/
common.yaml
296 lines (296 loc) · 22 KB
/
common.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
# see https://github.com/jenkins-infra/jenkins-keys for how to handle secrets in this file
# Debian defaults to the 'worker' module which doesn't handle HackerNews hugs
# of death as well as I would like. the mpm_event module is much less
# resource intensive
apache::mpm_module: "event"
ruby::rubygems_package: "rubygems-integration"
accounts:
tyler:
ssh_keys:
kiwi:
key: AAAAB3NzaC1yc2EAAAABIwAAAQEAueiy12T5bvFhsc9YjfLc3aVIxgySd3gDxQWy/bletIoZL8omKmzocBYJ7F58U1asoyfWsy2ToTOY8jJp1eToXmbD6L5+xvHba0A7djYh9aQRrFam7doKQ0zp0ZSUF6+R1v0OM4nnWqK4n2ECIYd+Bdzrp+xA5+XlW3ZSNzlnW2BeWznzmgRMcp6wI+zQ9GMHWviR1cxpml5Z6wrxTZ0aX91btvnNPqoOGva976B6e6403FOEkkIFTk6CC1TFKwc/VjbqxYBg4kU0JhiTP+iEZibcQrYjWdYUgAotYbFVe5/DneHMLNsMPdeihba4PUwt62rXyNegenuCRmCntLcaFQ==
grape:
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDTU0s5OKCC6VpKZGL9NJD4mNLY0AtujkVB1JkkuQ4OkMi2YGUHJtGhTbTwEVhNxpm0x2dM5KSzse6MLDYuGBW0qkE/VVuD9+9I73hbq461KqP0+WlupNh+Qc86kbiLBDv64+vWc+50mp1dbINpoM5xvaPYxgjnemydPv7vu5bhCHBugW7aN8VcLgfFgcp8vZCEanMtd3hIRjRU8v8Skk233ZGu1bXkG8iIOBQPabvEtZ0VDMg9pT3Q1R6lnnKqfCwHXd6zP6uAtejFSxvKRGKpu3OLGQMHwk7NlImVuhkVdaEFBq7pQtpOaGuP2eLKcN1wy5jsTYE+ZB6pvHCi2ecb
groups:
- sudo
kohsuke:
ssh_keys:
giffon:
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQCzBy1GEihAxSgrsEANgCxYwxS8Yy0U7cKq/1MMtr4/IrW2m2rzDcr4a7ZG/p/XrchCMn5eIekq1dYHsB0hY81iJr7jMZi7XbQx/LohF833YhIRctALpNzPunqBxZvOUVDib/dfX6LuoZTOojI/W5UPYrzAjyrjKMQvF5Mo0LaZ6eN1LElVaGzWExqO7mNkOrJY3IVurPu81mK4E+59FHTuB/oIawHUlxjMgBFPGKZBmb0cyVyViEmY6E78bNcN+frdSxZ72gcK/J7l1gfGz6YNQX6hKA+3v2O+/6pHf282W2hy0u4nw2DTs5NrsTnG8koiivilXC3VbhgVmQnUFKx5
sol:
key: AAAAB3NzaC1yc2EAAAABIwAAAQEAv2C9H4ZadOCu1rDmou5xgTpWF+cEFHGfwIIkB3fIzjsMfKUjofjXeAf5XrS9oTsQlrr++LRriYKDCCE7l9IPilDJpeua/21S0nktU+2iXKqgiPCVTlVd6qMksqz8j+9oRPZc2AWzp955Kc67MiKHAuZBpuIl7DBTvxL8OLYz/qyh6XnF+kcvNr8xnZ2qYn8lmh1VFnVscEs/5XtKpKQjnwOW4PmJ4YUcZV+Jeg8Si2jDes/BOvVOPBDt5jgNSsUvvVZSKdBiz5ioIZGbqOrnOqCeuZvFemOjeeSKfJUJOBTGisRgsEfcJPFKlgsUDiekvIfqQiVIC3N+0qskKDNWTw==
groups:
- sudo
danielbeck:
ssh_keys:
servus14:
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDb/Y8wjTRSo58wKuhqI54zpWan/tOX9auQGAMyTpjVG7OKyncSRRZkEtI7YVc3RCUdso+APuYN3W362nPm1dlocA46FYvRpDibSqP1XuknTvSLkA7smrM76fEFXonmnGcrfSZDCZfBsazK2xd8aFDpi1eYlDfJ/SNZOHIALAvzeBfalsrjs768w80XFzz9hZN+PYWgmH3t/tZZOz5dlrTJDQjo19egGwMu4HqgdZgYEglNYIVoJbbuGr+xvZ2TZosHQ0/CJtQcW9DCCSFaz1YNJwriJCv0gUbIX7V1+0rb8RXfZbhPXdh/AFn35HQlP1z4AmAsu9GW0/7kHWaNChxT
servus19:
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDAUdJCbGRdioMnSD1gnHSMhTTX3vOpuVIv7R3fzHU0HXXyjbnOeskkFOLl4vt4GgL4Tf3DRZkxFqqFWAlOvR+WwkLQdfPikg+O1vxNY3hzvimYOe+L8UguhuDwoSLdYnl86ZdB/sz+CxQcQNSXCDlSEsEbJwkS8IFnWUQqvOfNiBn5z+PQ8f3XS0FjXedc2rb30Zy6mAzSi4PPTZj8xVE9TMBpX1qHg3Ln/YOIGDt9Fg+1insupfXYInPq6RxUfHANRRJOjrqO6sM4fHa/KVFnjzZxQBjVGrBFIhVaRfnNTUkFlUC2R5fhi5vaxzCGA/W/rHPvPQZ7uS0XL9ix7umT
groups:
- sudo
olblak:
ssh_keys:
oros:
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDD3fajdGhdouy07qdycSZ39z9vADHV1TI04p3E6So4+47xR5bsi4Xylw8Xbd5mmrcFaEFJWXrzF3ryE2ufq7XlRxQk163qn8F+aWO434ENq7Ra3UyV9J2YWYQlYFC0v/Z1/N7gNZLADUP7g4E8+1lAJlTia6Pd8Z1a59jFArnl03MRBbo3yPosDoAXb7N5+Ad19FkjFnfYX13AK86NRkoY34JNfkPaA6n2u1iVX0GUeh8IV86+6q3WTU5nSwPJlYTMl4lzdO11VPoC3EupPYkBV8Rn1O1N6VDwCUGp8d/Tk1/kJhs9gP40kh5JeggHd+cP1X4rCellSnl9qhq5u1q5
groups:
- sudo
markewaite:
ssh_keys:
markewaite:
key: AAAAB3NzaC1yc2EAAAADAQABAAABgQCjfyyHgIygnhF/eRoeOwmHZ8VkmjNllLOCstF1+70BoKC+guy/itLQ5dDwS9phbwpI1oYO2v86ngzKkbXvJv642n1J7ydAhTL/DSdPkKfcmJLtmLtT0U+umo4S+ALeuqcLTByIVCe3BF45ILH3ky11gsAbSLJ2+Rptv0kt6NC7f+t/W8PblsWTaps4tQv7HHIMhPbXEs8Sri9QCxkqfnWP2ww5VcNr8g7CStBMYz7jrBdZuk+M0ov3fGrIqxAtBL29wDpgKt7LQIGYQYVu4pk4yh6TcLAOhruz9jdfvwmgzFsk5WMQOwvQ3zoJBGfXVLbAvmRWIGz1IGs5XytPmBSUooj3r3cuRbSPykWsV/IOd9YH1pi8oB5inT6g9LUDaTG50xJhhw3dLY6ZHkSl726EzqzAs5JKLeWK1CHSBsEmX7r81TzsVW0BtWZxH4RBK0HlKkGbv4bkW5iNSuHMthyxPDnvjkvo1sUqJJYyczfwuYUht1OjlJpl/cm/DABxV7c=
groups:
- sudo
timja:
ssh_keys:
timja:
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDP3+OVLBXvHTHUdvNqi2LCibfBM7y3vMr0baRSj6UVPmSj4ypo9A11dCIR9wy+tytPG+Ty67RTPPsvMs5G2cvZO/V/044KIwQPVn47QNW9EhJSl7Ht0yLeqwm/ZKq/1+qHiZYDGM3l+yjibeGkwuqM1AWzHYP5JavdkvxancAL+ixCvwiWycwhPTAt5wMP6OVGYyDmyQQEVSCBGO0aEdE1WvA/9/et/SraE6f/rrR0fOhhDz537wlz3DoZoWTvz3CMFrtjfz/YRMZtvJoKFLhdsM0gSKoTLiknMC139kTFrNqPQoErrznoEF2rWRIERFj44EbeJtZQcE02mLbUwFkJ
groups:
- sudo
dduportal:
ssh_keys:
dduportal:
type: ecdsa-sha2-nistp256
key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBDKKa/o/49P2v/U0rvHXjzal6vCrrCwnpN8lVV4XZD29ZKQUCZ1noVfS6vArgUPVM8+l/TulWeMM0MGqX+DXOX4=
dduportal-bertha:
type: ed25519
key: AAAAC3NzaC1lZDI1NTE5AAAAIGasEvLKplsDZIEVW2UVT3kTByb3s4m3R5h1Bgx0vDGk
groups:
- sudo
hlemeur:
ssh_keys:
hlemeur:
key: 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
groups:
- sudo
smerle:
ssh_keys:
smerle:
key: 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
smerle-secretive:
type: ecdsa-sha2-nistp256
key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBC4F10XloU9fqyO2L+U+TAOfUCeaQBG6FaUylIdMl2IwJehK3lS+Ut81/SPmBeiuNN3sPdXDOX5Ycii7L88AVT4=
groups:
- sudo
wfollonier:
ssh_keys:
wfollonier:
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQC3oj0NN9UL1dIfBP44JDsOj/bGX/DG/GIv82imhgWbCQvsKcPczb32+W+zVo+OF3mADX4EoBG681GGopjYCKLreo8D3nFSP/+kdAt0lEqbufzoLvSyyxa0RUHDwzVQIiMiNlzDiWqLRkF2TdeFDl5u+bbdPTYCGil5/qZ3Ro8sG9ayWXMxh+f+s0MAU9qFIwau838RF2R9OCMjmPodW/zf+Mcq+SqrbZyYfYha5jOWxoN8IdrGuAOQeYks7mrXC6qq5N9ojUtMKONvayFwNOsuC0U8PYUtukkHVnm2IK9KM1A38HDlV9eTF8ac7yCUHLlttmoIBdLUuLJAw72BQkK/
groups:
- sudo
# Lets Encrypt settings
letsencrypt::config::email: "tyler@monkeypox.org"
letsencrypt::config::server: "https://acme-staging-v02.api.letsencrypt.org/directory" # Staging by default
profile::letsencrypt::plugin: apache
profile::pkgrepo::authorized_ssh_keys:
release.ci.jenkins.io:
key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDBi5DJcmDRAa6J7d4Zj9alGw0ZNwDftfKPNqyMoJrbRyvqvhKi8z0mg5HMK+ohkc+Xk5+HWpLNf36nn4b+Jn9g2CZJfzkt2SL7HbCN4eVLkQmqmWG/y9HCSmld9bTVWFy1zD34qNiaZw1ldsusvokyU/LTIgWHsCtbsgMoE+CzRKKRJXDrUmnY4e4q5leTHjOdShlrFiakyy5XYtUKG0zlnJMqIvxyTSo+jKKA1iNeW0hP8knu4uhFCGcYOZps1eNH2z+7Vq+wq6lsNfU11CDfuCSZBG24VNMMf75giFVc2PdAzlWrY+BXi7QeDaPUqilMf3d2egKb/dFxhkTGQL11
trusted.ci.jenkins.io:
key: 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
irc::irc_server: ENC[PKCS7,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]
irc::irc_join: true
irc::use_ssl: true
irc::timeout: 20
ntp::autoupdate: true
ntp::servers:
- pool.ntp.org iburst
apache::keepalive: "On"
apache::keepalive_timeout: 3
apache::server_tokens: "Prod"
apache::server_signature: "Off"
apache::logroot_mode: "0755"
### Stuff for IRC jenkins-admin bot
# access to GitHub (for creating repos, etc)
profile::jenkinsadmin::github_login: "jenkinsadmin"
profile::jenkinsadmin::github_password: ENC[PKCS7,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]
profile::jenkinsadmin::github_token: ENC[PKCS7,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]
# access to JIRA (for creating new components)
profile::jenkinsadmin::jira_login: "ircbot"
profile::jenkinsadmin::jira_password: ENC[PKCS7,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]
# access to freenode (for authenticating as 'jenkinsadmin')
# TODO: nickname is hard-coded to the bot right now
profile::jenkinsadmin::nick_password: ENC[PKCS7,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]
# Tag is the docker container image tag from our build process, this job:
# <https://trusted.ci.jenkins.io:1443/job/Containers/job/ircbot>
profile::jenkinsadmin::image_tag: "64-build32db94"
# Key that Jenkins uses to push bits into OSUOSL
osuosl_mirroring::host: ftp-osl.osuosl.org
osuosl_mirroring::username: jenkins
osuosl_mirroring::privkey: ''
archives_jenkins_io_mirroring::host: archives.jenkins-ci.org
archives_jenkins_io_mirroring::username: mirrorsync
archives_jenkins_io_mirroring::privkey: ''
profile::l10n_server::image_tag: "3a5429b"
datadog_agent::api_key: ENC[PKCS7,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]
datadog_agent::process_enabled: true
datadog_agent::logs_enabled: true
datadog_agent::container_collect_all: true
datadog_agent::integrations:
disk:
init_config: {}
instances:
- use_mount: false
# Disable filesystem checks Ref. https://github.com/DataDog/dd-agent/issues/2932 and https://github.com/jenkins-infra/helpdesk/issues/1746
file_system_exclude:
- tmpfs
- none
- overlay
- shm
- nsfs # netns
include_all_devices: false
# place this file in ~/.docker/config.json
docker_hub_key: |
ENC[PKCS7,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]
profile::jenkinscontroller::docker_image: jenkins/jenkins
profile::jenkinscontroller::docker_tag: 2.440.3-jdk17
# WARNING: this list is not deep merged by hieradata (will be overwritten!)
profile::jenkinscontroller::plugins:
- workflow-aggregator
- pipeline-stage-view
- config-file-provider
- ldap
profile::jenkinscontroller::jcasc:
global_libraries:
pipeline-library:
remote: https://github.com/jenkins-infra/pipeline-library.git
defaultVersion: master # https://github.com/jenkins-infra/helpdesk/issues/2671
cache-ttl: 180
allow-pull-requests: true
tools:
maven:
mvn:
default_version: true
jdk:
jdk8:
installers:
linux-amd64:
type: "zip"
label: "linux && amd64"
windows-amd64:
type: "zip"
label: "windows"
os: "windows"
jdk11:
installers:
linux-amd64:
type: "zip"
label: "linux && amd64"
windows-amd64:
type: "zip"
label: "windows"
os: "windows"
jdk17:
installers:
linux-amd64:
type: "zip"
label: "linux && amd64"
windows-amd64:
type: "zip"
label: "windows"
os: "windows"
jdk21:
installers:
linux-amd64:
type: "zip"
label: "linux && amd64"
windows-amd64:
type: "zip"
label: "windows"
os: "windows"
agents_setup:
windows:
agentDir: 'C:/Jenkins/agent'
tempDir: 'C:/Temp'
remoteAdmin: Administrator
osDiskSize: 150
osDiskStorageAccountType: 'Premium_LRS'
agentJavaBin: 'C:/tools/jdk-17/bin/java'
agentJavaOpts: '-XX:+PrintCommandLineFlags'
javaHome: 'C:/tools/jdk-17' # Default JDK provided for builds when no pipeline setup exists
ubuntu:
agentDir: "/home/jenkins/agent"
remoteAdmin: jenkins
tempDir: "/tmp"
osDiskSize: 150
osDiskStorageAccountType: 'Premium_LRS'
agentJavaBin: '/opt/jdk-17/bin/java'
agentJavaOpts: '-XX:+PrintCommandLineFlags'
javaHome: '/opt/jdk-17' # Default JDK provided for builds when no pipeline setup exists
path: '/home/jenkins/.asdf/shims:/home/jenkins/.asdf/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin'
agent_images:
azure_vms_gallery_image:
version: 1.66.0
subscription_id: ENC[PKCS7,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]
container_images:
# All in one image (same as VM templates)
jnlp-maven-all-in-one: jenkinsciinfra/jenkins-agent-ubuntu-22.04:1.66.0@sha256:9268d18ed08f3c5a61dd320692417269e9aa7f572cc1deb678e150a5365f760e
# Windows container images (jenkins-infra/docker-inbound-agents)
jnlp-maven-8-windows: jenkinsciinfra/inbound-agent-maven:jdk8-nanoserver@sha256:c29ce2d5f4c2c86e0f5ff60b1001bf6190450d78f814644863302de73f5f126e
jnlp-maven-11-windows: jenkinsciinfra/inbound-agent-maven:jdk11-nanoserver@sha256:29764d607c0556eb2b9892e311e292351948a7a54223b3a4a16ecde7c1228aee
jnlp-maven-17-windows: jenkinsciinfra/inbound-agent-maven:jdk17-nanoserver@sha256:2c678550974dc1cc0c5d58a6175fde2ed46442fd3d161a4e9b9bb018b02ad3b3
jnlp-maven-21-windows: jenkinsciinfra/inbound-agent-maven:jdk21-nanoserver@sha256:5231ab6ad045668f26f8e7e6d03e524c42ccce6e350749eeee98633da8bdfd69
jnlp-webbuilder: jenkinsciinfra/builder:latest@sha256:b18d4611ee913e534527c2d204298dc9ecb7e7fd5bb5c5eb81d366d12129a61d
# default template from the official inbound-agent image here to provide a default agent (`node()` pipeline step)
jnlp: jenkins/inbound-agent:latest-jdk17@sha256:9d236ada05eb9c538319d3597783a3fb1e04520186cf38920c03e81a831a3774
tools_default_versions:
jdk8: 8u412-b08
jdk11: 11.0.23+9
jdk17: 17.0.11+9
jdk21: 21.0.3+9
maven: 3.9.6
artifact_caching_proxy:
providers:
aws:
name: AWS
azure:
name: Azure
do:
name: DigitalOcean
credentialsId: artifact-caching-proxy-credentials
disabled: true
ldap_url: "ldap://localhost:389"
ldap_dn: "dc=example,dc=com"
ldap_admin_dn: "cn=admin,dc=example,dc=com"
ldap_admin_password: "hunter2"
# These variables should be filled in, in production.yaml, with the legacy
# jenkins-ci.org cert details
ssl_legacy_cert: ""
ssl_legacy_chain: ""
ssl_legacy_key: ""
ssh::server::storeconfigs_enabled: false
ssh::server::options:
PasswordAuthentication: no
PubkeyAuthentication: yes
ssh::client::options:
UseRoaming: no
# Hash of SSH keys to be used for downloading encrypted usage-stats and
# uploading decrypted/anonymized ones
profile::usage::ssh_keys:
sol:
key: AAAAB3NzaC1yc2EAAAABIwAAAQEAv2C9H4ZadOCu1rDmou5xgTpWF+cEFHGfwIIkB3fIzjsMfKUjofjXeAf5XrS9oTsQlrr++LRriYKDCCE7l9IPilDJpeua/21S0nktU+2iXKqgiPCVTlVd6qMksqz8j+9oRPZc2AWzp955Kc67MiKHAuZBpuIl7DBTvxL8OLYz/qyh6XnF+kcvNr8xnZ2qYn8lmh1VFnVscEs/5XtKpKQjnwOW4PmJ4YUcZV+Jeg8Si2jDes/BOvVOPBDt5jgNSsUvvVZSKdBiz5ioIZGbqOrnOqCeuZvFemOjeeSKfJUJOBTGisRgsEfcJPFKlgsUDiekvIfqQiVIC3N+0qskKDNWTw==
# Pre-shared key for configuring the r10k webhook server
r10k::webhook::config::protected: false
r10k::webhook::config::use_mcollective: false
r10k::webhook::config::enable_ssl: false
r10k::webhook::config::github_secret: "justapassword"
usage_ssh_pubkey: "AAAAB3NzaC1yc2EAAAADAQABAAACAQD66Xfd/5HgBkc6lGGqCrhJ/LBIWOTQ5BRcGEnSKH/Ij4vlVI42bHTusZ/y2lJZ+CUE04kDqWD1WG/Rhv9YjShlotlpv+Ig8JqCzpbkMXuEsrWgXp4BO0D0NeLeZkza2isG9NqqXHAJj6ck7MvKkH56PCjzBru9C3+DTa6CgXy6KtMV9vFSqeD9JCn8p9fdeArIGHJk7li1fSCNoTYVq+P3/Jh9YHk1pLQbp9nOg4fz2DjSsdi/VfzMCW4XVTzatOv/e2dFkz2sNdsXEpxWZoLUDgBSgMU1Agiyphmuc+FfZsjkmLO03bvO1fC7BVJtYHoRSuNnJbMKpkOnDa8l0bpQz6NxF1PB3znfHBm/TZVJX4XhJK7Bqi46Rkyo564kjd3+DRII6n3ziBgDVezQwvvB0b5lyxH6+Ysu6nsmwaV8wnsuolPQXUIUTbOjcJ1iN0acESfOX8mGAbv0K3RVpA3vV+7fXioylO+cG6szzDVLOC3z1ltVO+3vV2iWGMfdEQvJzC5uuOrSZYG7FuRvY6NyZINIt4vthkKPJW3QL+flS4fnqYrzj006jo1rNwZlQytc0uPT3qQJ07iF06oAvHlUuUNgQUO4FPvCAkiIFcpXZpo4jB00JYBcXpCB+OtOiBzgyiRq40l34htR3Hs2skY8e9F8Z9XTpPw2aaS0OjrE6w=="
usage_ssh_privkey: "usage_ssh_privkey"
# Full version of the Ubuntu package used for Docker CE as per apt-cache output
docker::version: 5:26.1.2-1~ubuntu.22.04~jammy
# This file storage and the storage account are defined in https://github.com/jenkins-infra/azure/blob/main/get.jenkins.io.tf
azure::getjenkinsio::storageaccount: "overridewithstorageaccountname"
azure::getjenkinsio::fileshare: "overridewithfilestoragename"
azure::getjenkinsio::storagekey: "overridewithstoragekey"
profile::azcopy::azcopy_version: 10.24.0-20240326
profile::azcopy::az_cli_version: 2.60.0
profile::datadog_pluginsite_check::sites:
- plugins.jenkins.io
limits:
"*":
nofile:
soft: "65536"
hard: "65536"
profile::openvpn::image_tag: 2.3.27
profile::updatesite::docroot: /var/www/updates.jenkins.io
apt::update:frequency: 'daily'
# vim: ft=yaml ts=2 sw=2 nowrap et