From 39097967a7b1db5653e8f478cb4b72d4749b1d69 Mon Sep 17 00:00:00 2001
From: Brent Perteet <brent.perteet@umagul.com>
Date: Wed, 16 Sep 2026 18:58:39 +0000
Subject: [PATCH] feat: add artifact upload token credential

---
 README.md                    | 6 ++++++
 controller/casc/jenkins.yaml | 6 ++++++
 docker-compose.yml           | 4 ++++
 3 files changed, 16 insertions(+)

diff --git a/README.md b/README.md
index 453525f..1fee9d7 100644
--- a/README.md
+++ b/README.md
@@ -71,6 +71,12 @@ Jenkins itself.
    `secrets/jenkins_admin_password.txt`. Note the printed password - you'll
    need it to log in. Nothing in `secrets/` is committed to git.
 
+   The Ultra V2 pipeline also needs the artifact server token in
+   `secrets/artifact_upload_token.txt`. Copy the value of
+   `ARTIFACT_UPLOAD_TOKEN` from the artifact server's `.env` file into that
+   file. Docker exposes it only to the controller, and JCasC registers it as
+   the masked Secret Text credential `mate-updates-upload-token`.
+
 3. **Build and start everything**:
 
    ```bash
diff --git a/controller/casc/jenkins.yaml b/controller/casc/jenkins.yaml
index 0aebf5e..2bb22a4 100644
--- a/controller/casc/jenkins.yaml
+++ b/controller/casc/jenkins.yaml
@@ -68,6 +68,12 @@ credentials:
                 directEntry:
                   privateKey: "${GITEA_ULTRA2_APP_PRIVATE_KEY}"
 
+          - string:
+              scope: GLOBAL
+              id: "mate-updates-upload-token"
+              description: "HTTPS upload token for updates.sparksoftdesign.com"
+              secret: "${ARTIFACT_UPLOAD_TOKEN}"
+
 unclassified:
   location:
     url: "https://jenkins.sparksoftdesign.com/"
diff --git a/docker-compose.yml b/docker-compose.yml
index eb88ccf..1cee3ac 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -14,6 +14,8 @@ services:
         target: GITEA_ULTRA2_APP_PRIVATE_KEY
       - source: jenkins_admin_password
         target: JENKINS_ADMIN_PASSWORD
+      - source: artifact_upload_token
+        target: ARTIFACT_UPLOAD_TOKEN
     volumes:
       - jenkins_home:/var/jenkins_home
       - ./controller/casc:/var/jenkins_home/casc_configs:ro
@@ -54,3 +56,5 @@ secrets:
     file: ./secrets/gitea_ultra2_app_key
   jenkins_admin_password:
     file: ./secrets/jenkins_admin_password.txt
+  artifact_upload_token:
+    file: ./secrets/artifact_upload_token.txt