sane-defaults.yaml

https:
  enabled: false
cloudbeesCoreChartVersion: 3.35.4
cjoc:
  path: cjoc
  initialCapPlugins:
  - antisamy-markup-formatter
  - blueocean-rest
  - bluesteel-cjoc
  - cloudbees-jenkins-advisor
  - cloudbees-ssh-slaves
  - ldap
  - matrix-project
  - operations-center-jnlp-controller
  - operations-center-rbac
  - pubsub-light
  - sse-gateway
  - suppress-stack-trace
  initialExtraPlugins:
  - configuration-as-code
  - caffeine-api
  cleanupPvcOnMasterDeletion: false
masters:
  defaultMasterTemplate:
    jcasc:
      jenkins:
        clouds:
        - kubernetes:
            containerCap: 10
            containerCapStr: "10"
            maxRequestsPerHost: 32
            maxRequestsPerHostStr: "32"
            name: "kubernetes"
            namespace: "cloudbees-builds"
  masterTemplates:
  masterDefinitions:
    specificMasters:
    manyMasters:
  yamlPatchTemplate: |
    kind: StatefulSet
    spec:
      template:
        spec:
          containers:
          - name: jenkins
            volumeMounts:
            - name: mm-custom-groovy
              mountPath: /var/jenkins_config/configure-jenkins.groovy.d/
            - name: backup-tmp
              mountPath: /var/jenkins_backups/
          volumes:
          - name: mm-custom-groovy
            configMap:
              defaultMode: 420
              name: mm-custom-groovy
          - name: backup-tmp
            emptyDir: {}
appIdConfig:
  template: |
    folder('app-{{ .appId }}') {
        displayName('app-{{ .appId }}')
        description('Folder for app-{{ .appId }}')
    }
    organizationFolder('app-{{ .appId }}/github-org-app-{{ .appId }}') {
      description("Attempt to automatically create GH org")
      displayName('github-org-app-{{ .appId }}')
      organizations {
        github {
          repoOwner("cbci-helmfile-org")
          credentialsId("cbci-helmfile-bot-token")
          traits {
            teamSlugFilter {
              teamSlug('app-{{ .appId }}')
              gitHubBranchDiscovery {
                strategyId(0)
              }
              gitHubPullRequestDiscovery {
                strategyId(0)
              }
            }
          }
        }
      }
      triggers {
        cron('@daily')
      }
    }
ldap:
  roles:
    - Dev
    - Audit
    - Admin
teamTopology:
  usersPerAppId: 3
security:
  # NOT IMPLEMENTED YET
  # enable the pod security policy. Cannot run as root. If you need this, then use gvisor.
  podSecurityPolicy:
    enabled: true
  # this allows running as "root" in a more secure way. Uses gvisor(runsc) as a userspace kernel.
  gvisor:
    enabled: true
    nodeLabel: "gvisor"
isolation:
  # NOT IMPLEMENTED YET
  # Enabled by default. This will put CJOC in its own namespace and any builds from CJOC in their own namespace.
  # By default, each master will get its own namespace, and each master's builds will get their own namespace.
  # These isolations can be reduced.
  enabled: true
  cjoc:
    enabled: true
  masters:
    enabled: true
    # defaults to EachMaster. Less isolated would be "AllMastersTogether".
    level: EachMaster
    builds:
      enabled: true
      # defaults to "EachMastersBuilds". Less isolated would be "AllMastersBuildsTogether".
      level: EachMastersBuilds
prometheus-operator:
  enabled: false
ldap-admin:
  enabled: false