670 lines
27 KiB
YAML
670 lines
27 KiB
YAML
# Default values for jenkins.
|
|
# This is a YAML-formatted file.
|
|
# Declare name/value pairs to be passed into your templates.
|
|
# name: value
|
|
|
|
## Overrides for generated resource names
|
|
# See templates/_helpers.tpl
|
|
# nameOverride:
|
|
# fullnameOverride:
|
|
# namespaceOverride:
|
|
|
|
# For FQDN resolving of the controller service. Change this value to match your existing configuration.
|
|
# ref: https://github.com/kubernetes/dns/blob/master/docs/specification.md
|
|
clusterZone: "cluster.local"
|
|
|
|
renderHelmLabels: true
|
|
|
|
controller:
|
|
# Used for label app.kubernetes.io/component
|
|
componentName: "jenkins-controller"
|
|
image: "jenkins/jenkins"
|
|
# tag: "2.346.1-jdk11"
|
|
tagLabel: jdk11
|
|
imagePullPolicy: "Always"
|
|
imagePullSecretName:
|
|
# Optionally configure lifetime for controller-container
|
|
lifecycle:
|
|
# postStart:
|
|
# exec:
|
|
# command:
|
|
# - "uname"
|
|
# - "-a"
|
|
disableRememberMe: false
|
|
numExecutors: 0
|
|
# configures the executor mode of the Jenkins node. Possible values are: NORMAL or EXCLUSIVE
|
|
executorMode: "NORMAL"
|
|
# This is ignored if enableRawHtmlMarkupFormatter is true
|
|
markupFormatter: plainText
|
|
customJenkinsLabels: []
|
|
# The default configuration uses this secret to configure an admin user
|
|
# If you don't need that user or use a different security realm then you can disable it
|
|
adminSecret: true
|
|
|
|
hostNetworking: false
|
|
# When enabling LDAP or another non-Jenkins identity source, the built-in admin account will no longer exist.
|
|
# If you disable the non-Jenkins identity store and instead use the Jenkins internal one,
|
|
# you should revert controller.adminUser to your preferred admin user:
|
|
adminUser: "admin"
|
|
# adminPassword: <defaults to random>
|
|
admin:
|
|
existingSecret: ""
|
|
userKey: jenkins-admin-user
|
|
passwordKey: jenkins-admin-password
|
|
# This values should not be changed unless you use your custom image of jenkins or any devired from. If you want to use
|
|
# Cloudbees Jenkins Distribution docker, you should set jenkinsHome: "/var/cloudbees-jenkins-distribution"
|
|
jenkinsHome: "/var/jenkins_home"
|
|
# This values should not be changed unless you use your custom image of jenkins or any devired from. If you want to use
|
|
# Cloudbees Jenkins Distribution docker, you should set jenkinsRef: "/usr/share/cloudbees-jenkins-distribution/ref"
|
|
jenkinsRef: "/usr/share/jenkins/ref"
|
|
# Path to the jenkins war file which is used by jenkins-plugin-cli.
|
|
jenkinsWar: "/usr/share/jenkins/jenkins.war"
|
|
# Overrides the default arguments passed to the war
|
|
# overrideArgs:
|
|
# - --httpPort=8080
|
|
resources:
|
|
requests:
|
|
cpu: "50m"
|
|
memory: "256Mi"
|
|
limits:
|
|
cpu: "2000m"
|
|
memory: "4096Mi"
|
|
# Overrides the init container default values
|
|
# initContainerResources:
|
|
# requests:
|
|
# cpu: "50m"
|
|
# memory: "256Mi"
|
|
# limits:
|
|
# cpu: "2000m"
|
|
# memory: "4096Mi"
|
|
# Environment variables that get added to the init container (useful for e.g. http_proxy)
|
|
# initContainerEnv:
|
|
# - name: http_proxy
|
|
# value: "http://192.168.64.1:3128"
|
|
# containerEnv:
|
|
# - name: http_proxy
|
|
# value: "http://192.168.64.1:3128"
|
|
# Set min/max heap here if needed with:
|
|
# javaOpts: "-Xms512m -Xmx512m"
|
|
# jenkinsOpts: ""
|
|
# If you are using the ingress definitions provided by this chart via the `controller.ingress` block the configured hostname will be the ingress hostname starting with `https://` or `http://` depending on the `tls` configuration.
|
|
# The Protocol can be overwritten by specifying `controller.jenkinsUrlProtocol`.
|
|
# jenkinsUrlProtocol: "https"
|
|
# If you are not using the provided ingress you can specify `controller.jenkinsUrl` to change the url definition.
|
|
# jenkinsUrl: ""
|
|
# If you set this prefix and use ingress controller then you might want to set the ingress path below
|
|
# jenkinsUriPrefix: "/jenkins"
|
|
# Enable pod security context (must be `true` if podSecurityContextOverride, runAsUser or fsGroup are set)
|
|
usePodSecurityContext: true
|
|
# Note that `runAsUser`, `fsGroup`, and `securityContextCapabilities` are
|
|
# being deprecated and replaced by `podSecurityContextOverride`.
|
|
# Set runAsUser to 1000 to let Jenkins run as non-root user 'jenkins' which exists in 'jenkins/jenkins' docker image.
|
|
# When setting runAsUser to a different value than 0 also set fsGroup to the same value:
|
|
runAsUser: 1000
|
|
fsGroup: 1000
|
|
# If you have PodSecurityPolicies that require dropping of capabilities as suggested by CIS K8s benchmark, put them here
|
|
securityContextCapabilities: {}
|
|
# drop:
|
|
# - NET_RAW
|
|
# Completely overwrites the contents of the `securityContext`, ignoring the
|
|
# values provided for the deprecated fields: `runAsUser`, `fsGroup`, and
|
|
# `securityContextCapabilities`. In the case of mounting an ext4 filesystem,
|
|
# it might be desirable to use `supplementalGroups` instead of `fsGroup` in
|
|
# the `securityContext` block: https://github.com/kubernetes/kubernetes/issues/67014#issuecomment-589915496
|
|
# podSecurityContextOverride:
|
|
# runAsUser: 1000
|
|
# runAsNonRoot: true
|
|
# supplementalGroups: [1000]
|
|
# # capabilities: {}
|
|
# Container securityContext
|
|
containerSecurityContext:
|
|
runAsUser: 1000
|
|
runAsGroup: 1000
|
|
readOnlyRootFilesystem: true
|
|
allowPrivilegeEscalation: false
|
|
servicePort: 8080
|
|
targetPort: 8080
|
|
# For minikube, set this to NodePort, elsewhere use LoadBalancer
|
|
# Use ClusterIP if your setup includes ingress controller
|
|
serviceType: ClusterIP
|
|
# Use Local to preserve the client source IP and avoids a second hop for LoadBalancer and Nodeport type services,
|
|
# but risks potentially imbalanced traffic spreading.
|
|
serviceExternalTrafficPolicy:
|
|
# Jenkins controller service annotations
|
|
serviceAnnotations: {}
|
|
# Jenkins controller custom labels
|
|
statefulSetLabels: {}
|
|
# foo: bar
|
|
# bar: foo
|
|
# Jenkins controller service labels
|
|
serviceLabels: {}
|
|
# service.beta.kubernetes.io/aws-load-balancer-backend-protocol: https
|
|
# Put labels on Jenkins controller pod
|
|
podLabels: {}
|
|
# Used to create Ingress record (should used with ServiceType: ClusterIP)
|
|
# nodePort: <to set explicitly, choose port between 30000-32767
|
|
# Enable Kubernetes Startup, Liveness and Readiness Probes
|
|
# if Startup Probe is supported, enable it too
|
|
# ~ 2 minutes to allow Jenkins to restart when upgrading plugins. Set ReadinessTimeout to be shorter than LivenessTimeout.
|
|
healthProbes: true
|
|
probes:
|
|
startupProbe:
|
|
httpGet:
|
|
path: '{{ default "" .Values.controller.jenkinsUriPrefix }}/login'
|
|
port: http
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 12
|
|
livenessProbe:
|
|
failureThreshold: 5
|
|
httpGet:
|
|
path: '{{ default "" .Values.controller.jenkinsUriPrefix }}/login'
|
|
port: http
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
# If Startup Probe is not supported on your Kubernetes cluster, you might want to use "initialDelaySeconds" instead.
|
|
# It delays the initial liveness probe while Jenkins is starting
|
|
# initialDelaySeconds: 60
|
|
readinessProbe:
|
|
failureThreshold: 3
|
|
httpGet:
|
|
path: '{{ default "" .Values.controller.jenkinsUriPrefix }}/login'
|
|
port: http
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
# If Startup Probe is not supported on your Kubernetes cluster, you might want to use "initialDelaySeconds" instead.
|
|
# It delays the initial readyness probe while Jenkins is starting
|
|
# initialDelaySeconds: 60
|
|
|
|
# PodDisruptionBudget config
|
|
podDisruptionBudget:
|
|
enabled: false
|
|
# For Kubernetes v1.5+, use 'policy/v1beta1'
|
|
# For Kubernetes v1.21+, use 'policy/v1'
|
|
apiVersion: "policy/v1beta1"
|
|
annotations: {}
|
|
labels: {}
|
|
# maxUnavailable: "0"
|
|
|
|
agentListenerEnabled: true
|
|
agentListenerPort: 50000
|
|
agentListenerHostPort:
|
|
agentListenerNodePort:
|
|
agentListenerExternalTrafficPolicy:
|
|
agentListenerLoadBalancerSourceRanges:
|
|
- 0.0.0.0/0
|
|
disabledAgentProtocols:
|
|
- JNLP-connect
|
|
- JNLP2-connect
|
|
csrf:
|
|
defaultCrumbIssuer:
|
|
enabled: true
|
|
proxyCompatability: true
|
|
# Kubernetes service type for the JNLP agent service
|
|
# agentListenerServiceType is the Kubernetes Service type for the JNLP agent service,
|
|
# either 'LoadBalancer', 'NodePort', or 'ClusterIP'
|
|
# Note if you set this to 'LoadBalancer', you *must* define annotations to secure it. By default
|
|
# this will be an external load balancer and allowing inbound 0.0.0.0/0, a HUGE
|
|
# security risk: https://github.com/kubernetes/charts/issues/1341
|
|
agentListenerServiceType: "ClusterIP"
|
|
# Optionally assign an IP to the LoadBalancer agentListenerService LoadBalancer
|
|
# GKE users: only regional static IPs will work for Service Load balancer.
|
|
agentListenerLoadBalancerIP:
|
|
agentListenerServiceAnnotations: {}
|
|
|
|
# Example of 'LoadBalancer' type of agent listener with annotations securing it
|
|
# agentListenerServiceType: LoadBalancer
|
|
# agentListenerServiceAnnotations:
|
|
# service.beta.kubernetes.io/aws-load-balancer-internal: "True"
|
|
# service.beta.kubernetes.io/load-balancer-source-ranges: "172.0.0.0/8, 10.0.0.0/8"
|
|
|
|
# LoadBalancerSourcesRange is a list of allowed CIDR values, which are combined with ServicePort to
|
|
# set allowed inbound rules on the security group assigned to the controller load balancer
|
|
loadBalancerSourceRanges:
|
|
- 0.0.0.0/0
|
|
# Optionally assign a known public LB IP
|
|
# loadBalancerIP: 1.2.3.4
|
|
# Optionally configure a JMX port
|
|
# requires additional javaOpts, ie
|
|
# javaOpts: >
|
|
# -Dcom.sun.management.jmxremote.port=4000
|
|
# -Dcom.sun.management.jmxremote.authenticate=false
|
|
# -Dcom.sun.management.jmxremote.ssl=false
|
|
# jmxPort: 4000
|
|
# Optionally configure other ports to expose in the controller container
|
|
extraPorts: []
|
|
# - name: BuildInfoProxy
|
|
# port: 9000
|
|
|
|
# List of plugins to be install during Jenkins controller start
|
|
installPlugins:
|
|
- kubernetes:3600.v144b_cd192ca_a_
|
|
- workflow-aggregator:581.v0c46fa_697ffd
|
|
- git:4.11.3
|
|
- gitea:1.4.3
|
|
- configuration-as-code:1429.v09b_044a_c93de
|
|
|
|
# Set to false to download the minimum required version of all dependencies.
|
|
installLatestPlugins: true
|
|
|
|
# Set to true to download latest dependencies of any plugin that is requested to have the latest version.
|
|
installLatestSpecifiedPlugins: false
|
|
|
|
# List of plugins to install in addition to those listed in controller.installPlugins
|
|
additionalPlugins: []
|
|
|
|
# Enable to initialize the Jenkins controller only once on initial installation.
|
|
# Without this, whenever the controller gets restarted (Evicted, etc.) it will fetch plugin updates which has the potential to cause breakage.
|
|
# Note that for this to work, `persistence.enabled` needs to be set to `true`
|
|
initializeOnce: false
|
|
|
|
# Enable to always override the installed plugins with the values of 'controller.installPlugins' on upgrade or redeployment.
|
|
# overwritePlugins: true
|
|
|
|
# Configures if plugins bundled with `controller.image` should be overwritten with the values of 'controller.installPlugins' on upgrade or redeployment.
|
|
overwritePluginsFromImage: true
|
|
|
|
# Enable HTML parsing using OWASP Markup Formatter Plugin (antisamy-markup-formatter), useful with ghprb plugin.
|
|
# The plugin is not installed by default, please update controller.installPlugins.
|
|
enableRawHtmlMarkupFormatter: false
|
|
# Used to approve a list of groovy functions in pipelines used the script-security plugin. Can be viewed under /scriptApproval
|
|
scriptApproval: []
|
|
# - "method groovy.json.JsonSlurperClassic parseText java.lang.String"
|
|
# - "new groovy.json.JsonSlurperClassic"
|
|
# List of groovy init scripts to be executed during Jenkins controller start
|
|
initScripts: []
|
|
# - |
|
|
# print 'adding global pipeline libraries, register properties, bootstrap jobs...'
|
|
|
|
# 'name' is a name of an existing secret in same namespace as jenkins,
|
|
# 'keyName' is the name of one of the keys inside current secret.
|
|
# the 'name' and 'keyName' are concatenated with a '-' in between, so for example:
|
|
# an existing secret "secret-credentials" and a key inside it named "github-password" should be used in Jcasc as ${secret-credentials-github-password}
|
|
# 'name' and 'keyName' must be lowercase RFC 1123 label must consist of lower case alphanumeric characters or '-',
|
|
# and must start and end with an alphanumeric character (e.g. 'my-name', or '123-abc')
|
|
additionalExistingSecrets: []
|
|
# - name: secret-name-1
|
|
# keyName: username
|
|
# - name: secret-name-1
|
|
# keyName: password
|
|
|
|
additionalSecrets: []
|
|
# - name: nameOfSecret
|
|
# value: secretText
|
|
|
|
# Generate SecretClaim resources in order to create Kubernetes secrets from HashiCorp Vault using kube-vault-controller.
|
|
# 'name' is name of the secret that will be created in Kubernetes. The Jenkins fullname is prepended to this value.
|
|
# 'path' is the fully qualified path to the secret in Vault
|
|
# 'type' is an optional Kubernetes secret type. Defaults to 'Opaque'
|
|
# 'renew' is an optional secret renewal time in seconds
|
|
secretClaims: []
|
|
# - name: secretName # required
|
|
# path: testPath # required
|
|
# type: kubernetes.io/tls # optional
|
|
# renew: 60 # optional
|
|
|
|
# Name of default cloud configuration.
|
|
cloudName: "kubernetes"
|
|
|
|
# Below is the implementation of Jenkins Configuration as Code. Add a key under configScripts for each configuration area,
|
|
# where each corresponds to a plugin or section of the UI. Each key (prior to | character) is just a label, and can be any value.
|
|
# Keys are only used to give the section a meaningful name. The only restriction is they may only contain RFC 1123 \ DNS label
|
|
# characters: lowercase letters, numbers, and hyphens. The keys become the name of a configuration yaml file on the controller in
|
|
# /var/jenkins_home/casc_configs (by default) and will be processed by the Configuration as Code Plugin. The lines after each |
|
|
# become the content of the configuration yaml file. The first line after this is a JCasC root element, eg jenkins, credentials,
|
|
# etc. Best reference is https://<jenkins_url>/configuration-as-code/reference. The example below creates a welcome message:
|
|
JCasC:
|
|
defaultConfig: true
|
|
configScripts: {}
|
|
# welcome-message: |
|
|
# jenkins:
|
|
# systemMessage: Welcome to our CI\CD server. This Jenkins is configured and managed 'as code'.
|
|
# Ignored if securityRealm is defined in controller.JCasC.configScripts and
|
|
securityRealm: |-
|
|
local:
|
|
allowsSignup: false
|
|
enableCaptcha: false
|
|
users:
|
|
- id: "${chart-admin-username}"
|
|
name: "Jenkins Admin"
|
|
password: "${chart-admin-password}"
|
|
# Ignored if authorizationStrategy is defined in controller.JCasC.configScripts
|
|
authorizationStrategy: |-
|
|
loggedInUsersCanDoAnything:
|
|
allowAnonymousRead: false
|
|
# Optionally specify additional init-containers
|
|
customInitContainers: []
|
|
# - name: custom-init
|
|
# image: "alpine:3.7"
|
|
# imagePullPolicy: Always
|
|
# command: [ "uname", "-a" ]
|
|
|
|
sidecars:
|
|
configAutoReload:
|
|
# If enabled: true, Jenkins Configuration as Code will be reloaded on-the-fly without a reboot. If false or not-specified,
|
|
# jcasc changes will cause a reboot and will only be applied at the subsequent start-up. Auto-reload uses the
|
|
# http://<jenkins_url>/reload-configuration-as-code endpoint to reapply config when changes to the configScripts are detected.
|
|
enabled: true
|
|
image: kiwigrid/k8s-sidecar:1.15.0
|
|
imagePullPolicy: IfNotPresent
|
|
resources: {}
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 100Mi
|
|
# requests:
|
|
# cpu: 50m
|
|
# memory: 50Mi
|
|
# How many connection-related errors to retry on
|
|
reqRetryConnect: 10
|
|
# env:
|
|
# - name: REQ_TIMEOUT
|
|
# value: "30"
|
|
# SSH port value can be set to any unused TCP port. The default, 1044, is a non-standard SSH port that has been chosen at random.
|
|
# Is only used to reload jcasc config from the sidecar container running in the Jenkins controller pod.
|
|
# This TCP port will not be open in the pod (unless you specifically configure this), so Jenkins will not be
|
|
# accessible via SSH from outside of the pod. Note if you use non-root pod privileges (runAsUser & fsGroup),
|
|
# this must be > 1024:
|
|
sshTcpPort: 1044
|
|
# folder in the pod that should hold the collected dashboards:
|
|
folder: "/var/jenkins_home/casc_configs"
|
|
# If specified, the sidecar will search for JCasC config-maps inside this namespace.
|
|
# Otherwise the namespace in which the sidecar is running will be used.
|
|
# It's also possible to specify ALL to search in all namespaces:
|
|
# searchNamespace:
|
|
containerSecurityContext:
|
|
readOnlyRootFilesystem: true
|
|
allowPrivilegeEscalation: false
|
|
|
|
# Allows you to inject additional/other sidecars
|
|
other: []
|
|
## The example below runs the client for https://smee.io as sidecar container next to Jenkins,
|
|
## that allows to trigger build behind a secure firewall.
|
|
## https://jenkins.io/blog/2019/01/07/webhook-firewalls/#triggering-builds-with-webhooks-behind-a-secure-firewall
|
|
##
|
|
## Note: To use it you should go to https://smee.io/new and update the url to the generete one.
|
|
# - name: smee
|
|
# image: docker.io/twalter/smee-client:1.0.2
|
|
# args: ["--port", "{{ .Values.controller.servicePort }}", "--path", "/github-webhook/", "--url", "https://smee.io/new"]
|
|
# resources:
|
|
# limits:
|
|
# cpu: 50m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 10m
|
|
# memory: 32Mi
|
|
# Name of the Kubernetes scheduler to use
|
|
schedulerName: ""
|
|
# Node labels and tolerations for pod assignment
|
|
# ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
|
|
# ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#taints-and-tolerations-beta-feature
|
|
nodeSelector: {}
|
|
|
|
terminationGracePeriodSeconds:
|
|
|
|
terminationMessagePath:
|
|
terminationMessagePolicy:
|
|
|
|
tolerations: []
|
|
|
|
affinity: {}
|
|
# Leverage a priorityClass to ensure your pods survive resource shortages
|
|
# ref: https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/
|
|
priorityClassName:
|
|
|
|
podAnnotations: {}
|
|
# Add StatefulSet annotations
|
|
statefulSetAnnotations: {}
|
|
|
|
# StatefulSet updateStrategy
|
|
# ref: https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/#update-strategies
|
|
updateStrategy: {}
|
|
|
|
ingress:
|
|
enabled: true
|
|
# Override for the default paths that map requests to the backend
|
|
paths: []
|
|
# - backend:
|
|
# serviceName: >-
|
|
# {{ template "jenkins.fullname" . }}
|
|
# # Don't use string here, use only integer value!
|
|
# servicePort: 8080
|
|
# For Kubernetes v1.19+, use 'networking.k8s.io/v1'
|
|
apiVersion: "networking.k8s.io/v1"
|
|
labels: {}
|
|
annotations:
|
|
kubernetes.io/ingress.class: nginx
|
|
cert-manager.io/cluster-issuer: cloudflare-letsencrypt-prod
|
|
|
|
hostName: jenkins.kluster.moll.re
|
|
tls:
|
|
- secretName: cloudflare-letsencrypt-issuer-account-key
|
|
hosts:
|
|
- jenkins.kluster.moll.re
|
|
|
|
# often you want to have your controller all locked down and private
|
|
# but you still want to get webhooks from your SCM
|
|
# A secondary ingress will let you expose different urls
|
|
# with a differnt configuration
|
|
secondaryingress:
|
|
enabled: false
|
|
# paths you want forwarded to the backend
|
|
# ex /github-webhook
|
|
paths: []
|
|
# For Kubernetes v1.14+, use 'networking.k8s.io/v1beta1'
|
|
# For Kubernetes v1.19+, use 'networking.k8s.io/v1'
|
|
apiVersion: "extensions/v1beta1"
|
|
labels: {}
|
|
annotations: {}
|
|
# kubernetes.io/ingress.class: nginx
|
|
# kubernetes.io/tls-acme: "true"
|
|
# For Kubernetes >= 1.18 you should specify the ingress-controller via the field ingressClassName
|
|
# See https://kubernetes.io/blog/2020/04/02/improvements-to-the-ingress-api-in-kubernetes-1.18/#specifying-the-class-of-an-ingress
|
|
# ingressClassName: nginx
|
|
# configures the hostname e.g. jenkins-external.example.com
|
|
hostName:
|
|
tls:
|
|
# - secretName: jenkins-external.example.com
|
|
# hosts:
|
|
# - jenkins-external.example.com
|
|
|
|
|
|
agent:
|
|
enabled: true
|
|
defaultsProviderTemplate: ""
|
|
# URL for connecting to the Jenkins contoller
|
|
jenkinsUrl:
|
|
# connect to the specified host and port, instead of connecting directly to the Jenkins controller
|
|
jenkinsTunnel:
|
|
kubernetesConnectTimeout: 5
|
|
kubernetesReadTimeout: 15
|
|
maxRequestsPerHostStr: "32"
|
|
namespace:
|
|
image: "jenkins/inbound-agent"
|
|
tag: "4.11.2-4"
|
|
workingDir: "/home/jenkins/agent"
|
|
nodeUsageMode: "NORMAL"
|
|
customJenkinsLabels: []
|
|
# name of the secret to be used for image pulling
|
|
imagePullSecretName:
|
|
componentName: "jenkins-agent"
|
|
websocket: false
|
|
privileged: false
|
|
runAsUser:
|
|
runAsGroup:
|
|
resources:
|
|
requests:
|
|
cpu: "512m"
|
|
memory: "512Mi"
|
|
limits:
|
|
cpu: "512m"
|
|
memory: "512Mi"
|
|
# You may want to change this to true while testing a new image
|
|
alwaysPullImage: false
|
|
# Controls how agent pods are retained after the Jenkins build completes
|
|
# Possible values: Always, Never, OnFailure
|
|
podRetention: "Never"
|
|
# Disable if you do not want the Yaml the agent pod template to show up
|
|
# in the job Console Output. This can be helpful for either security reasons
|
|
# or simply to clean up the output to make it easier to read.
|
|
showRawYaml: true
|
|
# You can define the volumes that you want to mount for this container
|
|
# Allowed types are: ConfigMap, EmptyDir, HostPath, Nfs, PVC, Secret
|
|
# Configure the attributes as they appear in the corresponding Java class for that type
|
|
# https://github.com/jenkinsci/kubernetes-plugin/tree/master/src/main/java/org/csanchez/jenkins/plugins/kubernetes/volumes
|
|
volumes: []
|
|
# - type: ConfigMap
|
|
# configMapName: myconfigmap
|
|
# mountPath: /var/myapp/myconfigmap
|
|
# - type: EmptyDir
|
|
# mountPath: /var/myapp/myemptydir
|
|
# memory: false
|
|
# - type: HostPath
|
|
# hostPath: /var/lib/containers
|
|
# mountPath: /var/myapp/myhostpath
|
|
# - type: Nfs
|
|
# mountPath: /var/myapp/mynfs
|
|
# readOnly: false
|
|
# serverAddress: "192.0.2.0"
|
|
# serverPath: /var/lib/containers
|
|
# - type: PVC
|
|
# claimName: mypvc
|
|
# mountPath: /var/myapp/mypvc
|
|
# readOnly: false
|
|
# - type: Secret
|
|
# defaultMode: "600"
|
|
# mountPath: /var/myapp/mysecret
|
|
# secretName: mysecret
|
|
# Pod-wide environment, these vars are visible to any container in the agent pod
|
|
|
|
# You can define the workspaceVolume that you want to mount for this container
|
|
# Allowed types are: DynamicPVC, EmptyDir, HostPath, Nfs, PVC
|
|
# Configure the attributes as they appear in the corresponding Java class for that type
|
|
# https://github.com/jenkinsci/kubernetes-plugin/tree/master/src/main/java/org/csanchez/jenkins/plugins/kubernetes/volumes/workspace
|
|
workspaceVolume: {}
|
|
## DynamicPVC example
|
|
# type: DynamicPVC
|
|
# configMapName: myconfigmap
|
|
## EmptyDir example
|
|
# type: EmptyDir
|
|
# memory: false
|
|
## HostPath example
|
|
# type: HostPath
|
|
# hostPath: /var/lib/containers
|
|
## NFS example
|
|
# type: Nfs
|
|
# readOnly: false
|
|
# serverAddress: "192.0.2.0"
|
|
# serverPath: /var/lib/containers
|
|
## PVC example
|
|
# type: PVC
|
|
# claimName: mypvc
|
|
# readOnly: false
|
|
#
|
|
# Pod-wide environment, these vars are visible to any container in the agent pod
|
|
envVars: []
|
|
# - name: PATH
|
|
# value: /usr/local/bin
|
|
nodeSelector: {}
|
|
# Key Value selectors. Ex:
|
|
# jenkins-agent: v1
|
|
|
|
# Executed command when side container gets started
|
|
command:
|
|
args: "${computer.jnlpmac} ${computer.name}"
|
|
# Side container name
|
|
sideContainerName: "jnlp"
|
|
# Doesn't allocate pseudo TTY by default
|
|
TTYEnabled: false
|
|
# Max number of spawned agent
|
|
containerCap: 10
|
|
# Pod name
|
|
podName: "default"
|
|
# Allows the Pod to remain active for reuse until the configured number of
|
|
# minutes has passed since the last step was executed on it.
|
|
idleMinutes: 0
|
|
# Raw yaml template for the Pod. For example this allows usage of toleration for agent pods.
|
|
# https://github.com/jenkinsci/kubernetes-plugin#using-yaml-to-define-pod-templates
|
|
# https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
|
|
yamlTemplate: ""
|
|
# yamlTemplate: |-
|
|
# apiVersion: v1
|
|
# kind: Pod
|
|
# spec:
|
|
# tolerations:
|
|
# - key: "key"
|
|
# operator: "Equal"
|
|
# value: "value"
|
|
# Defines how the raw yaml field gets merged with yaml definitions from inherited pod templates: merge or override
|
|
yamlMergeStrategy: "override"
|
|
# Timeout in seconds for an agent to be online
|
|
connectTimeout: 100
|
|
# Annotations to apply to the pod.
|
|
annotations: {}
|
|
|
|
# Disable the default Jenkins Agent configuration.
|
|
# Useful when configuring agents only with the podTemplates value, since the default podTemplate populated by values mentioned above will be excluded in the rendered template.
|
|
disableDefaultAgent: false
|
|
|
|
# Below is the implementation of custom pod templates for the default configured kubernetes cloud.
|
|
# Add a key under podTemplates for each pod template. Each key (prior to | character) is just a label, and can be any value.
|
|
# Keys are only used to give the pod template a meaningful name. The only restriction is they may only contain RFC 1123 \ DNS label
|
|
# characters: lowercase letters, numbers, and hyphens. Each pod template can contain multiple containers.
|
|
# For this pod templates configuration to be loaded the following values must be set:
|
|
# controller.JCasC.defaultConfig: true
|
|
# Best reference is https://<jenkins_url>/configuration-as-code/reference#Cloud-kubernetes. The example below creates a python pod template.
|
|
podTemplates: {}
|
|
# python: |
|
|
# - name: python
|
|
# label: jenkins-python
|
|
# serviceAccount: jenkins
|
|
# containers:
|
|
# - name: python
|
|
# image: python:3
|
|
# command: "/bin/sh -c"
|
|
# args: "cat"
|
|
# ttyEnabled: true
|
|
# privileged: true
|
|
# resourceRequestCpu: "400m"
|
|
# resourceRequestMemory: "512Mi"
|
|
# resourceLimitCpu: "1"
|
|
# resourceLimitMemory: "1024Mi"
|
|
|
|
# Here you can add additional agents
|
|
# They inherit all values from `agent` so you only need to specify values which differ
|
|
additionalAgents: {}
|
|
# maven:
|
|
# podName: maven
|
|
# customJenkinsLabels: maven
|
|
# # An example of overriding the jnlp container
|
|
# # sideContainerName: jnlp
|
|
# image: jenkins/jnlp-agent-maven
|
|
# tag: latest
|
|
# python:
|
|
# podName: python
|
|
# customJenkinsLabels: python
|
|
# sideContainerName: python
|
|
# image: python
|
|
# tag: "3"
|
|
# command: "/bin/sh -c"
|
|
# args: "cat"
|
|
# TTYEnabled: true
|
|
|
|
persistence:
|
|
enabled: true
|
|
## A manually managed Persistent Volume and Claim
|
|
## Requires persistence.enabled: true
|
|
## If defined, PVC must be created manually before volume will be bound
|
|
existingClaim: jenkins-data-nfs
|
|
|
|
## Install Default RBAC roles and bindings
|
|
rbac:
|
|
create: true
|
|
readSecrets: false
|
|
|
|
serviceAccount:
|
|
create: true
|
|
# The name of the service account is autogenerated by default
|
|
name:
|
|
annotations: {}
|
|
imagePullSecretName:
|