205 lines
4.6 KiB
YAML
205 lines
4.6 KiB
YAML
gocd:
|
|
enabled: false
|
|
|
|
server:
|
|
service:
|
|
type: "ClusterIP"
|
|
ingress:
|
|
enabled: false
|
|
|
|
istio:
|
|
enabled: false
|
|
gateway: istio-ingress/private-ingressgateway
|
|
url: "" # gocd.example.com
|
|
|
|
|
|
gitea:
|
|
enabled: false
|
|
|
|
image:
|
|
tag: 1.16.6
|
|
rootless: true
|
|
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
add:
|
|
- SYS_CHROOT
|
|
|
|
persistence:
|
|
enabled: true
|
|
size: 4Gi
|
|
|
|
gitea:
|
|
admin:
|
|
existingSecret: gitea-admin-secret
|
|
|
|
# Enable to install demo creds
|
|
demo: false
|
|
|
|
metrics:
|
|
enabled: false
|
|
serviceMonitor:
|
|
enabled: false
|
|
|
|
config:
|
|
database:
|
|
DB_TYPE: sqlite3
|
|
cache:
|
|
ADAPTER: memory
|
|
|
|
memcached:
|
|
enabled: false
|
|
postgresql:
|
|
enabled: false
|
|
mysql:
|
|
enabled: false
|
|
mariadb:
|
|
enabled: false
|
|
|
|
istio:
|
|
enabled: false
|
|
gateway: istio-ingress/private-ingressgateway
|
|
url: git.example.com
|
|
|
|
|
|
jenkins:
|
|
enabled: false
|
|
|
|
controller:
|
|
tag: 2.332.2-lts-jdk17-preview
|
|
#tagLabel: alpine
|
|
disableRememberMe: true
|
|
prometheus:
|
|
enabled: false
|
|
testEnabled: false
|
|
enableRawHtmlMarkupFormatter: true
|
|
javaOpts: "-XX:+UseContainerSupport -XX:+UseStringDeduplication -Dhudson.model.DirectoryBrowserSupport.CSP=\"sandbox allow-popups; default-src 'none'; img-src 'self' cdn.zero-downtime.net; style-src 'unsafe-inline';\""
|
|
jenkinsOpts: "--sessionTimeout=180 --sessionEviction=3600"
|
|
|
|
resources:
|
|
requests:
|
|
cpu: "250m"
|
|
memory: "1280Mi"
|
|
limits:
|
|
cpu: "2000m"
|
|
memory: "4096Mi"
|
|
initContainerResources:
|
|
requests:
|
|
cpu: "50m"
|
|
memory: "256Mi"
|
|
limits:
|
|
cpu: "1000m"
|
|
memory: "1024Mi"
|
|
|
|
JCasC:
|
|
configScripts:
|
|
zdt-settings: |
|
|
jenkins:
|
|
noUsageStatistics: true
|
|
disabledAdministrativeMonitors:
|
|
- "jenkins.security.ResourceDomainRecommendation"
|
|
unclassified:
|
|
buildDiscarders:
|
|
configuredBuildDiscarders:
|
|
- "jobBuildDiscarder"
|
|
- defaultBuildDiscarder:
|
|
discarder:
|
|
logRotator:
|
|
artifactDaysToKeepStr: "32"
|
|
artifactNumToKeepStr: "10"
|
|
daysToKeepStr: "100"
|
|
numToKeepStr: "10"
|
|
|
|
installPlugins:
|
|
- kubernetes:3580.v78271e5631dc
|
|
- workflow-aggregator:2.6
|
|
- git:4.11.0
|
|
- configuration-as-code:1414.v878271fc496f
|
|
- antisamy-markup-formatter:2.7
|
|
- prometheus:2.0.11
|
|
- htmlpublisher:1.29
|
|
- build-discarder:60.v1747b0eb632a
|
|
- dark-theme:156.v6cf16af6f9ef
|
|
|
|
serviceAccountAgent:
|
|
create: true
|
|
name: jenkins-podman-aws
|
|
|
|
# Preconfigure agents to use zdt podman requires fuse/overlayfs
|
|
agent:
|
|
image: public.ecr.aws/zero-downtime/jenkins-podman
|
|
tag: v0.2.4-21
|
|
resources:
|
|
requests:
|
|
cpu: "512m"
|
|
memory: "1024Mi"
|
|
limits:
|
|
cpu: "4"
|
|
memory: "6144Mi"
|
|
#alwaysPullImage: true
|
|
podRetention: "Default"
|
|
showRawYaml: false
|
|
podName: "podman-aws"
|
|
customJenkinsLabels:
|
|
- podman-aws-trivy
|
|
idleMinutes: 10
|
|
containerCap: 2
|
|
annotations:
|
|
container.apparmor.security.beta.kubernetes.io/jnlp: unconfined
|
|
# envVars:
|
|
# - name: AWS_WEB_IDENTITY_TOKEN_FILE
|
|
# value: "/var/run/secrets/sts.amazonaws.com/serviceaccount/token"
|
|
# - name: AWS_STS_REGIONAL_ENDPOINTS
|
|
# value: regional
|
|
# - name: AWS_ROLE_ARN
|
|
# value: "<IAM ROLE ARN>"
|
|
yamlMergeStrategy: "merge"
|
|
yamlTemplate: |-
|
|
apiVersion: v1
|
|
kind: Pod
|
|
spec:
|
|
serviceAccountName: jenkins-podman-aws
|
|
containers:
|
|
- name: jnlp
|
|
resources:
|
|
limits:
|
|
github.com/fuse: 1
|
|
volumeMounts:
|
|
- name: aws-token
|
|
mountPath: "/var/run/secrets/sts.amazonaws.com/serviceaccount/"
|
|
readOnly: true
|
|
volumes:
|
|
- name: aws-token
|
|
projected:
|
|
sources:
|
|
- serviceAccountToken:
|
|
path: token
|
|
expirationSeconds: 86400
|
|
audience: "sts.amazonaws.com"
|
|
|
|
persistence:
|
|
size: "4Gi"
|
|
|
|
istio:
|
|
enabled: false
|
|
gateway: istio-ingress/private-ingressgateway
|
|
url: jenkins.example.com
|
|
|
|
# Dedicated VirtualService for webhooks
|
|
webhook:
|
|
enabled: false
|
|
gateway: istio-ingress/ingressgateway
|
|
url: jenkins-webhook.example.com
|
|
|
|
trivy:
|
|
enabled: false
|
|
persistence:
|
|
enabled: true
|
|
size: 1Gi
|
|
rbac:
|
|
create: false
|
|
pspEnabled: false
|