Files
jenkins-docker/controller/casc/jenkins.yaml
2026-09-16 18:58:39 +00:00

80 lines
2.4 KiB
YAML

jenkins:
systemMessage: "Firmware build Jenkins controller - configured via JCasC"
# Controller stays a pure orchestrator; real builds run on the labeled
# toolchain agents below. Bump this if you want the controller itself
# to run lightweight jobs (e.g. git checkout/fan-out stages).
numExecutors: 0
securityRealm:
local:
allowsSignup: false
users:
- id: "${JENKINS_ADMIN_ID}"
password: "${JENKINS_ADMIN_PASSWORD}"
authorizationStrategy:
loggedInUsersCanDoAnything:
allowAnonymousRead: false
nodes:
- permanent:
name: "mcuxpresso-agent"
remoteFS: "/home/jenkins"
labelString: "mcuxpresso arm-gcc"
numExecutors: 2
mode: EXCLUSIVE
launcher:
ssh:
host: "mcuxpresso-agent"
port: 22
credentialsId: "agent-ssh-key"
launchTimeoutSeconds: 60
maxNumRetries: 5
retryWaitTime: 15
sshHostKeyVerificationStrategy:
nonVerifyingKeyVerificationStrategy: {}
- permanent:
name: "mplabx-agent"
remoteFS: "/home/jenkins"
labelString: "mplabx"
numExecutors: 2
mode: EXCLUSIVE
launcher:
ssh:
host: "mplabx-agent"
port: 22
credentialsId: "agent-ssh-key"
launchTimeoutSeconds: 60
maxNumRetries: 5
retryWaitTime: 15
sshHostKeyVerificationStrategy:
nonVerifyingKeyVerificationStrategy: {}
credentials:
system:
domainCredentials:
- credentials:
- basicSSHUserPrivateKey:
scope: GLOBAL
id: "agent-ssh-key"
username: "jenkins"
privateKeySource:
directEntry:
privateKey: "${AGENT_SSH_PRIVATE_KEY}"
- basicSSHUserPrivateKey:
scope: GLOBAL
id: "gitea-ultra2-app"
description: "Read-only deploy key for mate/ultra2-app"
username: "git"
privateKeySource:
directEntry:
privateKey: "${GITEA_ULTRA2_APP_PRIVATE_KEY}"
- string:
scope: GLOBAL
id: "mate-updates-upload-token"
description: "HTTPS upload token for updates.sparksoftdesign.com"
secret: "${ARTIFACT_UPLOAD_TOKEN}"
unclassified:
location:
url: "https://jenkins.sparksoftdesign.com/"