101 lines
2.5 KiB
YAML
101 lines
2.5 KiB
YAML
---
|
|
controller:
|
|
overwritePluginsFromImage: false
|
|
containerSecurityContext: ""
|
|
runAsUser: 0
|
|
fsGroup: 1000
|
|
JCasC:
|
|
authorizationStrategy: |-
|
|
loggedInUsersCanDoAnything:
|
|
allowAnonymousRead: true
|
|
securityRealm: |-
|
|
ldap:
|
|
configurations:
|
|
- server: ldap.acme.com
|
|
rootDN: dc=acme,dc=uk
|
|
managerPasswordSecret: ${LDAP_PASSWORD}
|
|
groupMembershipStrategy:
|
|
fromUserRecord:
|
|
attributeName: "memberOf"
|
|
additionalPlugins:
|
|
- ldap:682.v7b_544c9d1512
|
|
scriptApproval:
|
|
- "method groovy.json.JsonSlurperClassic parseText java.lang.String"
|
|
- "new groovy.json.JsonSlurperClassic"
|
|
|
|
ingress:
|
|
enabled: true
|
|
|
|
persistence:
|
|
enabled: false
|
|
|
|
agent:
|
|
resources:
|
|
limits:
|
|
cpu: "1"
|
|
memory: "2048Mi"
|
|
envVars:
|
|
- name: HOME
|
|
value: /home/jenkins/agent
|
|
- name: PATH
|
|
value: /usr/local/bin
|
|
nodeSelector:
|
|
"app.kubernetes.io/component": "{{ .Values.agent.componentName }}"
|
|
restrictedPssSecurityContext: true
|
|
runAsUser: 1000
|
|
runAsGroup: 1000
|
|
yamlTemplate: |-
|
|
apiVersion: v1
|
|
kind: Pod
|
|
spec:
|
|
tolerations:
|
|
- key: "app.kubernetes.io/component"
|
|
operator: "Equal"
|
|
value: "{{ .Values.agent.componentName }}"
|
|
effect: "NoSchedule"
|
|
additionalAgents:
|
|
maven:
|
|
podName: maven
|
|
customJenkinsLabels: maven
|
|
# An example of overriding the jnlp container
|
|
# sideContainerName: jnlp
|
|
image:
|
|
repository: jenkins/jnlp-agent-maven
|
|
tag: latest
|
|
python:
|
|
podName: python
|
|
customJenkinsLabels: python
|
|
sideContainerName: python
|
|
image:
|
|
repository: python
|
|
tag: "3"
|
|
command: "/bin/sh -c"
|
|
args: "cat"
|
|
TTYEnabled: true
|
|
podTemplates:
|
|
python: |
|
|
- name: python
|
|
label: jenkins-python
|
|
containers:
|
|
- name: python
|
|
image: python:3
|
|
command: "/bin/sh -c"
|
|
args: "cat"
|
|
ttyEnabled: true
|
|
privileged: true
|
|
resourceRequestCpu: "400m"
|
|
resourceRequestMemory: "512Mi"
|
|
resourceLimitCpu: "1"
|
|
resourceLimitMemory: "1024Mi"
|
|
volumes:
|
|
- type: EmptyDir
|
|
mountPath: /var/myapp/myemptydir
|
|
memory: false
|
|
serviceAccount:
|
|
annotations:
|
|
description: "Used by release {{ .Release.Name }} for role-based access control"
|
|
serviceAccountAgent:
|
|
create: true
|
|
annotations:
|
|
description: "Used by release {{ .Release.Name }} for role-based access control"
|