b739c0ecae
Passing Java arguments to Jenkins puppet allows to tune Jenkins master Java. This is useful in order to set various Java attributes like Java heap size virtual memory consumption. This is most useful for downstream projects. This patch also enables to workaround Jenkins SECURITY-170 by setting java arguments through hieradata. https://issues.jenkins-ci.org/browse/JENKINS-34885 Change-Id: I745a23b0f177f868d5406639bc8c42e3acacea72 Depends-On: Ice0e4ffa2fffd041d8bcc4a0b323ffae7ba2b0c8
58 lines
2.4 KiB
YAML
58 lines
2.4 KiB
YAML
# See parameter documentation inside ../manifests/single_node_ci.pp
|
|
# Fields commented out have reasonable default values
|
|
|
|
#vhost_name:
|
|
project_config_repo: http://your-project-config-repo.example.com/project-config-example.git
|
|
#serveradmin:
|
|
# Jenkins version 1.651 is the last known version to work out of the box with
|
|
# zuul. However, it has numerous security vulnerabilities, and should only
|
|
# be used for installations that have other means (e.g. firewalls) that block all
|
|
# untrusted access to Jenkins.
|
|
# see SECURITY-170 in:
|
|
# "https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11"
|
|
#jenkins_version: present
|
|
#jenkins_vhost_name: jenkins
|
|
#jenkins_username: jenkins
|
|
#jenkins_password:
|
|
jenkins_ssh_private_key: |
|
|
-----BEGIN RSA PRIVATE KEY-----
|
|
Insert jenkins private key here
|
|
-----END RSA PRIVATE KEY-----
|
|
jenkins_ssh_public_key: your-jenkins-public-key-no-whitespace
|
|
jjb_git_revision: 1.6.2
|
|
#java_args_override: |
|
|
# These are the arguments to pass to Java
|
|
# The recommended value:
|
|
# "-Xloggc:/var/log/jenkins/gc.log -XX:+PrintGCDetails -Xmx12g -Dorg.kohsuke.stapler.compression.CompressionFilter.disabled=true -Djava.util.logging.config.file=/var/lib/jenkins/logger.conf -Dhudson.model.ParametersAction.keepUndefinedParameters=true"
|
|
# Please note that using the parameter: keepUndefinedParameters=true is not secure and exposes a potential jenkins security vulnerability
|
|
#jjb_git_url: https://git.openstack.org/openstack-infra/jenkins-job-builder
|
|
#gerrit_server: review.openstack.org
|
|
#gerrit_ssh_host_key:
|
|
gerrit_user: your-gerrit-user
|
|
gerrit_user_ssh_private_key: |
|
|
-----BEGIN RSA PRIVATE KEY-----
|
|
Insert gerrit private key here
|
|
-----END RSA PRIVATE KEY-----
|
|
gerrit_user_ssh_public_key: gerrit-public-key-no-whitespace
|
|
git_email: your-email@example.com
|
|
git_name: Your Name
|
|
log_server: logs.example.com
|
|
#smtp_host:
|
|
#smtp_default_from:
|
|
#smtp_default_to:
|
|
zuul_revision: 2.5.1
|
|
#zuul_git_source_repo: https://git.openstack.org/openstack-infra/zuul
|
|
oscc_file_contents: |
|
|
# Insert OSCC file contents here as explained in the
|
|
# documentation so that nodepool is able to
|
|
# authenticate to your cloud(s)
|
|
#
|
|
|
|
mysql_root_password: secret_mysql_root_password
|
|
mysql_nodepool_password: secret_mysql_nodepool_password
|
|
#nodepool_jenkins_target: jenkins1
|
|
#jenkins_api_key:
|
|
#jenkins_credentials_id:
|
|
nodepool_revision: 0.3.1
|
|
#nodepool_git_source_repo: https://git.openstack.org/openstack-infra/nodepool
|