jenkins: Master: HostName: jenkins.molgenis.org ServiceType: ClusterIP InstallPlugins: - kubernetes:1.12.0 - workflow-aggregator:2.5 - workflow-job:2.21 - credentials-binding:1.16 - git:3.9.1 - github-branch-source:2.3.6 - kubernetes-credentials-provider:0.9 - blueocean:1.6.2 - github-oauth:0.29 - gogs-webhook:1.0.14 - sauce-ondemand:1.176 Security: UseGitHub: false GitHub: ClientID: "" ClienSecret: "" DefaultView: dev Views: dev: - molgenis ops: - molgenis-ops-docker-httpd - molgenis-ops-docker-maven - molgenis-ops-docker-node - molgenis-ops-tools - molgenis-ops-tomcat Jobs: |- molgenis: |- .* false true -1 -1 H H * * * 86400000 false molgenis molgenis-jenkins-github-secret 1 1 1 Jenkinsfile molgenis-ops-docker-httpd: |- HTTPD server that can be used for redirection and proxieing molgenis-ops-docker-httpd false true -1 -1 false a756941d-6c9d-4492-bcf9-327041764be6 https://git.webhosting.rug.nl/molgenis/molgenis-ops-docker-httpd.git molgenis-jenkins-gogs-secret Jenkinsfile molgenis-ops-docker-node: |- NodeJS build container with Curl molgenis-ops-docker-node false true -1 -1 false a756941d-6c9d-4492-bcf9-327041764be6 https://git.webhosting.rug.nl/molgenis/molgenis-ops-docker-node.git molgenis-jenkins-gogs-secret Jenkinsfile molgenis-ops-docker-maven: |- MAVEN build container with RPMbuild and Curl molgenis-ops-docker-maven false true -1 -1 false 4702479a-6988-4a85-b4b7-e77fa2d05ffa https://git.webhosting.rug.nl/molgenis/molgenis-ops-docker-maven.git molgenis-jenkins-gogs-secret Jenkinsfile molgenis-ops-tomcat: |- MOLGENIS tomcat package to manage tomcat version on CentOS molgenis-ops-tomcat false true -1 -1 false 4702479a-6988-4a85-b4b7-e77fa2d05ffa https://git.webhosting.rug.nl/molgenis/molgenis-ops-tomcat.git molgenis-jenkins-gogs-secret Jenkinsfile molgenis-ops-tools: |- MOLGENIS operations tools-package to configure firewall, apache, sudoers, etc. molgenis-ops-tools false true -1 -1 false 4702479a-6988-4a85-b4b7-e77fa2d05ffa https://git.webhosting.rug.nl/molgenis/molgenis-ops-tools.git molgenis-jenkins-gogs-secret Jenkinsfile # Kubernetes secret that contains a 'credentials.xml' for Jenkins # CredentialsXmlSecret: jenkins-credentials # Kubernetes secret that contains files to be put in the Jenkins 'secrets' directory, # useful to manage encryption keys used for credentials.xml for instance (such as # master.key and hudson.util.Secret) # SecretsFilesSecret: jenkins-secrets CustomConfigMap: true rbac: install: true Pods: molgenis: Label: molgenis NodeUsageMode: NORMAL volumes: - type: HostPath hostPath: "/var/run/docker.sock" mountPath: "/var/run/docker.sock" Containers: maven: Image: "registry.webhosting.rug.nl/molgenis/maven" ImageTag: lts AlwaysPullImage: true Command: cat WorkingDir: /home/jenkins TTY: true resources: requests: cpu: "1" memory: "4Gi" EnvVars: - type: KeyValue key: MAVEN_OPTS value: "-Duser.home=/home/jenkins" - type: KeyValue key: MAVEN_CONFIG value: "/home/jenkins/.m2" alpine: Image: "spotify/alpine" Command: cat WorkingDir: /home/jenkins TTY: true vault: Image: "vault" Command: cat WorkingDir: /home/jenkins TTY: true EnvVars: - type: Secret key: VAULT_TOKEN secretName: molgenis-pipeline-vault-secret secretKey: token - type: Secret key: VAULT_SKIP_VERIFY secretName: molgenis-pipeline-vault-secret secretKey: skipVerify - type: Secret key: VAULT_ADDR secretName: molgenis-pipeline-vault-secret secretKey: addr helm: Image: "lachlanevenson/k8s-helm" ImageTag: "v2.10.0" Command: cat WorkingDir: /home/jenkins TTY: true NodeSelector: {} node: Label: node-carbon NodeUsageMode: EXCLUSIVE Containers: node: Image: "registry.webhosting.rug.nl/molgenis/node" ImageTag: lts AlwaysPullImage: true Command: cat WorkingDir: /home/jenkins TTY: true vault: Image: "vault" Command: cat WorkingDir: /home/jenkins TTY: true EnvVars: - type: Secret key: VAULT_TOKEN secretName: molgenis-pipeline-vault-secret secretKey: token - type: Secret key: VAULT_SKIP_VERIFY secretName: molgenis-pipeline-vault-secret secretKey: skipVerify - type: Secret key: VAULT_ADDR secretName: molgenis-pipeline-vault-secret secretKey: addr NodeSelector: {} molgenis-it: InheritFrom: molgenis Label: molgenis-it NodeUsageMode: EXCLUSIVE Containers: elasticsearch: Image: docker.elastic.co/elasticsearch/elasticsearch ImageTag: 5.5.3 resources: requests: cpu: "100m" memory: "1Gi" limits: cpu: "1" memory: "1500Mi" EnvVars: - type: KeyValue key: ES_JAVA_OPTS value: "-Xms512m -Xmx512m" - type: KeyValue key: cluster.name value: molgenis - type: KeyValue key: bootstrap.memory_lock value: "true" - type: KeyValue key: xpack.security.enabled value: "false" - type: KeyValue key: discovery.type value: single-node postgres: Image: postgres ImageTag: 9.6-alpine resources: requests: cpu: "100m" memory: "250Mi" limits: cpu: "1" memory: "250Mi" EnvVars: - type: KeyValue key: POSTGRES_USER value: molgenis - type: KeyValue key: POSTGRES_PASSWORD value: molgenis - type: KeyValue key: POSTGRES_DB value: molgenis opencpu: Image: molgenis/opencpu AlwaysPullImage: true resources: requests: cpu: "100m" memory: "256Mi" limits: cpu: "1" memory: "512Mi" NodeSelector: {} #secret contains configuration for the kubernetes secrets that jenkins can access secret: # vault configures the vault secret vault: token: xxxx addr: "https://vault-operator.vault-operator.svc:8200" skipVerify: "1" # githubToken contains access token for jenkins bot account on github.com gitHub: user: "molgenis-jenkins" token: xxxx # gogs contains access token for jenkins bot account on RuG GoGs gogs: user: p281392 token: xxxx # registry contains credentials for registry.molgenis.org registry: user: admin password: xxxx # dockerHubPassword contains password for hub.docker.com dockerHub: user: molgenisci password: xxxx