-amis.md): Building custom AMIs for Elastic CI Stack for AWS using Packer templates and the ImageId parameter. ###### Build container images - [BuildKit](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/buildkit-container-builds.md): Building container images with BuildKit/Buildx on Elastic CI Stack for AWS, including caching and multi-platform builds. - [Remote BuildKit on EC2](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/remote-buildkit-ec2.md): Setting up a dedicated EC2 instance as a remote BuildKit builder for Elastic CI Stack for AWS agents. - [Docker Compose](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/docker-compose-container-builds.md): Running Docker Compose plugin builds on Elastic CI Stack for AWS with caching, multi-arch, and registry push. - [Kaniko](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/kaniko-container-builds.md): Building container images with Kaniko on Elastic CI Stack for AWS without a Docker daemon, pushing to registries. - [Buildah](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/buildah-container-builds.md): Building OCI container images with Buildah on Elastic CI Stack for AWS using the Docker Buildkite plugin. - [Depot](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/depot-elastic-ci-container-builds.md): Using Depot remote builders for container builds on Elastic CI Stack for AWS EC2 agents. - [Namespace remote builders](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/namespace-remote-builders.md): Using Namespace remote Docker builders to offload container builds from Elastic CI Stack for AWS instances. - [Troubleshooting](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-linux-and-windows/troubleshooting.md): Debugging Elastic CI Stack for AWS using CloudWatch Logs, log-collector scripts, and common issue solutions. ###### EC2 Mac - [Setup](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-mac/setup.md): Setting up Buildkite agents on AWS EC2 Mac instances using CloudFormation with Auto Scaling groups and custom AMIs. - [Troubleshooting](https://buildkite.com/docs/agent/self-hosted/aws/elastic-ci-stack/ec2-mac/troubleshooting.md): Troubleshooting EC2 Mac agent issues: Auto Scaling failures, agent startup, Xcode access, and SSH connectivity. ###### Self-serve install - [On AWS EC2 Mac instances](https://buildkite.com/docs/agent/self-hosted/aws/self-serve-install/ec2-mac.md): Manually installing the Buildkite agent on your own AWS EC2 Mac instances with AMI creation steps. ##### Run on Google Cloud - [Overview](https://buildkite.com/docs/agent/self-hosted/gcp.md): Options for running Buildkite agents on GCP: Elastic CI Stack Terraform module, Kubernetes, or self-managed instances. ###### Architectural considerations - [VPC design](https://buildkite.com/docs/agent/self-hosted/gcp/architecture/vpc.md): VPC network architecture, firewall rules, and security options for the Elastic CI Stack for GCP. ###### Elastic CI Stack - [Overview](https://buildkite.com/docs/agent/self-hosted/gcp/elastic-ci-stack.md): Overview of the Elastic CI Stack for GCP: autoscaling Terraform module with Docker, Cloud Logging, and preemptible VMs. - [Terraform](https://buildkite.com/docs/agent/self-hosted/gcp/elastic-ci-stack/terraform.md): Deploying the Elastic CI Stack for GCP using Terraform, including prerequisites, configuration, and custom images. - [Configuration](https://buildkite.com/docs/agent/self-hosted/gcp/elastic-ci-stack/configuration-parameters.md): Complete reference of all Terraform variables for configuring the Elastic CI Stack for GCP. - [Troubleshooting](https://buildkite.com/docs/agent/self-hosted/gcp/elastic-ci-stack/troubleshooting.md): Debugging Elastic CI Stack for GCP using Cloud Logging, serial console, SSH access, and common issue solutions. ##### Run on Azure - [Overview](https://buildkite.com/docs/agent/self-hosted/azure.md) ##### Custom install - [Overview](https://buildkite.com/docs/agent/self-hosted/install.md): Overview of agent installation methods across platforms, with links to platform-specific guides and manual install steps. - [Ubuntu](https://buildkite.com/docs/agent/self-hosted/install/ubuntu.md): Installing the Buildkite agent on Ubuntu 18.04+ using the signed apt repository. - [Debian](https://buildkite.com/docs/agent/self-hosted/install/debian.md): Installing the Buildkite agent on Debian 8+ using the signed apt repository. - [Red Hat/CentOS](https://buildkite.com/docs/agent/self-hosted/install/redhat.md): Installing the Buildkite agent on RHEL, CentOS, and Amazon Linux using the yum repository. - [FreeBSD](https://buildkite.com/docs/agent/self-hosted/install/freebsd.md): Installing the Buildkite agent on FreeBSD using the pkg package manager. - [macOS](https://buildkite.com/docs/agent/self-hosted/install/macos.md): Installing the Buildkite agent on macOS using Homebrew, with launchd service configuration. - [Windows](https://buildkite.com/docs/agent/self-hosted/install/windows.md): Installing the Buildkite agent on Windows using PowerShell or manual installation. - [Linux](https://buildkite.com/docs/agent/self-hosted/install/linux.md): Installing the Buildkite agent on any Linux system using the universal install script. - [Docker](https://buildkite.com/docs/agent/self-hosted/install/docker.md): Running the Buildkite agent in a Docker container using the official image, with Docker-in-Docker support. ##### Configure - [Overview](https://buildkite.com/docs/agent/self-hosted/configure.md): Agent configuration file reference: all settings, environment variables, and command-line flags for self-hosted agents. - [Job dispatch](https://buildkite.com/docs/agent/self-hosted/configure/job-dispatch.md) - [Git mirrors](https://buildkite.com/docs/agent/self-hosted/configure/git-mirrors.md): Setting up local Git mirrors on agents to speed up repository cloning and reduce network bandwidth. - [Experiments](https://buildkite.com/docs/agent/self-hosted/configure/experiments.md): List of experimental agent features you can opt into using the --experiment flag, with status and descriptions. - [Pausing and resuming](https://buildkite.com/docs/agent/self-hosted/pausing-and-resuming.md): Pausing and resuming individual agents to prevent job dispatch during maintenance or debugging. - [Prioritization](https://buildkite.com/docs/agent/self-hosted/prioritization.md): How Buildkite assigns jobs to agents based on priority values, success history, and queue targeting. ##### Monitoring and observability - [Overview](https://buildkite.com/docs/agent/self-hosted/monitoring-and-observability.md): Agent health checks, HTTP status endpoints, and Prometheus metrics for monitoring self-hosted agents. - [Tracing](https://buildkite.com/docs/agent/self-hosted/monitoring-and-observability/tracing.md): Setting up distributed tracing for the Buildkite agent using Datadog APM or OpenTelemetry. ##### Security - [Overview](https://buildkite.com/docs/agent/self-hosted/security.md): Security hardening for self-hosted agents: secrets storage, SSH keyscan, command evaluation, plugin controls. - [Network requirements](https://buildkite.com/docs/agent/self-hosted/security/network-requirements.md) - [Signed pipelines](https://buildkite.com/docs/agent/self-hosted/security/signed-pipelines.md): Cryptographically signing pipeline uploads and verifying signatures before job execution using JWKS keys. ##### Agent versions directory - [Overview](https://buildkite.com/docs/agent/self-hosted/versions-directory.md): Complete list of stable Buildkite agent 3.x releases with dates and known issues. - [Upgrading from 3.0-beta and 2.x versions](https://buildkite.com/docs/agent/self-hosted/versions-directory/upgrading-from-3-dot-0-beta-and-v2.md): Upgrading agents from 3.0-beta or 2.x to stable 3.x versions, with migration steps and changelog. #### Queues - [Overview](https://buildkite.com/docs/agent/queues.md): How queues route jobs to specific agents, targeting queues from pipeline YAML, and self-hosted vs hosted queue types. - [Managing](https://buildkite.com/docs/agent/queues/managing.md): Creating, configuring, pausing, and deleting self-hosted and Buildkite hosted queues within clusters. - [Agent lifecycle](https://buildkite.com/docs/agent/lifecycle.md): Agent lifecycle stages, signal handling (SIGTERM/SIGQUIT), exit codes, and troubleshooting common issues. - [Hooks](https://buildkite.com/docs/agent/hooks.md): Agent hook types, scopes (agent, repository, plugin), lifecycle events, and polyglot hook support. #### Command-line reference - [Overview](https://buildkite.com/docs/agent/cli/reference.md): Overview of all buildkite-agent CLI commands for managing agents, artifacts, pipelines, and build operations. - [start](https://buildkite.com/docs/agent/cli/reference/start.md): CLI reference for buildkite-agent start: flags for tags, token, configuration, spawn, and disconnect behavior. - [annotate](https://buildkite.com/docs/agent/cli/reference/annotate.md): CLI reference for buildkite-agent annotate: adding Markdown annotations to build pages with styles and contexts. - [annotation](https://buildkite.com/docs/agent/cli/reference/annotation.md): CLI reference for buildkite-agent annotation: removing existing build annotations by context. - [artifact](https://buildkite.com/docs/agent/cli/reference/artifact.md): CLI reference for buildkite-agent artifact: uploading, downloading, and searching build artifacts across steps. - [bootstrap](https://buildkite.com/docs/agent/cli/reference/bootstrap.md): CLI reference for buildkite-agent bootstrap: the internal command the agent runs to execute a job. - [build](https://buildkite.com/docs/agent/cli/reference/build.md): CLI reference for buildkite-agent build: canceling builds from within a running job. - [env](https://buildkite.com/docs/agent/cli/reference/env.md): CLI reference for buildkite-agent env: inspecting, setting, and unsetting environment variables in jobs. - [job](https://buildkite.com/docs/agent/cli/reference/job.md): CLI reference for buildkite-agent job update: modifying job attributes like timeout_in_minutes during execution. - [lock](https://buildkite.com/docs/agent/cli/reference/lock.md): CLI reference for buildkite-agent lock: coordinating concurrent builds on shared resources using named locks. - [meta-data](https://buildkite.com/docs/agent/cli/reference/meta-data.md): CLI reference for buildkite-agent meta-data: key/value store for sharing data across build steps and agents. - [oidc](https://buildkite.com/docs/agent/cli/reference/oidc.md): CLI reference for buildkite-agent oidc: requesting OIDC tokens for federated authentication with AWS, GCP, Azure. - [pause](https://buildkite.com/docs/agent/cli/reference/pause.md): CLI reference for buildkite-agent pause: manually pausing a running agent to stop job dispatch. - [pipeline](https://buildkite.com/docs/agent/cli/reference/pipeline.md): CLI reference for buildkite-agent pipeline upload: dynamically adding or replacing build steps from YAML/JSON. - [redactor](https://buildkite.com/docs/agent/cli/reference/redactor.md): CLI reference for buildkite-agent redactor: adding sensitive values to the log redactor during builds. - [resume](https://buildkite.com/docs/agent/cli/reference/resume.md): CLI reference for buildkite-agent resume: resuming a previously paused agent. - [secret](https://buildkite.com/docs/agent/cli/reference/secret.md): CLI reference for buildkite-agent secret get: retrieving secrets from Buildkite secrets with automatic redaction. - [step](https://buildkite.com/docs/agent/cli/reference/step.md): CLI reference for buildkite-agent step: getting and updating step attributes (label, priority) during a build. - [stop](https://buildkite.com/docs/agent/cli/reference/stop.md): CLI reference for buildkite-agent stop: manually stopping a running agent. - [tool](https://buildkite.com/docs/agent/cli/reference/tool.md): CLI reference for buildkite-agent tool: utilities for JWKS key generation and pipeline signing (experimental). ### Configure pipelines - [Environment variables](https://buildkite.com/docs/pipelines/configure/environment-variables.md): Complete reference of Buildkite environment variables available in build steps, hooks, and plugins. ### Security #### Secrets - [Managing](https://buildkite.com/docs/pipelines/security/secrets/managing.md): Best practices for managing pipeline secrets using secrets storage services, environment hooks, and agent hooks. #### Clusters - [Overview](https://buildkite.com/docs/pipelines/security/clusters.md): Clusters for organizing agents, queues, and pipelines into isolated groups with self-service management. - [Manage clusters](https://buildkite.com/docs/pipelines/security/clusters/manage.md): Creating, updating, and deleting clusters; managing maintainers, agent tokens, and pipeline assignments. - [Migrate from unclustered to clustered agents](https://buildkite.com/docs/pipelines/security/clusters/migrate-from-unclustered-to-clustered-agents.md): Step-by-step guide for migrating unclustered agents and pipelines to clustered agent infrastructure. #### OIDC - [Overview](https://buildkite.com/docs/pipelines/security/oidc.md): Overview of OIDC token issuance by Buildkite agents for federated authentication with AWS, GCP, Azure, and others. ### Integrations #### Plugins - [Overview](https://buildkite.com/docs/pipelines/integrations/plugins.md): How plugins extend build steps using job lifecycle hooks, including open source, private, and vendored plugin types. ## See also - [Buildkite Hosted Agent Documentation](https://buildkite.com/docs/llms-hosted-agents.txt): Buildkite documentation for Buildkite hosted agents, covering Linux and macOS instances, cache volumes, internal container registry, remote Docker builders, network security, code access, pipeline migration, and terminal access. - [Buildkite Agent Documentation](https://buildkite.com/docs/llms-agent.txt): Buildkite documentation for the Buildkite agent, covering self-hosted and Buildkite hosted agents, installation, configuration, CLI reference, queues, hooks, and lifecycle. - [Buildkite Troubleshooting and Debugging Documentation](https://buildkite.com/docs/llms-debugging.txt): Buildkite documentation for debugging and troubleshooting builds, agents, and infrastructure, covering log output management, build annotations, terminal access, agent lifecycle, and platform-specific troubleshooting guides.