release.yaml (7632B)
1 apiVersion: helm.toolkit.fluxcd.io/v2 2 kind: HelmRelease 3 metadata: 4 name: jenkins 5 namespace: jenkins 6 spec: 7 interval: 1h 8 releaseName: jenkins 9 chart: 10 spec: 11 chart: jenkins 12 sourceRef: 13 kind: HelmRepository 14 name: jenkins 15 values: 16 agent: 17 # -- Resources allocation (Requests and Limits) 18 resources: 19 requests: 20 cpu: 512m 21 memory: 512Mi 22 limits: 23 cpu: 512m 24 memory: 1024Mi 25 additionalContainers: 26 - sideContainerName: nodejs 27 image: 28 repository: node 29 tag: 24 30 command: sleep 31 args: "99999999" 32 resources: 33 requests: 34 cpu: 512m 35 memory: 512Mi 36 limits: 37 cpu: 512m 38 memory: 1024Mi 39 controller: 40 admin: 41 username: admin 42 password: ENC[AES256_GCM,data:Pm+cj5o1feQBYHcUGcM8ey6N6pewKQ==,iv:zazq+1H9/7n4tDX7W67NHtY2+4jslSRy+KaTreXvIzw=,tag:lfcMNH2bGxSi7x0cL/pGZQ==,type:str] 43 jenkinsAdminEmail: ENC[AES256_GCM,data:VE6MA35EBxdKiJHvCN4GugeqKVogVjtU,iv:GlDis95N+AnbC+BTbyHZL4w0KWtZjTswXXEGCDQq7Uk=,tag:Bogg8hWmFyBQ5YVPEKDZyA==,type:str] 44 installLatestSpecifiedPlugins: true 45 overwritePlugins: true 46 installPlugins: 47 - kubernetes:4313.va_9b_4fe2a_0e34 48 - workflow-aggregator:600.vb_57cdd26fdd7 49 - git:5.7.0 50 - configuration-as-code:1932.v75cb_b_f1b_698d 51 - oic-auth:4.482.v1140b_cf263b_a_ # gitleaks:allow 52 - gerrit-trigger:2.42.0 53 - matrix-auth:3.2.4 54 #- gerrit-checks-api:66.v3ef8b_f08f1f3 55 - coverage:2.1.0 56 - pipeline-graph-view:413.v204a_03785b_92 57 - github:1.42.0 58 - plain-credentials:183.va_de8f1dd5a_2b_ # gitleaks:allow 59 - htmlpublisher:1.37 60 JCasC: 61 securityRealm: ENC[AES256_GCM,data:JHm2heYSumTYl/5LGECO5UCSZp+n6SSnwj70RAV+hwpdIuA5LkgNe/hI6eurOAvgiKM5CAD8Y71UlTAoxgkg/ZxHXjmZkj/STKQ0pXCu2PsmcHCBWVdmlcGPF8akcfVl85P9SjEHiSY/IDuPjE7fpHopXyBVFd3zzC5T96WupUpmLJvEr8a7XliuXORh+BVn2z2T+JIbSh1N2mUtzvZTVpCOA8firBE6E83p15s9HVzOWJMEEgKibLiHHh+RGnge8d74VUNVNtBiBdtJi3kIDlK8COTA7URS+jxP3M36EYMxBfPE/1JXOchzUIOYMBokdK0EXqwmViQum7aFaXCxaiQiMnS8IVdlIjMjNwMF/0Zv8/+RWoRd9SE1dHmFp/wGxjKnneSoCS6O6XNjNkyTRmmkHLBsrEOZnKFqRXPYof2XAON8LpOR2+6+lML3bgnNVIpPavsQyxQocg30LWLz2h7mXStM8vhZo15k95WIkISraf9i9hCUo5+5N359eMKAqms5Y2bxtoV2BTz/iRJrbse4N48DOCykUQv31E0+xdIt6l6WXLoBDxJbpsFhQvTRllZWQRQ24dOyTyVcCvNJ6xLSSUNXibXPedAVju97OSdqxO5F9ldJtstUF1FW4izUD/WGpXxCYbRly3DOxfxeAbAagRkiq8+rlcmiTb4ELcCkZgJ9wKhBdGS/7nDrpshYrfkP4xvkrdLKUWe73lTMlEaNPNQOEEbvpsD1ihF6KPgFxQSef2xdBeVSohP4sU421aES7yTs3oKJmfSsz3V+k6H6n2rQl0+nZoMZEZC0PMR71VmGoYKyWg4QpcLxTrYHeyQXCViUljOmo5Xi4G3Rdgia2lDDWUsKjMPTp7AZ,iv:p1i5A13Q/6+tfahE5iPJBLj+ith3HJg4XkKJSRPtHQM=,tag:mW9HVF0XwifDd3DyMTB3hQ==,type:str] 62 authorizationStrategy: |- 63 loggedInUsersCanDoAnything: 64 allowAnonymousRead: true 65 ingress: 66 enabled: false 67 apiVersion: networking.k8s.io/v1beta1 68 annotations: 69 external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space 70 cert-manager.io/cluster-issuer: letsencrypt-dns 71 traefik.ingress.kubernetes.io/router.middlewares: jenkins-jenkins-headers@kubernetescrd 72 hostName: jenkins.midnightthoughts.space 73 tls: 74 - secretName: jenkins.midnightthoughts.space-tls 75 hosts: 76 - jenkins.midnightthoughts.space 77 persistence: 78 enabled: true 79 size: 8Gi 80 accessMode: ReadWriteMany 81 sops: 82 kms: [] 83 gcp_kms: [] 84 azure_kv: [] 85 hc_vault: [] 86 age: 87 - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh 88 enc: | 89 -----BEGIN AGE ENCRYPTED FILE----- 90 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxWG9vcW9ialpTVDJWMW9y 91 QklMTmZYSmgySVBKcHUwcXAxTXpRUitsVkRRCll1UkZqcXpKZ0EyUUVmSkg1RElo 92 TENGTnJTK2MrTjZGLzFLSEJtWVhyakUKLS0tIFNvUlJzRTdsNG8wWHYyQmVmTUE5 93 RitiT3ZEaWd1K1BBdEJCcEJiTFNjVFEKSw9E+7saeYa9m1yPRatBabnwL10Vdd27 94 lfByKaFdOzbZBtmWKIagbUcLoSG61iOEMXSOODeIz4sUUm9KV8n7QQ== 95 -----END AGE ENCRYPTED FILE----- 96 lastmodified: "2025-03-19T17:32:50Z" 97 mac: ENC[AES256_GCM,data:CBrCRHfBSEyjIBW/wLVygPoCThl+Ehhqb851qZAQ/NFCF/0HBvci3r/bveVOvpsQZ36ZsAM4OM6fqaN9tN+uHVjIjmsKwrN+dlWbwkZMvnwS398u0t6+JU0ybsUjnnZOpNh+7AwVJ1d0+2SA6hOoT0Dwm81sGb8AsG7MzliuT8M=,iv:Iv2T87hkpfpEwQtjk/pZ1m/flbug1nqNtN4AuFaUzRI=,tag:CCdDyWOTYpCPaKS4iXnQKQ==,type:str] 98 pgp: [] 99 encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ 100 version: 3.9.1 101 --- 102 apiVersion: gateway.networking.k8s.io/v1 103 kind: HTTPRoute 104 metadata: 105 name: jenkins 106 namespace: jenkins 107 spec: 108 parentRefs: 109 - name: envoy-gateway 110 namespace: envoy-gateway 111 hostnames: 112 - jenkins.midnightthoughts.space 113 rules: 114 - backendRefs: 115 - name: jenkins 116 port: 8080 117 timeouts: 118 request: 240s 119 backendRequest: 0s 120 sops: 121 kms: [] 122 gcp_kms: [] 123 azure_kv: [] 124 hc_vault: [] 125 age: 126 - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh 127 enc: | 128 -----BEGIN AGE ENCRYPTED FILE----- 129 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxWG9vcW9ialpTVDJWMW9y 130 QklMTmZYSmgySVBKcHUwcXAxTXpRUitsVkRRCll1UkZqcXpKZ0EyUUVmSkg1RElo 131 TENGTnJTK2MrTjZGLzFLSEJtWVhyakUKLS0tIFNvUlJzRTdsNG8wWHYyQmVmTUE5 132 RitiT3ZEaWd1K1BBdEJCcEJiTFNjVFEKSw9E+7saeYa9m1yPRatBabnwL10Vdd27 133 lfByKaFdOzbZBtmWKIagbUcLoSG61iOEMXSOODeIz4sUUm9KV8n7QQ== 134 -----END AGE ENCRYPTED FILE----- 135 lastmodified: "2025-03-19T17:32:50Z" 136 mac: ENC[AES256_GCM,data:CBrCRHfBSEyjIBW/wLVygPoCThl+Ehhqb851qZAQ/NFCF/0HBvci3r/bveVOvpsQZ36ZsAM4OM6fqaN9tN+uHVjIjmsKwrN+dlWbwkZMvnwS398u0t6+JU0ybsUjnnZOpNh+7AwVJ1d0+2SA6hOoT0Dwm81sGb8AsG7MzliuT8M=,iv:Iv2T87hkpfpEwQtjk/pZ1m/flbug1nqNtN4AuFaUzRI=,tag:CCdDyWOTYpCPaKS4iXnQKQ==,type:str] 137 pgp: [] 138 encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ 139 version: 3.9.1