-
Notifications
You must be signed in to change notification settings - Fork 2
/
sane-defaults.yaml
123 lines (123 loc) · 3.24 KB
/
sane-defaults.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
https:
enabled: false
cloudbeesCoreChartVersion: 3.35.4
cjoc:
path: cjoc
initialCapPlugins:
- antisamy-markup-formatter
- blueocean-rest
- bluesteel-cjoc
- cloudbees-jenkins-advisor
- cloudbees-ssh-slaves
- ldap
- matrix-project
- operations-center-jnlp-controller
- operations-center-rbac
- pubsub-light
- sse-gateway
- suppress-stack-trace
initialExtraPlugins:
- configuration-as-code
- caffeine-api
cleanupPvcOnMasterDeletion: false
masters:
defaultMasterTemplate:
jcasc:
jenkins:
clouds:
- kubernetes:
containerCap: 10
containerCapStr: "10"
maxRequestsPerHost: 32
maxRequestsPerHostStr: "32"
name: "kubernetes"
namespace: "cloudbees-builds"
masterTemplates:
masterDefinitions:
specificMasters:
manyMasters:
yamlPatchTemplate: |
kind: StatefulSet
spec:
template:
spec:
containers:
- name: jenkins
volumeMounts:
- name: mm-custom-groovy
mountPath: /var/jenkins_config/configure-jenkins.groovy.d/
- name: backup-tmp
mountPath: /var/jenkins_backups/
volumes:
- name: mm-custom-groovy
configMap:
defaultMode: 420
name: mm-custom-groovy
- name: backup-tmp
emptyDir: {}
appIdConfig:
template: |
folder('app-{{ .appId }}') {
displayName('app-{{ .appId }}')
description('Folder for app-{{ .appId }}')
}
organizationFolder('app-{{ .appId }}/github-org-app-{{ .appId }}') {
description("Attempt to automatically create GH org")
displayName('github-org-app-{{ .appId }}')
organizations {
github {
repoOwner("cbci-helmfile-org")
credentialsId("cbci-helmfile-bot-token")
traits {
teamSlugFilter {
teamSlug('app-{{ .appId }}')
gitHubBranchDiscovery {
strategyId(0)
}
gitHubPullRequestDiscovery {
strategyId(0)
}
}
}
}
}
triggers {
cron('@daily')
}
}
ldap:
roles:
- Dev
- Audit
- Admin
teamTopology:
usersPerAppId: 3
security:
# NOT IMPLEMENTED YET
# enable the pod security policy. Cannot run as root. If you need this, then use gvisor.
podSecurityPolicy:
enabled: true
# this allows running as "root" in a more secure way. Uses gvisor(runsc) as a userspace kernel.
gvisor:
enabled: true
nodeLabel: "gvisor"
isolation:
# NOT IMPLEMENTED YET
# Enabled by default. This will put CJOC in its own namespace and any builds from CJOC in their own namespace.
# By default, each master will get its own namespace, and each master's builds will get their own namespace.
# These isolations can be reduced.
enabled: true
cjoc:
enabled: true
masters:
enabled: true
# defaults to EachMaster. Less isolated would be "AllMastersTogether".
level: EachMaster
builds:
enabled: true
# defaults to "EachMastersBuilds". Less isolated would be "AllMastersBuildsTogether".
level: EachMastersBuilds
prometheus-operator:
enabled: false
ldap-admin:
enabled: false