CephFS migrations

eclipse-cbi · Jan 15, 2025 · 4b3d96e · 4b3d96e
1 parent 6fad632
commit 4b3d96e
Show file tree

Hide file tree

Showing 18 changed files with 133 additions and 8 deletions.
diff --git a/instances/ee4j.jersey/config.jsonnet b/instances/ee4j.jersey/config.jsonnet
@@ -7,5 +7,6 @@
     plugins+: [
       "copyartifact",
     ],
-  }
+  },
+  seLinuxLevel: "s0:c44,c4",
 }
diff --git a/instances/ee4j.jersey/target/config.json b/instances/ee4j.jersey/target/config.json
@@ -423,8 +423,8 @@
       "id": "2.479.2",
       "key_fingerprint": "5BA31D57EF5975CA",
       "plugin_manager": {
-         "jar": "https://github.com/jenkinsci/plugin-installation-manager-tool/releases/download/2.13.0/jenkins-plugin-manager-2.13.0.jar",
-         "version": "2.13.0"
+         "jar": "https://github.com/jenkinsci/plugin-installation-manager-tool/releases/download/2.13.2/jenkins-plugin-manager-2.13.2.jar",
+         "version": "2.13.2"
       },
       "pluginroot": "/var/cache/jenkins/plugins",
       "plugins": [
@@ -606,6 +606,7 @@
       },
       "generate": false
    },
+   "seLinuxLevel": "s0:c44,c4",
    "secrets": {
       "dockerconfigjson": {
          "dockerconfigjson-for-pull-as-default": {

diff --git a/instances/ee4j.jersey/target/jenkins/configuration.yml b/instances/ee4j.jersey/target/jenkins/configuration.yml
@@ -73,6 +73,8 @@ jenkins:
         containerCapStr: "2"
         jenkinsUrl: "http://jenkins-ui.jersey.svc.cluster.local/jersey"
         jenkinsTunnel: "jenkins-discovery.jersey.svc.cluster.local:50000"
+        garbageCollection:
+          timeout: 300
         maxRequestsPerHostStr: "32"
         namespace: "jersey"
         podRetention: "never"
@@ -437,6 +439,13 @@ unclassified:
     showBuildBadges: "never"
     showChangeReasonCommentWindow: false
     skipDuplicateHistory: true
+  hashicorpVault:
+    configuration:
+      disableChildPoliciesOverride: false
+      engineVersion: 2
+      timeout: 60
+      vaultCredentialId: "secretsmanager-approle"
+      vaultUrl: "https://secretsmanager.eclipse.org"
 tool:
   jdk:
     installations:
@@ -522,6 +531,8 @@ tool:
         home: "/opt/tools/java/adoptopenjdk/openj9-jdk-8/latest"
       - name: "temurin-latest"
         home: "/opt/tools/java/temurin/latest"
+      - name: "temurin-jdk23-latest"
+        home: "/opt/tools/java/temurin/jdk-23/latest"
       - name: "temurin-jdk22-latest"
         home: "/opt/tools/java/temurin/jdk-22/latest"
       - name: "temurin-jdk21-latest"

diff --git a/instances/ee4j.jersey/target/jenkins/title.js b/instances/ee4j.jersey/target/jenkins/title.js
@@ -1 +1,15 @@
 document.title = "Eclipse Jersey - " + document.title;
+document.addEventListener('DOMContentLoaded', function() {
+    let header = document.querySelector('.page-header__brand');
+    if (header) {
+        let newLink = document.createElement('a');
+        newLink.href = 'https://github.com/eclipse-cbi/jiro/blob/master/instances/ee4j.jersey/target/config.json';
+        newLink.textContent = 'JCasC Source';
+        newLink.style = 'color: white; border-left: 1px solid white; padding-left: 1em; font-size: 1.1em; position: relative; top: 0.2em; left: -1.6em;';
+        newLink.target = '_blank';
+        newLink.title = 'JIRO JCasC Configuration as Code';
+        header.appendChild(newLink);
+    } else {
+        console.log('Element with class "header" not found.');
+    }
+});
diff --git a/instances/ee4j.jersey/target/k8s/configmap-jenkins-config.yml b/instances/ee4j.jersey/target/k8s/configmap-jenkins-config.yml
@@ -96,6 +96,8 @@ data:
             containerCapStr: "2"
             jenkinsUrl: "http://jenkins-ui.jersey.svc.cluster.local/jersey"
             jenkinsTunnel: "jenkins-discovery.jersey.svc.cluster.local:50000"
+            garbageCollection:
+              timeout: 300
             maxRequestsPerHostStr: "32"
             namespace: "jersey"
             podRetention: "never"
@@ -460,6 +462,13 @@ data:
         showBuildBadges: "never"
         showChangeReasonCommentWindow: false
         skipDuplicateHistory: true
+      hashicorpVault:
+        configuration:
+          disableChildPoliciesOverride: false
+          engineVersion: 2
+          timeout: 60
+          vaultCredentialId: "secretsmanager-approle"
+          vaultUrl: "https://secretsmanager.eclipse.org"
     tool:
       jdk:
         installations:
@@ -545,6 +554,8 @@ data:
             home: "/opt/tools/java/adoptopenjdk/openj9-jdk-8/latest"
           - name: "temurin-latest"
             home: "/opt/tools/java/temurin/latest"
+          - name: "temurin-jdk23-latest"
+            home: "/opt/tools/java/temurin/jdk-23/latest"
           - name: "temurin-jdk22-latest"
             home: "/opt/tools/java/temurin/jdk-22/latest"
           - name: "temurin-jdk21-latest"

diff --git a/instances/ee4j.jersey/target/k8s/statefulset.json b/instances/ee4j.jersey/target/k8s/statefulset.json
@@ -119,7 +119,12 @@
                         "cpu": "250m"
                      }
                   },
-                  "securityContext": { },
+                  "securityContext": {
+                     "seLinuxOptions": {
+                        "level": "s0:c44,c4",
+                        "type": "spc_t"
+                     }
+                  },
                   "volumeMounts": [
                      {
                         "mountPath": "/var/jenkins",

diff --git a/instances/ee4j.openmq/config.jsonnet b/instances/ee4j.openmq/config.jsonnet
@@ -3,4 +3,5 @@
     fullName: "ee4j.openmq",
     displayName: "Eclipse OpenMQ",
   },
+  seLinuxLevel: "s0:c50,c15",
 }
diff --git a/instances/ee4j.openmq/target/config.json b/instances/ee4j.openmq/target/config.json
@@ -422,8 +422,8 @@
       "id": "2.479.2",
       "key_fingerprint": "5BA31D57EF5975CA",
       "plugin_manager": {
-         "jar": "https://github.com/jenkinsci/plugin-installation-manager-tool/releases/download/2.13.0/jenkins-plugin-manager-2.13.0.jar",
-         "version": "2.13.0"
+         "jar": "https://github.com/jenkinsci/plugin-installation-manager-tool/releases/download/2.13.2/jenkins-plugin-manager-2.13.2.jar",
+         "version": "2.13.2"
       },
       "pluginroot": "/var/cache/jenkins/plugins",
       "plugins": [
@@ -605,6 +605,7 @@
       },
       "generate": false
    },
+   "seLinuxLevel": "s0:c50,c15",
    "secrets": {
       "dockerconfigjson": {
          "dockerconfigjson-for-pull-as-default": {

diff --git a/instances/ee4j.openmq/target/jenkins/configuration.yml b/instances/ee4j.openmq/target/jenkins/configuration.yml
@@ -73,6 +73,8 @@ jenkins:
         containerCapStr: "2"
         jenkinsUrl: "http://jenkins-ui.openmq.svc.cluster.local/openmq"
         jenkinsTunnel: "jenkins-discovery.openmq.svc.cluster.local:50000"
+        garbageCollection:
+          timeout: 300
         maxRequestsPerHostStr: "32"
         namespace: "openmq"
         podRetention: "never"
@@ -437,6 +439,13 @@ unclassified:
     showBuildBadges: "never"
     showChangeReasonCommentWindow: false
     skipDuplicateHistory: true
+  hashicorpVault:
+    configuration:
+      disableChildPoliciesOverride: false
+      engineVersion: 2
+      timeout: 60
+      vaultCredentialId: "secretsmanager-approle"
+      vaultUrl: "https://secretsmanager.eclipse.org"
 tool:
   jdk:
     installations:
@@ -522,6 +531,8 @@ tool:
         home: "/opt/tools/java/adoptopenjdk/openj9-jdk-8/latest"
       - name: "temurin-latest"
         home: "/opt/tools/java/temurin/latest"
+      - name: "temurin-jdk23-latest"
+        home: "/opt/tools/java/temurin/jdk-23/latest"
       - name: "temurin-jdk22-latest"
         home: "/opt/tools/java/temurin/jdk-22/latest"
       - name: "temurin-jdk21-latest"

diff --git a/instances/ee4j.openmq/target/jenkins/title.js b/instances/ee4j.openmq/target/jenkins/title.js
@@ -1 +1,15 @@
 document.title = "Eclipse OpenMQ - " + document.title;
+document.addEventListener('DOMContentLoaded', function() {
+    let header = document.querySelector('.page-header__brand');
+    if (header) {
+        let newLink = document.createElement('a');
+        newLink.href = 'https://github.com/eclipse-cbi/jiro/blob/master/instances/ee4j.openmq/target/config.json';
+        newLink.textContent = 'JCasC Source';
+        newLink.style = 'color: white; border-left: 1px solid white; padding-left: 1em; font-size: 1.1em; position: relative; top: 0.2em; left: -1.6em;';
+        newLink.target = '_blank';
+        newLink.title = 'JIRO JCasC Configuration as Code';
+        header.appendChild(newLink);
+    } else {
+        console.log('Element with class "header" not found.');
+    }
+});
diff --git a/instances/ee4j.openmq/target/k8s/configmap-jenkins-config.yml b/instances/ee4j.openmq/target/k8s/configmap-jenkins-config.yml
@@ -96,6 +96,8 @@ data:
             containerCapStr: "2"
             jenkinsUrl: "http://jenkins-ui.openmq.svc.cluster.local/openmq"
             jenkinsTunnel: "jenkins-discovery.openmq.svc.cluster.local:50000"
+            garbageCollection:
+              timeout: 300
             maxRequestsPerHostStr: "32"
             namespace: "openmq"
             podRetention: "never"
@@ -460,6 +462,13 @@ data:
         showBuildBadges: "never"
         showChangeReasonCommentWindow: false
         skipDuplicateHistory: true
+      hashicorpVault:
+        configuration:
+          disableChildPoliciesOverride: false
+          engineVersion: 2
+          timeout: 60
+          vaultCredentialId: "secretsmanager-approle"
+          vaultUrl: "https://secretsmanager.eclipse.org"
     tool:
       jdk:
         installations:
@@ -545,6 +554,8 @@ data:
             home: "/opt/tools/java/adoptopenjdk/openj9-jdk-8/latest"
           - name: "temurin-latest"
             home: "/opt/tools/java/temurin/latest"
+          - name: "temurin-jdk23-latest"
+            home: "/opt/tools/java/temurin/jdk-23/latest"
           - name: "temurin-jdk22-latest"
             home: "/opt/tools/java/temurin/jdk-22/latest"
           - name: "temurin-jdk21-latest"

diff --git a/instances/ee4j.openmq/target/k8s/statefulset.json b/instances/ee4j.openmq/target/k8s/statefulset.json
@@ -119,7 +119,12 @@
                         "cpu": "250m"
                      }
                   },
-                  "securityContext": { },
+                  "securityContext": {
+                     "seLinuxOptions": {
+                        "level": "s0:c50,c15",
+                        "type": "spc_t"
+                     }
+                  },
                   "volumeMounts": [
                      {
                         "mountPath": "/var/jenkins",

diff --git a/instances/tools.cdt/config.jsonnet b/instances/tools.cdt/config.jsonnet
@@ -12,4 +12,5 @@
       "pipeline-github",
     ],
   },
+  seLinuxLevel: "s0:c32,c4",
 }
diff --git a/instances/tools.cdt/target/config.json b/instances/tools.cdt/target/config.json
@@ -608,6 +608,7 @@
       },
       "generate": false
    },
+   "seLinuxLevel": "s0:c32,c4",
    "secrets": {
       "dockerconfigjson": {
          "dockerconfigjson-for-pull-as-cdt": {

diff --git a/instances/tools.cdt/target/jenkins/configuration.yml b/instances/tools.cdt/target/jenkins/configuration.yml
@@ -439,6 +439,13 @@ unclassified:
     showBuildBadges: "never"
     showChangeReasonCommentWindow: false
     skipDuplicateHistory: true
+  hashicorpVault:
+    configuration:
+      disableChildPoliciesOverride: false
+      engineVersion: 2
+      timeout: 60
+      vaultCredentialId: "secretsmanager-approle"
+      vaultUrl: "https://secretsmanager.eclipse.org"
   throttleJobProperty:
     categories:
       - categoryName: "low-priority-jobs"
@@ -531,6 +538,8 @@ tool:
         home: "/opt/tools/java/adoptopenjdk/openj9-jdk-8/latest"
       - name: "temurin-latest"
         home: "/opt/tools/java/temurin/latest"
+      - name: "temurin-jdk23-latest"
+        home: "/opt/tools/java/temurin/jdk-23/latest"
       - name: "temurin-jdk22-latest"
         home: "/opt/tools/java/temurin/jdk-22/latest"
       - name: "temurin-jdk21-latest"

diff --git a/instances/tools.cdt/target/jenkins/title.js b/instances/tools.cdt/target/jenkins/title.js
@@ -1 +1,15 @@
 document.title = "Eclipse CDT - " + document.title;
+document.addEventListener('DOMContentLoaded', function() {
+    let header = document.querySelector('.page-header__brand');
+    if (header) {
+        let newLink = document.createElement('a');
+        newLink.href = 'https://github.com/eclipse-cbi/jiro/blob/master/instances/tools.cdt/target/config.json';
+        newLink.textContent = 'JCasC Source';
+        newLink.style = 'color: white; border-left: 1px solid white; padding-left: 1em; font-size: 1.1em; position: relative; top: 0.2em; left: -1.6em;';
+        newLink.target = '_blank';
+        newLink.title = 'JIRO JCasC Configuration as Code';
+        header.appendChild(newLink);
+    } else {
+        console.log('Element with class "header" not found.');
+    }
+});
diff --git a/instances/tools.cdt/target/k8s/configmap-jenkins-config.yml b/instances/tools.cdt/target/k8s/configmap-jenkins-config.yml
@@ -462,6 +462,13 @@ data:
         showBuildBadges: "never"
         showChangeReasonCommentWindow: false
         skipDuplicateHistory: true
+      hashicorpVault:
+        configuration:
+          disableChildPoliciesOverride: false
+          engineVersion: 2
+          timeout: 60
+          vaultCredentialId: "secretsmanager-approle"
+          vaultUrl: "https://secretsmanager.eclipse.org"
       throttleJobProperty:
         categories:
           - categoryName: "low-priority-jobs"
@@ -554,6 +561,8 @@ data:
             home: "/opt/tools/java/adoptopenjdk/openj9-jdk-8/latest"
           - name: "temurin-latest"
             home: "/opt/tools/java/temurin/latest"
+          - name: "temurin-jdk23-latest"
+            home: "/opt/tools/java/temurin/jdk-23/latest"
           - name: "temurin-jdk22-latest"
             home: "/opt/tools/java/temurin/jdk-22/latest"
           - name: "temurin-jdk21-latest"

diff --git a/instances/tools.cdt/target/k8s/statefulset.json b/instances/tools.cdt/target/k8s/statefulset.json
@@ -119,7 +119,12 @@
                         "cpu": "1150m"
                      }
                   },
-                  "securityContext": { },
+                  "securityContext": {
+                     "seLinuxOptions": {
+                        "level": "s0:c32,c4",
+                        "type": "spc_t"
+                     }
+                  },
                   "volumeMounts": [
                      {
                         "mountPath": "/var/jenkins",
-Original file line number
+Diff line change
@@ Expand Up / @@ -12,4 +12,5 @@ @@
           "pipeline-github",
         ],
       },
+      seLinuxLevel: "s0:c32,c4",
     }