- prepare to switch from `master` to `main`
- avoid to run workflow in case is not needed
- add a way to bump the lts via make
- use latest jenkins lts 2.387.1
- add the docker labels
- update base plugins
- fix#797
- Add more tests with bats
- Update base plugin to latest version
- Temporary revert #807
- Better nightly job
This is necessary in order to be able to provide the annotations attached to the
service account associated with the Jenkins master instance.
Co-authored-by: Vanio Begic <vanio.begic@capgemini.com>
* Tidy up k8s events logging
* Increase memory and decrease CPU in resources
* Standarize API fields
* Refactor tests
* Change image and resources for e2e tests
* Increase readability
* Fix workflow for autogenerating docs (#592)
* Use grep -c flag in check for changes step to fix case when more than 1 website file was modified
* Implemented validation logic for the webhook
- Created a single Validate() function to validate both updating and creating Jenkins CR.
- Implemented the Validate function to fetch warnings from the API and do security check if
being enabled.
- Updated the helm charts and helm-e2e target to run the helm tests.
* Configure bot for labelling new issues as needing triage (#597)
* Configure bot for managing stale issues (#598)
* Docs: explanation what is backed up and why (#599)
* Explanation what's backed up and why
* Auto-updated docs (#600)
Co-authored-by: prryb <prryb@users.noreply.github.com>
* Docs: clarification of description of get latest command in backup (#601)
* Auto-updated docs (#602)
Co-authored-by: Sig00rd <Sig00rd@users.noreply.github.com>
* Bump seedjobs agent image version to 4.9-1 (#604)
* Add GitLFS pull after checkout behaviour to SeedJob GroovyScript Template (#483)
Add GitLFS pull after checkout behaviour to support also repositories which are relying on Git LFS
Close#482
* Docs: minor fixes (#608)
* Link to project's DockerHub in README's section on nightly builds, add paragraph about nightly builds in installation docs
* Fix repositoryURL in sample seedJob configuration with SSH auth
* Slightly expand on #348
* Fix formatting in docs on Jenkins' customization, update plugin versions
* Add notes on Jenkins home Volume in Helm chart values.yaml and docs (#589)
* Auto-updated docs (#610)
Co-authored-by: Sig00rd <Sig00rd@users.noreply.github.com>
* Reimplemented the validation logic with caching the security warnings
- Reimplemented the validator interface
- Updated manifests to allocate more resources
* Add an issue template for documentation (#613)
* Docs: add info on restricted volumeMounts other than jenkins-home(#612)
* Update note in installation docs
* Update Helm chart default values.yaml
* Update schema
* Auto-updated docs (#616)
Co-authored-by: Sig00rd <Sig00rd@users.noreply.github.com>
* Auto-updated docs (#617)
Co-authored-by: Sig00rd <Sig00rd@users.noreply.github.com>
* Updated Validation logic
- Defined a security manager struct to cache all the plugin data
- Added flag to make validating security warnings optional while deploying the operator
* Helm Chart: Remove empty priorityClassName from Jenkins template (#618)
Also bump Helm Chart version to v0.5.2
* Added unit test cases for webhook
* Updated Helm Charts
- Optimized the charts
- Made the webhook optional
- Added cert manager as dependency to be installed while running webhook
* Updated unit tests, helm charts and validation logic
* Completed helm e2e tests and updated helm charts
- Completed helm tests for various scenarios
- Disabled startupapi check for cert manager webhook, defined a secret and updated templates
- Made the webhook completely optional
* Code optimization and cleanup
* Modified helm tests
* code cleanup and optimization
- Scaffolded a new validation webhook using operator-sdk
- Added manifests for webhook.
- Added manifests for self signed issuer and certificates
- Added a new spec named ValidateSecurityWarnings to the Jenkins custom resource definition to enable/disable security check.
- Updated Makefile to deploy the operator locally.
- Updated helm template and default values.yaml
* Add note that jenkins.namespace also affects jenkins-operator resources
* Add handling of empty WATCH_NAMESPACE value of jenkins.namespace
If jenkins.namespace is set to "", it leads to WATCH_NAMESPACE
environment value of Jenkins Operator itself to be set to "", which
leads that operator watches all namespaces (see
https://github.com/jenkinsci/kubernetes-operator/issues/77#issuecomment-523727092).
This case requires custom handling: instead of creating role and
role_binding we need to create clusterrole and clusterrolebinding with
the required permissions.
* Bump chart version
* Fix grammar as suggested by @Sig00rd
Co-authored-by: Sig00rd <sz.fugas@gmail.com>
* Fix WATCH_NAMESPACE in helm chart
When applying the chart, the operator will now watch the correct
namespace. This required changes in roles and role bindings so that
the operator has access to both namespaces.
* Use Role instead of ClusterRole
Mitigates the risk of restrictions in creating ClusterRole in
multitenant k8s clusters.
* Update configuration-as-code version to 1.47
Fixed helm not creating role permissions #424
Added ability to use custom k8s cluster domain #461
Fixed propagation of JENKINS_OPTS to seed-job agent #462
Fixed updating last backup #421
Added configuration option for the user to specify annotations and labels for Jenkins pod via helm. Updated installation guide with information about this feature.
* Move Jenkins CRD to crds dir
* Update helm chart version + package
* Update helm repo index
* Revert "Update helm repo index"
This reverts commit 1fffe74e42.
* Run make helm-deploy
DionJones615
João Valença
Yuedong Wu
Luigi Operoso
Tomas Hulata
twildber
ywang-psee
thecooldrop
Andre
maslakov
SylwiaBrant
sharmapulkit04
Sig00rd
Oleksandr Kovalchuk
Morten Birkelund
Tomasz Sęk
Piotr Ryba
Emil Kostadinov
Mitsufumi KIkyotani
Sylwia Brant
Jakub Al-Khalili
Tomasz Sęk
jkhelil
Seshu Kumar Alluvada
Riccardo Biraghi