-
Notifications
You must be signed in to change notification settings - Fork 55
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
manifests: add jenkins.yaml template
There is this great plugin which I've somehow only learned about recently to make Jenkins configuration much easier: https://github.com/jenkinsci/configuration-as-code-plugin The RHCOS pipeline already makes use of it. To use this though, we need to be able to change the podspec of Jenkins itself, which until now was embedded in the `jenkins-persistent` template. There's more though: I want to be able to define environment variables, configmaps, secrets, etc... The default template doesn't provide facilities for this. So this patch essentially imports the template into our tree so that we can have more control. The downside of course is that we lose updates to the template. (Though that could also be seen as an upside too: we get better reproducibility even if the template is upgrade.) One convention I'm using is prefacing all the changes from the default template values with a comment saying "DELTA:". That way, we can more easily track what we added on top, and make rebasing easier in the future. Another advantage is that it makes setting it up easier because we don't have to customize as many parameters: we can just set the right default for us.
- Loading branch information
Showing
2 changed files
with
214 additions
and
14 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,210 @@ | ||
| # This is a fork of the `jenkins-persistent` OpenShift template because we need | ||
| # to be able to pass in more information to the Jenkins pod, such as env vars, | ||
| # secrets, configmaps, etc... | ||
|
|
||
| apiVersion: v1 | ||
| kind: Template | ||
| labels: | ||
| app: fedora-coreos | ||
| template: fedora-coreos-jenkins-template | ||
| metadata: | ||
| annotations: | ||
| description: |- | ||
| Jenkins service for the Fedora CoreOS pipeline. | ||
| iconClass: icon-jenkins | ||
| openshift.io/display-name: Fedora CoreOS Jenkins | ||
| openshift.io/documentation-url: https://github.com/coreos/fedora-coreos-pipeline | ||
| openshift.io/support-url: https://github.com/coreos/fedora-coreos-pipeline | ||
| openshift.io/provider-display-name: Fedora CoreOS | ||
| tags: fcos,jenkins,fedora | ||
| name: fedora-coreos-jenkins | ||
| objects: | ||
| - apiVersion: v1 | ||
| kind: Route | ||
| metadata: | ||
| annotations: | ||
| template.openshift.io/expose-uri: http://{.spec.host}{.spec.path} | ||
| name: ${JENKINS_SERVICE_NAME} | ||
| spec: | ||
| tls: | ||
| insecureEdgeTerminationPolicy: Redirect | ||
| termination: edge | ||
| to: | ||
| kind: Service | ||
| name: ${JENKINS_SERVICE_NAME} | ||
| - apiVersion: v1 | ||
| kind: PersistentVolumeClaim | ||
| metadata: | ||
| name: ${JENKINS_SERVICE_NAME} | ||
| spec: | ||
| accessModes: | ||
| - ReadWriteOnce | ||
| resources: | ||
| requests: | ||
| storage: ${VOLUME_CAPACITY} | ||
| - apiVersion: v1 | ||
| kind: DeploymentConfig | ||
| metadata: | ||
| annotations: | ||
| template.alpha.openshift.io/wait-for-ready: "true" | ||
| name: ${JENKINS_SERVICE_NAME} | ||
| spec: | ||
| replicas: 1 | ||
| selector: | ||
| name: ${JENKINS_SERVICE_NAME} | ||
| strategy: | ||
| type: Recreate | ||
| template: | ||
| metadata: | ||
| labels: | ||
| name: ${JENKINS_SERVICE_NAME} | ||
| spec: | ||
| containers: | ||
| - capabilities: {} | ||
| env: | ||
| - name: OPENSHIFT_ENABLE_OAUTH | ||
| value: ${ENABLE_OAUTH} | ||
| - name: OPENSHIFT_ENABLE_REDIRECT_PROMPT | ||
| value: "true" | ||
| - name: OPENSHIFT_JENKINS_JVM_ARCH | ||
| value: ${JVM_ARCH} | ||
| - name: KUBERNETES_MASTER | ||
| value: https://kubernetes.default:443 | ||
| - name: KUBERNETES_TRUST_CERTIFICATES | ||
| value: "true" | ||
| - name: JNLP_SERVICE_NAME | ||
| value: ${JNLP_SERVICE_NAME} | ||
| image: ' ' | ||
| imagePullPolicy: IfNotPresent | ||
| livenessProbe: | ||
| failureThreshold: 30 | ||
| httpGet: | ||
| path: /login | ||
| port: 8080 | ||
| initialDelaySeconds: 420 | ||
| timeoutSeconds: 3 | ||
| name: jenkins | ||
| readinessProbe: | ||
| httpGet: | ||
| path: /login | ||
| port: 8080 | ||
| initialDelaySeconds: 3 | ||
| timeoutSeconds: 3 | ||
| resources: | ||
| limits: | ||
| memory: ${MEMORY_LIMIT} | ||
| securityContext: | ||
| capabilities: {} | ||
| privileged: false | ||
| terminationMessagePath: /dev/termination-log | ||
| volumeMounts: | ||
| - mountPath: /var/lib/jenkins | ||
| name: ${JENKINS_SERVICE_NAME}-data | ||
| dnsPolicy: ClusterFirst | ||
| restartPolicy: Always | ||
| serviceAccountName: ${JENKINS_SERVICE_NAME} | ||
| volumes: | ||
| - name: ${JENKINS_SERVICE_NAME}-data | ||
| persistentVolumeClaim: | ||
| claimName: ${JENKINS_SERVICE_NAME} | ||
| triggers: | ||
| - imageChangeParams: | ||
| automatic: true | ||
| containerNames: | ||
| - jenkins | ||
| from: | ||
| kind: ImageStreamTag | ||
| name: ${JENKINS_IMAGE_STREAM_TAG} | ||
| namespace: ${NAMESPACE} | ||
| lastTriggeredImage: "" | ||
| type: ImageChange | ||
| - type: ConfigChange | ||
| - apiVersion: v1 | ||
| kind: ServiceAccount | ||
| metadata: | ||
| annotations: | ||
| serviceaccounts.openshift.io/oauth-redirectreference.jenkins: '{"kind":"OAuthRedirectReference","apiVersion":"v1","reference":{"kind":"Route","name":"${JENKINS_SERVICE_NAME}"}}' | ||
| name: ${JENKINS_SERVICE_NAME} | ||
| - apiVersion: v1 | ||
| groupNames: null | ||
| kind: RoleBinding | ||
| metadata: | ||
| name: ${JENKINS_SERVICE_NAME}_edit | ||
| roleRef: | ||
| name: edit | ||
| subjects: | ||
| - kind: ServiceAccount | ||
| name: ${JENKINS_SERVICE_NAME} | ||
| - apiVersion: v1 | ||
| kind: Service | ||
| metadata: | ||
| name: ${JNLP_SERVICE_NAME} | ||
| spec: | ||
| ports: | ||
| - name: agent | ||
| nodePort: 0 | ||
| port: 50000 | ||
| protocol: TCP | ||
| targetPort: 50000 | ||
| selector: | ||
| name: ${JENKINS_SERVICE_NAME} | ||
| sessionAffinity: None | ||
| type: ClusterIP | ||
| - apiVersion: v1 | ||
| kind: Service | ||
| metadata: | ||
| annotations: | ||
| service.alpha.openshift.io/dependencies: '[{"name": "${JNLP_SERVICE_NAME}", | ||
| "namespace": "", "kind": "Service"}]' | ||
| service.openshift.io/infrastructure: "true" | ||
| name: ${JENKINS_SERVICE_NAME} | ||
| spec: | ||
| ports: | ||
| - name: web | ||
| nodePort: 0 | ||
| port: 80 | ||
| protocol: TCP | ||
| targetPort: 8080 | ||
| selector: | ||
| name: ${JENKINS_SERVICE_NAME} | ||
| sessionAffinity: None | ||
| type: ClusterIP | ||
| parameters: | ||
| - description: The name of the OpenShift Service exposed for the Jenkins container. | ||
| displayName: Jenkins Service Name | ||
| name: JENKINS_SERVICE_NAME | ||
| value: jenkins | ||
| - description: The name of the service used for master/slave communication. | ||
| displayName: Jenkins JNLP Service Name | ||
| name: JNLP_SERVICE_NAME | ||
| value: jenkins-jnlp | ||
| - description: Whether to enable OAuth OpenShift integration. If false, the static | ||
| account 'admin' will be initialized with the password 'password'. | ||
| displayName: Enable OAuth in Jenkins | ||
| name: ENABLE_OAUTH | ||
| value: "true" | ||
| - description: Whether Jenkins runs with a 32 bit (i386) or 64 bit (x86_64) JVM. | ||
| displayName: Jenkins JVM Architecture | ||
| name: JVM_ARCH | ||
| value: i386 | ||
| - description: Maximum amount of memory the container can use. | ||
| displayName: Memory Limit | ||
| # DELTA: changed from 512Mi | ||
| name: MEMORY_LIMIT | ||
| value: 2Gi | ||
| - description: Volume space available for data, e.g. 512Mi, 2Gi. | ||
| displayName: Volume Capacity | ||
| name: VOLUME_CAPACITY | ||
| required: true | ||
| # DELTA: changed from 1Gi | ||
| value: 2Gi | ||
| - description: The OpenShift Namespace where the Jenkins ImageStream resides. | ||
| displayName: Jenkins ImageStream Namespace | ||
| name: NAMESPACE | ||
| value: openshift | ||
| - description: Name of the ImageStreamTag to be used for the Jenkins image. | ||
| displayName: Jenkins ImageStreamTag | ||
| name: JENKINS_IMAGE_STREAM_TAG | ||
| # DELTA: changed from jenkins:latest | ||
| # https://github.com/coreos/fedora-coreos-pipeline/pull/70 | ||
| value: jenkins:2 |