Provision Controller

bundle/bundle.yaml

@@ -0,0 +1,6 @@
+apiVersion: "1"
+version: "1"
+id: "casc-workshop-march-dev-controller"
+description: "CloudBees CI configuration bundle for the casc-workshop-march dev-controller Controller"
+availabilityPattern: "cloudbees-ci-casc-workshop/casc-workshop-march/dev-controller"
+parent: "base"

controller.yaml

@@ -0,0 +1,74 @@
+removeStrategy:
+  rbac: SYNC
+  items: NONE
+items:
+- kind: folder
+  name: casc-workshop-march
+  groups:
+  - members:
+      users:
+      - galonsomartinez
+      - galonsomartinez-admin
+    roles:
+    - name: browse
+      grantedAt: current
+    - name: workshop-admin
+      grantedAt: child
+    name: Team Administrators
+  filteredRoles:
+  - workshop-admin
+  - browse
+  items:
+  - kind: managedController
+    name: dev-controller
+    properties:
+    - healthReporting:
+        enabled: true
+    - configurationAsCode:
+        bundle: casc-workshop-march-dev-controller
+    - optOutProperty:
+        securityEnforcerOptOutMode:
+          authorizationOptOutMode: {
+            }
+    configuration:
+      kubernetes:
+        memory: 4000
+        cpus: 1.0
+        clusterEndpointId: default
+        disk: 10
+        storageClassName: premium-rwo
+        domain: casc-workshop-march-dev-controller
+        namespace: controllers
+        yaml: |
+          kind: "StatefulSet"
+          spec:
+            template:
+              metadata:
+                labels:
+                  networking/allow-internet-access: "true"
+              spec:
+                containers:
+                - name: "jenkins"
+                  env:
+                  - name: "SECRETS"
+                    value: "/var/jenkins_home/jcasc_secrets"
+                  - name: "GITHUB_ORGANIZATION"
+                    value: "casc-workshop-march"
+                  - name: "GITHUB_USER"
+                    value: "galonsomartinez"
+                  - name: "GITHUB_APP"
+                    value: "cloudbees-ci-casc-workshop"
+                  - name: "CONTROLLER_SUBDOMAIN"
+                    value: "casc-workshop-march-dev-controller"
+                  - name: "CASC_BUNDLE_ID"
+                    value: "casc-workshop-march-dev-controller"
+                  volumeMounts:
+                  - name: "jcasc-secrets"
+                    mountPath: "/var/jenkins_home/jcasc_secrets"
+                volumes:
+                - name: "jcasc-secrets"
+                  csi:
+                    driver: secrets-store.csi.k8s.io
+                    readOnly: true
+                    volumeAttributes:
+                      secretProviderClass: "cbci-mc-secret-provider"