cluster

commit 9dbbf95c77bccb6731954023dec7760e0e23d5e6
parent bcabcde7522e08ba89b155e37b4ad148ec935dc3
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Fri, 10 Apr 2026 00:25:52 +0200

fixes

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
apps/talos_cluster/jenkins/instance/jenkins-casc-configmap.yaml
 | 
16
++++++++--------
M
apps/talos_cluster/jenkins/instance/jenkins-instance.yaml
 | 
10
++++++++++

2 files changed, 18 insertions(+), 8 deletions(-)
diff --git a/apps/talos_cluster/jenkins/instance/jenkins-casc-configmap.yaml b/apps/talos_cluster/jenkins/instance/jenkins-casc-configmap.yaml
@@ -4,7 +4,7 @@ metadata:
     name: jenkins-casc
     namespace: jenkins
 data:
-    jenkins-casc.yaml: ENC[AES256_GCM,data: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,iv:+YmaZ3mDo3oGTvTUy3y8N632grD3vwokj8SZ2/vM1I4=,tag:eKKp8jYFwW6AP/FVX3pzCA==,type:str]
+    jenkins-casc.yaml: ENC[AES256_GCM,data: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,iv:PO8IBIIRgZVHcg4+aKm1qw2P+NvKaa18Pl9R1WEcWm8=,tag:TXyWIKgZ0mLUSdoET9MQSg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -14,14 +14,14 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRTFB3RXVFbWlVc1c5TUFF
-            MWVZOHBVUXN1NUo0R3Y3bXgyZXJjR3dSNTJVCk9IV2JGNDNVMWV2QUdJbjBqMmFo
-            bU5MVnhUam1OQzJDbnozejlzU00vbmcKLS0tIDlTd0R6UThhcEJHUURVdlV0c2dK
-            NFNleVFKNE1XOGZva1BCZENNSmU4SGsKOnI2lm1sT32bIoCL3yzXxppq4ch4Z+jd
-            aLw/j0gyNKQ/OeKHwG63Kc1mDXvRNyTp8P1CEcXPyeuERF/grWhI1g==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGdWl2eEZVYVdmS21TT2dH
+            ZlNIU09xbkxhVURwSmd0NkFSaDBmMFdDY2o4CnI1K1VuQzF6bS9JUEtnclV5Ti9a
+            ODR3Z2N1NTVQaTY2VEd5eE81WW5oTkkKLS0tIDhHYzZVaEJYdUZjVUNKUlhEUThi
+            TnVPUmtreVFlSUZWY1M0RjBnVGRTQTAK7he/td5UzdGiXkPeLLj2VCJqWtVlSzjI
+            6LQxvKPrar0yqPdjSwdAYcaTmPOP/mSuD5Z6MrfIUkBfyNQ/LVwn2Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-09T21:39:50Z"
-    mac: ENC[AES256_GCM,data:Q2V6nOlknCmd/FPwf6TSzFWpQaqqZSnfcc/tBOR0psHtgZEyvsdWg8odA2aFxDhEZlG/uDIwtA3CwOykBMgxcd6q1qmKY/4cN/pBBbhpBnCLzAO4lQSRtilzPpjtKnr6c7myY6o3qeNGQL8mFMXDXcIi3qdQrw4q+p6+V9DzY2g=,iv:a2NsR0e67i+oBFa1SrewAon5aEiflE3zhVJQ7S1bgQg=,tag:3TjM7MQixKvAmMpLnuyuYQ==,type:str]
+    lastmodified: "2026-04-09T22:25:47Z"
+    mac: ENC[AES256_GCM,data:AqAZQaZQnagrd62REjxqVNxhvk/5Oeyh2/nt27Di2KHTNCPb+ltHtuXnalYzY6orgjxLfiKMtX/Piv/8YlQkOQgN07YaO5XheWBL0EZjFK5/zUMOo36oaLBokLHWB0kpK7elCO8jr5ITUiTon5wXBSLcDwqbH2J0GU/0MS+LCxU=,iv:sZxNd7NDG/9nE1fDEIAZS6Pq7V6ORZvA28qz/P1tRck=,tag:CzSTqKyPZFE7J2xTRJRNUQ==,type:str]
     pgp: []
     encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret|content)$
     version: 3.9.1
diff --git a/apps/talos_cluster/jenkins/instance/jenkins-instance.yaml b/apps/talos_cluster/jenkins/instance/jenkins-instance.yaml
@@ -74,6 +74,10 @@ spec:
       - name: jenkins-master
         image: jenkins/jenkins:2.541.3-lts
         imagePullPolicy: IfNotPresent
+        # Environment variables
+        env:
+          - name: CASC_JENKINS_CONFIG
+            value: /var/lib/jenkins/casc_configs
         # Security context for container
         securityContext:
           # Allow privileged for Docker socket access
@@ -119,6 +123,9 @@ spec:
             protocol: TCP
         # Volume mounts
         volumeMounts:
+          - name: casc-config
+            mountPath: /var/lib/jenkins/casc_configs
+            readOnly: true
           - name: registry-secret
             mountPath: /var/run/secrets/docker.io
             readOnly: true
@@ -127,6 +134,9 @@ spec:
             readOnly: true
     # Volumes
     volumes:
+      - name: casc-config
+        configMap:
+          name: jenkins-casc
       - name: registry-secret
         secret:
           secretName: registry-credentials