ZeroDownTime
/
kubezero
3
0
Fork 0
Code Issues 1 Pull Requests 23 Releases Wiki Activity
kubezero/charts/kubezero-ci
History
Stefan Reimer b5103f3cc3 feat: latest jenkins and trivy 2022-08-05 23:06:34 +00:00
..
templates fix: Fix CNI upgrade, new ECK CRDs, new logging, Istio fixes 2022-04-29 20:22:20 +02:00
Chart.yaml feat: latest jenkins and trivy 2022-08-05 23:06:34 +00:00
README.md feat: Version bump Jenkins in the CI module 2022-07-08 09:46:40 +02:00
README.md.gotmpl feat: various fixes and version bumps for >= 1.22.8 2022-04-08 17:11:34 +02:00
dashboards.yaml feat: add preconfigured Jenkins to CI module 2022-01-20 00:04:35 +01:00
update.sh feat: Istio Ingress migration to new gateway charts 2022-04-21 13:57:34 +02:00
values.yaml feat: latest jenkins and trivy 2022-08-05 23:06:34 +00:00

README.md

kubezero-ci

Version: 0.4.54 Type: application

KubeZero umbrella chart for all things CI

Homepage: https://kubezero.com

Maintainers

Name Email Url
Stefan Reimer stefan@zero-downtime.net

Requirements

Kubernetes: >= 1.20.0

Repository Name Version
https://aquasecurity.github.io/helm-charts/ trivy 0.4.15
https://cdn.zero-downtime.net/charts/ kubezero-lib >= 0.1.5
https://charts.jenkins.io jenkins 4.1.10
https://dl.gitea.io/charts/ gitea 5.0.5
https://gocd.github.io/helm-chart gocd 1.40.8

Jenkins

  • default build retention 10 builds, 32days
  • memory request 1.25GB
  • dark theme
  • trivy scanner incl. HTML reporting and publisher

goCD

Gitea

OpenSSH 8.8 RSA disabled

Resources

JVM tuning in containers

Values

Key Type Default Description
gitea.enabled bool false
gitea.gitea.admin.existingSecret string "gitea-admin-secret"
gitea.gitea.config.cache.ADAPTER string "memory"
gitea.gitea.config.database.DB_TYPE string "sqlite3"
gitea.gitea.demo bool false
gitea.gitea.metrics.enabled bool false
gitea.gitea.metrics.serviceMonitor.enabled bool false
gitea.image.rootless bool true
gitea.image.tag string "1.16.8"
gitea.istio.enabled bool false
gitea.istio.gateway string "istio-ingress/private-ingressgateway"
gitea.istio.url string "git.example.com"
gitea.mariadb.enabled bool false
gitea.memcached.enabled bool false
gitea.mysql.enabled bool false
gitea.persistence.enabled bool true
gitea.persistence.size string "4Gi"
gitea.postgresql.enabled bool false
gitea.securityContext.allowPrivilegeEscalation bool false
gitea.securityContext.capabilities.add[0] string "SYS_CHROOT"
gitea.securityContext.capabilities.drop[0] string "ALL"
gocd.enabled bool false
gocd.istio.enabled bool false
gocd.istio.gateway string "istio-ingress/private-ingressgateway"
gocd.istio.url string ""
gocd.server.ingress.enabled bool false
gocd.server.service.type string "ClusterIP"
jenkins.agent.annotations."container.apparmor.security.beta.kubernetes.io/jnlp" string "unconfined"
jenkins.agent.containerCap int 2
jenkins.agent.customJenkinsLabels[0] string "podman-aws-trivy"
jenkins.agent.idleMinutes int 10
jenkins.agent.image string "public.ecr.aws/zero-downtime/jenkins-podman"
jenkins.agent.podName string "podman-aws"
jenkins.agent.podRetention string "Default"
jenkins.agent.resources.limits.cpu string "4"
jenkins.agent.resources.limits.memory string "6144Mi"
jenkins.agent.resources.requests.cpu string "512m"
jenkins.agent.resources.requests.memory string "1024Mi"
jenkins.agent.showRawYaml bool false
jenkins.agent.tag string "v0.2.5-1"
jenkins.agent.yamlMergeStrategy string "merge"
jenkins.agent.yamlTemplate string "apiVersion: v1\nkind: Pod\nspec:\n serviceAccountName: jenkins-podman-aws\n containers:\n - name: jnlp\n resources:\n limits:\n github.com/fuse: 1\n volumeMounts:\n - name: aws-token\n mountPath: \"/var/run/secrets/sts.amazonaws.com/serviceaccount/\"\n readOnly: true\n volumes:\n - name: aws-token\n projected:\n sources:\n - serviceAccountToken:\n path: token\n expirationSeconds: 86400\n audience: \"sts.amazonaws.com\""
jenkins.controller.JCasC.configScripts.zdt-settings string "jenkins:\n noUsageStatistics: true\n disabledAdministrativeMonitors:\n - \"jenkins.security.ResourceDomainRecommendation\"\nunclassified:\n buildDiscarders:\n configuredBuildDiscarders:\n - \"jobBuildDiscarder\"\n - defaultBuildDiscarder:\n discarder:\n logRotator:\n artifactDaysToKeepStr: \"32\"\n artifactNumToKeepStr: \"10\"\n daysToKeepStr: \"100\"\n numToKeepStr: \"10\"\n"
jenkins.controller.disableRememberMe bool true
jenkins.controller.enableRawHtmlMarkupFormatter bool true
jenkins.controller.initContainerResources.limits.cpu string "1000m"
jenkins.controller.initContainerResources.limits.memory string "1024Mi"
jenkins.controller.initContainerResources.requests.cpu string "50m"
jenkins.controller.initContainerResources.requests.memory string "256Mi"
jenkins.controller.installPlugins[0] string "kubernetes:3651.v908e7db_10d06"
jenkins.controller.installPlugins[1] string "workflow-aggregator:581.v0c46fa_697ffd"
jenkins.controller.installPlugins[2] string "git:4.11.3"
jenkins.controller.installPlugins[3] string "configuration-as-code:1429.v09b_044a_c93de"
jenkins.controller.installPlugins[4] string "antisamy-markup-formatter:2.7"
jenkins.controller.installPlugins[5] string "prometheus:2.0.11"
jenkins.controller.installPlugins[6] string "htmlpublisher:1.30"
jenkins.controller.installPlugins[7] string "build-discarder:60.v1747b0eb632a"
jenkins.controller.installPlugins[8] string "dark-theme:156.v6cf16af6f9ef"
jenkins.controller.javaOpts string "-XX:+UseContainerSupport -XX:+UseStringDeduplication -Dhudson.model.DirectoryBrowserSupport.CSP=\"sandbox allow-popups; default-src 'none'; img-src 'self' cdn.zero-downtime.net; style-src 'unsafe-inline';\""
jenkins.controller.jenkinsOpts string "--sessionTimeout=180 --sessionEviction=3600"
jenkins.controller.prometheus.enabled bool false
jenkins.controller.resources.limits.cpu string "2000m"
jenkins.controller.resources.limits.memory string "4096Mi"
jenkins.controller.resources.requests.cpu string "250m"
jenkins.controller.resources.requests.memory string "1280Mi"
jenkins.controller.tag string "2.356-alpine-jdk17"
jenkins.controller.testEnabled bool false
jenkins.enabled bool false
jenkins.istio.agent.enabled bool false
jenkins.istio.agent.gateway string "istio-ingress/private-ingressgateway"
jenkins.istio.agent.url string "jenkins-agent.example.com"
jenkins.istio.enabled bool false
jenkins.istio.gateway string "istio-ingress/private-ingressgateway"
jenkins.istio.url string "jenkins.example.com"
jenkins.istio.webhook.enabled bool false
jenkins.istio.webhook.gateway string "istio-ingress/ingressgateway"
jenkins.istio.webhook.url string "jenkins-webhook.example.com"
jenkins.persistence.size string "4Gi"
jenkins.serviceAccountAgent.create bool true
jenkins.serviceAccountAgent.name string "jenkins-podman-aws"
trivy.enabled bool false
trivy.persistence.enabled bool true
trivy.persistence.size string "1Gi"
trivy.rbac.create bool false
trivy.rbac.pspEnabled bool false