From 46ef6004d1f1ee9aecf28d369d3922179cb182f4 Mon Sep 17 00:00:00 2001 From: Frederic Gurr Date: Fri, 27 Sep 2024 16:51:36 +0200 Subject: [PATCH] Migrate to CephFS - eclipse.pde, ee4j, ee4j.ca --- instances/eclipse.pde/config.jsonnet | 1 + instances/eclipse.pde/target/config.json | 1 + .../target/jenkins/configuration.yml | 2 + .../target/k8s/configmap-jenkins-config.yml | 2 + instances/eclipse.pde/target/k8s/m2-dir.json | 2 +- .../eclipse.pde/target/k8s/statefulset.json | 6 + instances/ee4j.ca/config.jsonnet | 1 + instances/ee4j.ca/target/config.json | 202 +++++++++++++++++- .../ee4j.ca/target/jenkins/configuration.yml | 186 ++++++++++++++++ .../target/k8s/configmap-jenkins-config.yml | 186 ++++++++++++++++ instances/ee4j.ca/target/k8s/m2-dir.json | 2 +- instances/ee4j.ca/target/k8s/statefulset.json | 6 + instances/ee4j/config.jsonnet | 1 + instances/ee4j/target/config.json | 202 +++++++++++++++++- .../ee4j/target/jenkins/configuration.yml | 186 ++++++++++++++++ .../target/k8s/configmap-jenkins-config.yml | 186 ++++++++++++++++ instances/ee4j/target/k8s/m2-dir.json | 2 +- instances/ee4j/target/k8s/statefulset.json | 6 + 18 files changed, 1173 insertions(+), 7 deletions(-) diff --git a/instances/eclipse.pde/config.jsonnet b/instances/eclipse.pde/config.jsonnet index 710a3c8067..748cf061ce 100644 --- a/instances/eclipse.pde/config.jsonnet +++ b/instances/eclipse.pde/config.jsonnet @@ -28,4 +28,5 @@ }, }, }, + seLinuxLevel: "s0:c51,c25", } diff --git a/instances/eclipse.pde/target/config.json b/instances/eclipse.pde/target/config.json index a741fe1842..87eadc9d8e 100644 --- a/instances/eclipse.pde/target/config.json +++ b/instances/eclipse.pde/target/config.json @@ -997,6 +997,7 @@ }, "generate": false }, + "seLinuxLevel": "s0:c51,c25", "secrets": { "dockerconfigjson": { "dockerconfigjson-for-pull-as-default": { diff --git a/instances/eclipse.pde/target/jenkins/configuration.yml b/instances/eclipse.pde/target/jenkins/configuration.yml index 2cc5a3a8d5..48cc847f81 100644 --- a/instances/eclipse.pde/target/jenkins/configuration.yml +++ b/instances/eclipse.pde/target/jenkins/configuration.yml @@ -808,6 +808,8 @@ tool: home: "/opt/tools/java/openjdk/latest" - name: "openjdk-ea-latest" home: "/opt/tools/java/openjdk/ea-latest" + - name: "openjdk-jdk24-latest" + home: "/opt/tools/java/openjdk/jdk-24/latest" - name: "openjdk-jdk23-latest" home: "/opt/tools/java/openjdk/jdk-23/latest" - name: "openjdk-jdk22-latest" diff --git a/instances/eclipse.pde/target/k8s/configmap-jenkins-config.yml b/instances/eclipse.pde/target/k8s/configmap-jenkins-config.yml index 1a7d121f67..119364e165 100644 --- a/instances/eclipse.pde/target/k8s/configmap-jenkins-config.yml +++ b/instances/eclipse.pde/target/k8s/configmap-jenkins-config.yml @@ -831,6 +831,8 @@ data: home: "/opt/tools/java/openjdk/latest" - name: "openjdk-ea-latest" home: "/opt/tools/java/openjdk/ea-latest" + - name: "openjdk-jdk24-latest" + home: "/opt/tools/java/openjdk/jdk-24/latest" - name: "openjdk-jdk23-latest" home: "/opt/tools/java/openjdk/jdk-23/latest" - name: "openjdk-jdk22-latest" diff --git a/instances/eclipse.pde/target/k8s/m2-dir.json b/instances/eclipse.pde/target/k8s/m2-dir.json index c7bc7ee95b..6a25255506 100644 --- a/instances/eclipse.pde/target/k8s/m2-dir.json +++ b/instances/eclipse.pde/target/k8s/m2-dir.json @@ -2,7 +2,7 @@ "apiVersion": "v1", "data": { ".mavenrc": "set -- -V -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn --batch-mode \"${@}\"", - "toolchains.xml": "\n\n \n jdk\n \n JavaSE-1.8\n 1.8\n oracle\n \n /opt/tools/java/oracle/jdk-8/latest\n \n \n jdk\n \n JavaSE-9\n 9\n openjdk\n \n /opt/tools/java/openjdk/jdk-9/latest\n \n \n jdk\n \n JavaSE-10\n 10\n openjdk\n \n /opt/tools/java/openjdk/jdk-10/latest\n \n \n jdk\n \n JavaSE-11\n 11\n openjdk\n \n /opt/tools/java/openjdk/jdk-11/latest\n \n \n jdk\n \n JavaSE-12\n 12\n openjdk\n \n /opt/tools/java/openjdk/jdk-12/latest\n \n \n jdk\n \n JavaSE-13\n 13\n openjdk\n \n /opt/tools/java/openjdk/jdk-13/latest\n \n \n jdk\n \n JavaSE-14\n 14\n openjdk\n \n /opt/tools/java/openjdk/jdk-14/latest\n \n \n jdk\n \n JavaSE-15\n 15\n openjdk\n \n /opt/tools/java/openjdk/jdk-15/latest\n \n \n jdk\n \n JavaSE-16\n 16\n openjdk\n \n /opt/tools/java/openjdk/jdk-16/latest\n \n \n jdk\n \n JavaSE-17\n 17\n openjdk\n \n /opt/tools/java/openjdk/jdk-17/latest\n \n \n jdk\n \n JavaSE-18\n 18\n openjdk\n \n /opt/tools/java/openjdk/jdk-18/latest\n \n \n jdk\n \n JavaSE-19\n 19\n openjdk\n \n /opt/tools/java/openjdk/jdk-19/latest\n \n \n jdk\n \n JavaSE-20\n 20\n openjdk\n \n /opt/tools/java/openjdk/jdk-20/latest\n \n \n jdk\n \n JavaSE-21\n 21\n openjdk\n \n /opt/tools/java/openjdk/jdk-21/latest\n \n \n jdk\n \n JavaSE-22\n 22\n openjdk\n \n /opt/tools/java/openjdk/jdk-22/latest\n \n \n jdk\n \n JavaSE-23\n 23\n openjdk\n \n /opt/tools/java/openjdk/jdk-23/latest\n \n\n" + "toolchains.xml": "\n\n \n jdk\n \n JavaSE-1.8\n 1.8\n oracle\n \n /opt/tools/java/oracle/jdk-8/latest\n \n \n jdk\n \n JavaSE-9\n 9\n openjdk\n \n /opt/tools/java/openjdk/jdk-9/latest\n \n \n jdk\n \n JavaSE-10\n 10\n openjdk\n \n /opt/tools/java/openjdk/jdk-10/latest\n \n \n jdk\n \n JavaSE-11\n 11\n openjdk\n \n /opt/tools/java/openjdk/jdk-11/latest\n \n \n jdk\n \n JavaSE-12\n 12\n openjdk\n \n /opt/tools/java/openjdk/jdk-12/latest\n \n \n jdk\n \n JavaSE-13\n 13\n openjdk\n \n /opt/tools/java/openjdk/jdk-13/latest\n \n \n jdk\n \n JavaSE-14\n 14\n openjdk\n \n /opt/tools/java/openjdk/jdk-14/latest\n \n \n jdk\n \n JavaSE-15\n 15\n openjdk\n \n /opt/tools/java/openjdk/jdk-15/latest\n \n \n jdk\n \n JavaSE-16\n 16\n openjdk\n \n /opt/tools/java/openjdk/jdk-16/latest\n \n \n jdk\n \n JavaSE-17\n 17\n openjdk\n \n /opt/tools/java/openjdk/jdk-17/latest\n \n \n jdk\n \n JavaSE-18\n 18\n openjdk\n \n /opt/tools/java/openjdk/jdk-18/latest\n \n \n jdk\n \n JavaSE-19\n 19\n openjdk\n \n /opt/tools/java/openjdk/jdk-19/latest\n \n \n jdk\n \n JavaSE-20\n 20\n openjdk\n \n /opt/tools/java/openjdk/jdk-20/latest\n \n \n jdk\n \n JavaSE-21\n 21\n openjdk\n \n /opt/tools/java/openjdk/jdk-21/latest\n \n \n jdk\n \n JavaSE-22\n 22\n openjdk\n \n /opt/tools/java/openjdk/jdk-22/latest\n \n \n jdk\n \n JavaSE-23\n 23\n openjdk\n \n /opt/tools/java/openjdk/jdk-23/latest\n \n \n jdk\n \n JavaSE-24\n 24\n openjdk\n \n /opt/tools/java/openjdk/jdk-24/latest\n \n\n" }, "kind": "ConfigMap", "metadata": { diff --git a/instances/eclipse.pde/target/k8s/statefulset.json b/instances/eclipse.pde/target/k8s/statefulset.json index e68f2074f1..7b8f15bfa5 100644 --- a/instances/eclipse.pde/target/k8s/statefulset.json +++ b/instances/eclipse.pde/target/k8s/statefulset.json @@ -119,6 +119,12 @@ "cpu": "850m" } }, + "securityContext": { + "seLinuxOptions": { + "level": "s0:c51,c25", + "type": "spc_t" + } + }, "volumeMounts": [ { "mountPath": "/var/jenkins", diff --git a/instances/ee4j.ca/config.jsonnet b/instances/ee4j.ca/config.jsonnet index 1e9f4d91de..50696f301d 100644 --- a/instances/ee4j.ca/config.jsonnet +++ b/instances/ee4j.ca/config.jsonnet @@ -8,4 +8,5 @@ "copyartifact", ], }, + seLinuxLevel: "s0:c31,c5", } diff --git a/instances/ee4j.ca/target/config.json b/instances/ee4j.ca/target/config.json index fcf5ba3ab6..173065f1fe 100644 --- a/instances/ee4j.ca/target/config.json +++ b/instances/ee4j.ca/target/config.json @@ -217,7 +217,7 @@ "docker.io/eclipsecbi/jiro-agent-centos-7:latest" ], "context": "centos-7", - "dockerfile": "#*******************************************************************************\n# Copyright (c) 2020 Eclipse Foundation and others.\n# This program and the accompanying materials are made available\n# under the terms of the Eclipse Public License 2.0\n# which is available at http://www.eclipse.org/legal/epl-v20.html,\n# or the MIT License which is available at https://opensource.org/licenses/MIT.\n# SPDX-License-Identifier: EPL-2.0 OR MIT\n#*******************************************************************************\nFROM docker.io/eclipsecbi/jiro-agent-centos-7:spec\n\n# These environment variables will be used in the uid_entrypoint script from the parent image\nENV USER_NAME=\"jenkins\"\nENV HOME=\"/home/jenkins\"\n\nVOLUME [ \"/home/jenkins\", ]\nWORKDIR \"/home/jenkins\"\nENTRYPOINT [ \"uid_entrypoint\", \"/usr/local/bin/jenkins-agent\" ]\n\nADD \"https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar\" \"/usr/share/jenkins/agent.jar\" \nADD \"https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent\" \"/usr/local/bin/jenkins-agent\"\n\nRUN sed -e 's/JAVA_OPTS/JAVA_OPTS \\$JENKINS_REMOTING_JAVA_OPTS/g' /usr/local/bin/jenkins-agent > /usr/local/bin/jenkins-agent.sed \\\n && mv /usr/local/bin/jenkins-agent.sed /usr/local/bin/jenkins-agent\n\nRUN chmod 755 \"$(dirname \"/usr/share/jenkins/agent.jar\")\" \\\n && chmod 644 \"/usr/share/jenkins/agent.jar\" \\\n && chmod ug+rx \"/usr/local/bin/jenkins-agent\" \\\n && chgrp 0 \"/usr/local/bin/jenkins-agent\"\n\nUSER 10001:0\n", + "dockerfile": "#*******************************************************************************\n# Copyright (c) 2020 Eclipse Foundation and others.\n# This program and the accompanying materials are made available\n# under the terms of the Eclipse Public License 2.0\n# which is available at http://www.eclipse.org/legal/epl-v20.html,\n# or the MIT License which is available at https://opensource.org/licenses/MIT.\n# SPDX-License-Identifier: EPL-2.0 OR MIT\n#*******************************************************************************\nFROM docker.io/eclipsecbi/jiro-agent-centos-7:spec\n\n# These environment variables will be used in the uid_entrypoint script from the parent image\nENV USER_NAME=\"jenkins\"\nENV HOME=\"/home/jenkins\"\n\nVOLUME [ \"/home/jenkins\", ]\nWORKDIR \"/home/jenkins\"\nENTRYPOINT [ \"/usr/local/bin/jenkins-agent\" ]\n\nADD \"https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar\" \"/usr/share/jenkins/agent.jar\"\nADD \"https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent\" \"/usr/local/bin/jenkins-agent\"\n\nRUN sed -e 's/JAVA_OPTS/JAVA_OPTS \\$JENKINS_REMOTING_JAVA_OPTS/g' /usr/local/bin/jenkins-agent > /usr/local/bin/jenkins-agent.sed \\\n && mv /usr/local/bin/jenkins-agent.sed /usr/local/bin/jenkins-agent\n\nRUN chmod 755 \"$(dirname \"/usr/share/jenkins/agent.jar\")\" \\\n && chmod 644 \"/usr/share/jenkins/agent.jar\" \\\n && chmod ug+rx \"/usr/local/bin/jenkins-agent\" \\\n && chgrp 0 \"/usr/local/bin/jenkins-agent\"\n\nUSER 10001:0\n", "image": "jiro-agent-centos-7", "registry": "docker.io", "repository": "eclipsecbi", @@ -316,7 +316,7 @@ "docker.io/eclipsecbi/jiro-agent-centos-8:latest" ], "context": "centos-8", - "dockerfile": "#*******************************************************************************\n# Copyright (c) 2020 Eclipse Foundation and others.\n# This program and the accompanying materials are made available\n# under the terms of the Eclipse Public License 2.0\n# which is available at http://www.eclipse.org/legal/epl-v20.html,\n# or the MIT License which is available at https://opensource.org/licenses/MIT.\n# SPDX-License-Identifier: EPL-2.0 OR MIT\n#*******************************************************************************\nFROM docker.io/eclipsecbi/jiro-agent-centos-8:spec\n\n# These environment variables will be used in the uid_entrypoint script from the parent image\nENV USER_NAME=\"jenkins\"\nENV HOME=\"/home/jenkins\"\n\nVOLUME [ \"/home/jenkins\", ]\nWORKDIR \"/home/jenkins\"\nENTRYPOINT [ \"uid_entrypoint\", \"/usr/local/bin/jenkins-agent\" ]\n\nADD \"https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar\" \"/usr/share/jenkins/agent.jar\" \nADD \"https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent\" \"/usr/local/bin/jenkins-agent\"\n\nRUN sed -e 's/JAVA_OPTS/JAVA_OPTS \\$JENKINS_REMOTING_JAVA_OPTS/g' /usr/local/bin/jenkins-agent > /usr/local/bin/jenkins-agent.sed \\\n && mv /usr/local/bin/jenkins-agent.sed /usr/local/bin/jenkins-agent\n\nRUN chmod 755 \"$(dirname \"/usr/share/jenkins/agent.jar\")\" \\\n && chmod 644 \"/usr/share/jenkins/agent.jar\" \\\n && chmod ug+rx \"/usr/local/bin/jenkins-agent\" \\\n && chgrp 0 \"/usr/local/bin/jenkins-agent\"\n\nUSER 10001:0\n", + "dockerfile": "#*******************************************************************************\n# Copyright (c) 2020 Eclipse Foundation and others.\n# This program and the accompanying materials are made available\n# under the terms of the Eclipse Public License 2.0\n# which is available at http://www.eclipse.org/legal/epl-v20.html,\n# or the MIT License which is available at https://opensource.org/licenses/MIT.\n# SPDX-License-Identifier: EPL-2.0 OR MIT\n#*******************************************************************************\nFROM docker.io/eclipsecbi/jiro-agent-centos-8:spec\n\n# These environment variables will be used in the uid_entrypoint script from the parent image\nENV USER_NAME=\"jenkins\"\nENV HOME=\"/home/jenkins\"\n\nVOLUME [ \"/home/jenkins\", ]\nWORKDIR \"/home/jenkins\"\nENTRYPOINT [ \"/usr/local/bin/jenkins-agent\" ]\n\nADD \"https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar\" \"/usr/share/jenkins/agent.jar\"\nADD \"https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent\" \"/usr/local/bin/jenkins-agent\"\n\nRUN sed -e 's/JAVA_OPTS/JAVA_OPTS \\$JENKINS_REMOTING_JAVA_OPTS/g' /usr/local/bin/jenkins-agent > /usr/local/bin/jenkins-agent.sed \\\n && mv /usr/local/bin/jenkins-agent.sed /usr/local/bin/jenkins-agent\n\nRUN chmod 755 \"$(dirname \"/usr/share/jenkins/agent.jar\")\" \\\n && chmod 644 \"/usr/share/jenkins/agent.jar\" \\\n && chmod ug+rx \"/usr/local/bin/jenkins-agent\" \\\n && chgrp 0 \"/usr/local/bin/jenkins-agent\"\n\nUSER 10001:0\n", "image": "jiro-agent-centos-8", "registry": "docker.io", "repository": "eclipsecbi", @@ -406,6 +406,203 @@ }, "startupScript": "/usr/local/bin/jenkins-agent", "username": "jenkins" + }, + "ubuntu-2204": { + "agentWorkdir": "/home/jenkins/jenkins-agent", + "docker": { + "aliases": [ + "docker.io/eclipsecbi/jiro-agent-ubuntu-2204:latest" + ], + "build_args": "['FROM_TAG': '22.04']", + "context": "ubuntu", + "dockerfile": "#*******************************************************************************\n# Copyright (c) 2020 Eclipse Foundation and others.\n# This program and the accompanying materials are made available\n# under the terms of the Eclipse Public License 2.0\n# which is available at http://www.eclipse.org/legal/epl-v20.html,\n# or the MIT License which is available at https://opensource.org/licenses/MIT.\n# SPDX-License-Identifier: EPL-2.0 OR MIT\n#*******************************************************************************\nFROM docker.io/eclipsecbi/jiro-agent-ubuntu-2204:spec\n\n# These environment variables will be used in the uid_entrypoint script from the parent image\nENV USER_NAME=\"jenkins\"\nENV HOME=\"/home/jenkins\"\n\nVOLUME [ \"/home/jenkins\", ]\nWORKDIR \"/home/jenkins\"\nENTRYPOINT [ \"/usr/local/bin/jenkins-agent\" ]\n\nADD \"https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar\" \"/usr/share/jenkins/agent.jar\"\nADD \"https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent\" \"/usr/local/bin/jenkins-agent\"\n\nRUN sed -e 's/JAVA_OPTS/JAVA_OPTS \\$JENKINS_REMOTING_JAVA_OPTS/g' /usr/local/bin/jenkins-agent > /usr/local/bin/jenkins-agent.sed \\\n && mv /usr/local/bin/jenkins-agent.sed /usr/local/bin/jenkins-agent\n\nRUN chmod 755 \"$(dirname \"/usr/share/jenkins/agent.jar\")\" \\\n && chmod 644 \"/usr/share/jenkins/agent.jar\" \\\n && chmod ug+rx \"/usr/local/bin/jenkins-agent\" \\\n && chgrp 0 \"/usr/local/bin/jenkins-agent\"\n\nUSER 10001:0\n", + "image": "jiro-agent-ubuntu-2204", + "registry": "docker.io", + "repository": "eclipsecbi", + "tag": "remoting-3206.3208.v409508a_675ff" + }, + "env": { + "JAVA_TOOL_OPTIONS": [ ], + "JENKINS_REMOTING_JAVA_OPTS": [ + "-showversion", + "-XshowSettings:vm", + "-Xmx256m", + "-Dorg.jenkinsci.remoting.engine.JnlpProtocol3.disabled=true", + "-Dorg.jenkinsci.plugins.gitclient.CliGitAPIImpl.useSETSID=true" + ], + "OPENJ9_JAVA_OPTIONS": [ + "-XX:+IgnoreUnrecognizedVMOptions", + "-XX:+IdleTuningCompactOnIdle", + "-XX:+IdleTuningGcOnIdle" + ], + "_JAVA_OPTIONS": [ ] + }, + "home": "/home/jenkins", + "kubernetes": { + "inheritYamlMergeStrategy": true, + "resources": { + "cpu": { + "limit": "2000m", + "request": "1000m" + }, + "memory": { + "limit": "4096Mi", + "request": "4096Mi" + } + }, + "volumes": [ + { + "mounts": [ + { + "mountPath": "/home/jenkins/.m2/settings-security.xml", + "subPath": "settings-security.xml" + }, + { + "mountPath": "/home/jenkins/.m2/settings.xml", + "subPath": "settings.xml" + } + ], + "name": "m2-secret-dir", + "secret": { + "name": "m2-secret-dir" + } + }, + { + "configMap": { + "name": "m2-dir" + }, + "mounts": [ + { + "mountPath": "/home/jenkins/.m2/toolchains.xml", + "subPath": "toolchains.xml" + }, + { + "mountPath": "/home/jenkins/.mavenrc", + "subPath": ".mavenrc" + } + ], + "name": "m2-dir" + } + ], + "yamlMergeStrategy": "merge" + }, + "labels": [ + "ubuntu-2204" + ], + "maxHeap": "256m", + "mode": "EXCLUSIVE", + "name": "ubuntu-2204", + "remoting": { + "jar": "/usr/share/jenkins/agent.jar", + "startupScript": { + "name": "jenkins-agent", + "url": "https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent", + "version": "3206.vb_15dcf73f6a_9-12" + }, + "url": "https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar", + "version": "3206.3208.v409508a_675ff" + }, + "startupScript": "/usr/local/bin/jenkins-agent", + "username": "jenkins" + }, + "ubuntu-2404": { + "agentWorkdir": "/home/jenkins/jenkins-agent", + "docker": { + "aliases": [ + "docker.io/eclipsecbi/jiro-agent-ubuntu-2404:latest" + ], + "build_args": "['FROM_TAG': '24.04']", + "context": "ubuntu", + "dockerfile": "#*******************************************************************************\n# Copyright (c) 2020 Eclipse Foundation and others.\n# This program and the accompanying materials are made available\n# under the terms of the Eclipse Public License 2.0\n# which is available at http://www.eclipse.org/legal/epl-v20.html,\n# or the MIT License which is available at https://opensource.org/licenses/MIT.\n# SPDX-License-Identifier: EPL-2.0 OR MIT\n#*******************************************************************************\nFROM docker.io/eclipsecbi/jiro-agent-ubuntu-2404:spec\n\n# These environment variables will be used in the uid_entrypoint script from the parent image\nENV USER_NAME=\"jenkins\"\nENV HOME=\"/home/jenkins\"\n\nVOLUME [ \"/home/jenkins\", ]\nWORKDIR \"/home/jenkins\"\nENTRYPOINT [ \"/usr/local/bin/jenkins-agent\" ]\n\nADD \"https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar\" \"/usr/share/jenkins/agent.jar\"\nADD \"https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent\" \"/usr/local/bin/jenkins-agent\"\n\nRUN sed -e 's/JAVA_OPTS/JAVA_OPTS \\$JENKINS_REMOTING_JAVA_OPTS/g' /usr/local/bin/jenkins-agent > /usr/local/bin/jenkins-agent.sed \\\n && mv /usr/local/bin/jenkins-agent.sed /usr/local/bin/jenkins-agent\n\nRUN chmod 755 \"$(dirname \"/usr/share/jenkins/agent.jar\")\" \\\n && chmod 644 \"/usr/share/jenkins/agent.jar\" \\\n && chmod ug+rx \"/usr/local/bin/jenkins-agent\" \\\n && chgrp 0 \"/usr/local/bin/jenkins-agent\"\n\nUSER 10001:0\n", + "image": "jiro-agent-ubuntu-2404", + "registry": "docker.io", + "repository": "eclipsecbi", + "tag": "remoting-3206.3208.v409508a_675ff" + }, + "env": { + "JAVA_TOOL_OPTIONS": [ ], + "JENKINS_REMOTING_JAVA_OPTS": [ + "-showversion", + "-XshowSettings:vm", + "-Xmx256m", + "-Dorg.jenkinsci.remoting.engine.JnlpProtocol3.disabled=true", + "-Dorg.jenkinsci.plugins.gitclient.CliGitAPIImpl.useSETSID=true" + ], + "OPENJ9_JAVA_OPTIONS": [ + "-XX:+IgnoreUnrecognizedVMOptions", + "-XX:+IdleTuningCompactOnIdle", + "-XX:+IdleTuningGcOnIdle" + ], + "_JAVA_OPTIONS": [ ] + }, + "home": "/home/jenkins", + "kubernetes": { + "inheritYamlMergeStrategy": true, + "resources": { + "cpu": { + "limit": "2000m", + "request": "1000m" + }, + "memory": { + "limit": "4096Mi", + "request": "4096Mi" + } + }, + "volumes": [ + { + "mounts": [ + { + "mountPath": "/home/jenkins/.m2/settings-security.xml", + "subPath": "settings-security.xml" + }, + { + "mountPath": "/home/jenkins/.m2/settings.xml", + "subPath": "settings.xml" + } + ], + "name": "m2-secret-dir", + "secret": { + "name": "m2-secret-dir" + } + }, + { + "configMap": { + "name": "m2-dir" + }, + "mounts": [ + { + "mountPath": "/home/jenkins/.m2/toolchains.xml", + "subPath": "toolchains.xml" + }, + { + "mountPath": "/home/jenkins/.mavenrc", + "subPath": ".mavenrc" + } + ], + "name": "m2-dir" + } + ], + "yamlMergeStrategy": "merge" + }, + "labels": [ + "ubuntu-latest", + "ubuntu-2404" + ], + "maxHeap": "256m", + "mode": "EXCLUSIVE", + "name": "ubuntu-2404", + "remoting": { + "jar": "/usr/share/jenkins/agent.jar", + "startupScript": { + "name": "jenkins-agent", + "url": "https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent", + "version": "3206.vb_15dcf73f6a_9-12" + }, + "url": "https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar", + "version": "3206.3208.v409508a_675ff" + }, + "startupScript": "/usr/local/bin/jenkins-agent", + "username": "jenkins" } } } @@ -754,6 +951,7 @@ }, "generate": false }, + "seLinuxLevel": "s0:c31,c5", "secrets": { "dockerconfigjson": { "dockerconfigjson-for-pull-as-ca": { diff --git a/instances/ee4j.ca/target/jenkins/configuration.yml b/instances/ee4j.ca/target/jenkins/configuration.yml index 5f732c6fdb..634af0207e 100644 --- a/instances/ee4j.ca/target/jenkins/configuration.yml +++ b/instances/ee4j.ca/target/jenkins/configuration.yml @@ -485,6 +485,188 @@ jenkins: name: m2-dir inheritYamlMergeStrategy: "true" yamlMergeStrategy: "merge" + - name: "ubuntu-2204" + namespace: "ca" + label: "ubuntu-2204" + containers: + - name: "jnlp" + image: docker.io/eclipsecbi/jiro-agent-ubuntu-2204:remoting-3206.3208.v409508a_675ff + alwaysPullImage: true + livenessProbe: + failureThreshold: 0 + initialDelaySeconds: 0 + periodSeconds: 0 + successThreshold: 0 + timeoutSeconds: 0 + ttyEnabled: true + command: "" + args: "" + instanceCap: -1 + nodeUsageMode: EXCLUSIVE + envVars: + - envVar: + key: "JAVA_TOOL_OPTIONS" + value: "" + - envVar: + key: "JENKINS_REMOTING_JAVA_OPTS" + value: "-showversion -XshowSettings:vm -Xmx256m -Dorg.jenkinsci.remoting.engine.JnlpProtocol3.disabled=true -Dorg.jenkinsci.plugins.gitclient.CliGitAPIImpl.useSETSID=true" + - envVar: + key: "OPENJ9_JAVA_OPTIONS" + value: "-XX:+IgnoreUnrecognizedVMOptions -XX:+IdleTuningCompactOnIdle -XX:+IdleTuningGcOnIdle" + - envVar: + key: "_JAVA_OPTIONS" + value: "" + volumes: + - persistentVolumeClaim: + claimName: "tools-claim-jiro-ca" + mountPath: "/opt/tools" + readOnly: true + - configMapVolume: + configMapName: "known-hosts" + mountPath: "/home/jenkins/.ssh/" + subPath: "." + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/repository" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/wrapper" + workspaceVolume: + emptyDirWorkspaceVolume: + memory: false + yaml: | + apiVersion: v1 + kind: Pod + spec: + containers: + - name: jnlp + resources: + limits: + cpu: "2000m" + memory: "4096Mi" + requests: + cpu: "1000m" + memory: "4096Mi" + volumeMounts: + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings-security.xml + subPath: settings-security.xml + readOnly: true + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings.xml + subPath: settings.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.m2/toolchains.xml + subPath: toolchains.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.mavenrc + subPath: .mavenrc + readOnly: true + volumes: + - name: m2-secret-dir + secret: + secretName: m2-secret-dir + - name: m2-dir + configMap: + name: m2-dir + inheritYamlMergeStrategy: "true" + yamlMergeStrategy: "merge" + - name: "ubuntu-2404" + namespace: "ca" + label: "ubuntu-latest ubuntu-2404" + containers: + - name: "jnlp" + image: docker.io/eclipsecbi/jiro-agent-ubuntu-2404:remoting-3206.3208.v409508a_675ff + alwaysPullImage: true + livenessProbe: + failureThreshold: 0 + initialDelaySeconds: 0 + periodSeconds: 0 + successThreshold: 0 + timeoutSeconds: 0 + ttyEnabled: true + command: "" + args: "" + instanceCap: -1 + nodeUsageMode: EXCLUSIVE + envVars: + - envVar: + key: "JAVA_TOOL_OPTIONS" + value: "" + - envVar: + key: "JENKINS_REMOTING_JAVA_OPTS" + value: "-showversion -XshowSettings:vm -Xmx256m -Dorg.jenkinsci.remoting.engine.JnlpProtocol3.disabled=true -Dorg.jenkinsci.plugins.gitclient.CliGitAPIImpl.useSETSID=true" + - envVar: + key: "OPENJ9_JAVA_OPTIONS" + value: "-XX:+IgnoreUnrecognizedVMOptions -XX:+IdleTuningCompactOnIdle -XX:+IdleTuningGcOnIdle" + - envVar: + key: "_JAVA_OPTIONS" + value: "" + volumes: + - persistentVolumeClaim: + claimName: "tools-claim-jiro-ca" + mountPath: "/opt/tools" + readOnly: true + - configMapVolume: + configMapName: "known-hosts" + mountPath: "/home/jenkins/.ssh/" + subPath: "." + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/repository" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/wrapper" + workspaceVolume: + emptyDirWorkspaceVolume: + memory: false + yaml: | + apiVersion: v1 + kind: Pod + spec: + containers: + - name: jnlp + resources: + limits: + cpu: "2000m" + memory: "4096Mi" + requests: + cpu: "1000m" + memory: "4096Mi" + volumeMounts: + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings-security.xml + subPath: settings-security.xml + readOnly: true + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings.xml + subPath: settings.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.m2/toolchains.xml + subPath: toolchains.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.mavenrc + subPath: .mavenrc + readOnly: true + volumes: + - name: m2-secret-dir + secret: + secretName: m2-secret-dir + - name: m2-dir + configMap: + name: m2-dir + inheritYamlMergeStrategy: "true" + yamlMergeStrategy: "merge" security: apiToken: creationOfLegacyTokenEnabled: false @@ -579,6 +761,8 @@ tool: home: "/opt/tools/java/openjdk/latest" - name: "openjdk-ea-latest" home: "/opt/tools/java/openjdk/ea-latest" + - name: "openjdk-jdk24-latest" + home: "/opt/tools/java/openjdk/jdk-24/latest" - name: "openjdk-jdk23-latest" home: "/opt/tools/java/openjdk/jdk-23/latest" - name: "openjdk-jdk22-latest" @@ -708,6 +892,8 @@ tool: installations: - name: "apache-maven-latest" home: "/opt/tools/apache-maven/latest" + - name: "apache-maven-3.9.9" + home: "/opt/tools/apache-maven/3.9.9" - name: "apache-maven-3.9.6" home: "/opt/tools/apache-maven/3.9.6" - name: "apache-maven-3.9.5" diff --git a/instances/ee4j.ca/target/k8s/configmap-jenkins-config.yml b/instances/ee4j.ca/target/k8s/configmap-jenkins-config.yml index c5ae0e2c0e..f50f1e6c1e 100644 --- a/instances/ee4j.ca/target/k8s/configmap-jenkins-config.yml +++ b/instances/ee4j.ca/target/k8s/configmap-jenkins-config.yml @@ -508,6 +508,188 @@ data: name: m2-dir inheritYamlMergeStrategy: "true" yamlMergeStrategy: "merge" + - name: "ubuntu-2204" + namespace: "ca" + label: "ubuntu-2204" + containers: + - name: "jnlp" + image: docker.io/eclipsecbi/jiro-agent-ubuntu-2204:remoting-3206.3208.v409508a_675ff + alwaysPullImage: true + livenessProbe: + failureThreshold: 0 + initialDelaySeconds: 0 + periodSeconds: 0 + successThreshold: 0 + timeoutSeconds: 0 + ttyEnabled: true + command: "" + args: "" + instanceCap: -1 + nodeUsageMode: EXCLUSIVE + envVars: + - envVar: + key: "JAVA_TOOL_OPTIONS" + value: "" + - envVar: + key: "JENKINS_REMOTING_JAVA_OPTS" + value: "-showversion -XshowSettings:vm -Xmx256m -Dorg.jenkinsci.remoting.engine.JnlpProtocol3.disabled=true -Dorg.jenkinsci.plugins.gitclient.CliGitAPIImpl.useSETSID=true" + - envVar: + key: "OPENJ9_JAVA_OPTIONS" + value: "-XX:+IgnoreUnrecognizedVMOptions -XX:+IdleTuningCompactOnIdle -XX:+IdleTuningGcOnIdle" + - envVar: + key: "_JAVA_OPTIONS" + value: "" + volumes: + - persistentVolumeClaim: + claimName: "tools-claim-jiro-ca" + mountPath: "/opt/tools" + readOnly: true + - configMapVolume: + configMapName: "known-hosts" + mountPath: "/home/jenkins/.ssh/" + subPath: "." + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/repository" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/wrapper" + workspaceVolume: + emptyDirWorkspaceVolume: + memory: false + yaml: | + apiVersion: v1 + kind: Pod + spec: + containers: + - name: jnlp + resources: + limits: + cpu: "2000m" + memory: "4096Mi" + requests: + cpu: "1000m" + memory: "4096Mi" + volumeMounts: + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings-security.xml + subPath: settings-security.xml + readOnly: true + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings.xml + subPath: settings.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.m2/toolchains.xml + subPath: toolchains.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.mavenrc + subPath: .mavenrc + readOnly: true + volumes: + - name: m2-secret-dir + secret: + secretName: m2-secret-dir + - name: m2-dir + configMap: + name: m2-dir + inheritYamlMergeStrategy: "true" + yamlMergeStrategy: "merge" + - name: "ubuntu-2404" + namespace: "ca" + label: "ubuntu-latest ubuntu-2404" + containers: + - name: "jnlp" + image: docker.io/eclipsecbi/jiro-agent-ubuntu-2404:remoting-3206.3208.v409508a_675ff + alwaysPullImage: true + livenessProbe: + failureThreshold: 0 + initialDelaySeconds: 0 + periodSeconds: 0 + successThreshold: 0 + timeoutSeconds: 0 + ttyEnabled: true + command: "" + args: "" + instanceCap: -1 + nodeUsageMode: EXCLUSIVE + envVars: + - envVar: + key: "JAVA_TOOL_OPTIONS" + value: "" + - envVar: + key: "JENKINS_REMOTING_JAVA_OPTS" + value: "-showversion -XshowSettings:vm -Xmx256m -Dorg.jenkinsci.remoting.engine.JnlpProtocol3.disabled=true -Dorg.jenkinsci.plugins.gitclient.CliGitAPIImpl.useSETSID=true" + - envVar: + key: "OPENJ9_JAVA_OPTIONS" + value: "-XX:+IgnoreUnrecognizedVMOptions -XX:+IdleTuningCompactOnIdle -XX:+IdleTuningGcOnIdle" + - envVar: + key: "_JAVA_OPTIONS" + value: "" + volumes: + - persistentVolumeClaim: + claimName: "tools-claim-jiro-ca" + mountPath: "/opt/tools" + readOnly: true + - configMapVolume: + configMapName: "known-hosts" + mountPath: "/home/jenkins/.ssh/" + subPath: "." + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/repository" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/wrapper" + workspaceVolume: + emptyDirWorkspaceVolume: + memory: false + yaml: | + apiVersion: v1 + kind: Pod + spec: + containers: + - name: jnlp + resources: + limits: + cpu: "2000m" + memory: "4096Mi" + requests: + cpu: "1000m" + memory: "4096Mi" + volumeMounts: + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings-security.xml + subPath: settings-security.xml + readOnly: true + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings.xml + subPath: settings.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.m2/toolchains.xml + subPath: toolchains.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.mavenrc + subPath: .mavenrc + readOnly: true + volumes: + - name: m2-secret-dir + secret: + secretName: m2-secret-dir + - name: m2-dir + configMap: + name: m2-dir + inheritYamlMergeStrategy: "true" + yamlMergeStrategy: "merge" security: apiToken: creationOfLegacyTokenEnabled: false @@ -602,6 +784,8 @@ data: home: "/opt/tools/java/openjdk/latest" - name: "openjdk-ea-latest" home: "/opt/tools/java/openjdk/ea-latest" + - name: "openjdk-jdk24-latest" + home: "/opt/tools/java/openjdk/jdk-24/latest" - name: "openjdk-jdk23-latest" home: "/opt/tools/java/openjdk/jdk-23/latest" - name: "openjdk-jdk22-latest" @@ -731,6 +915,8 @@ data: installations: - name: "apache-maven-latest" home: "/opt/tools/apache-maven/latest" + - name: "apache-maven-3.9.9" + home: "/opt/tools/apache-maven/3.9.9" - name: "apache-maven-3.9.6" home: "/opt/tools/apache-maven/3.9.6" - name: "apache-maven-3.9.5" diff --git a/instances/ee4j.ca/target/k8s/m2-dir.json b/instances/ee4j.ca/target/k8s/m2-dir.json index 641b9c39cf..7a3bc1ea62 100644 --- a/instances/ee4j.ca/target/k8s/m2-dir.json +++ b/instances/ee4j.ca/target/k8s/m2-dir.json @@ -2,7 +2,7 @@ "apiVersion": "v1", "data": { ".mavenrc": "set -- -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn --batch-mode \"${@}\"", - "toolchains.xml": "\n\n \n jdk\n \n JavaSE-1.8\n 1.8\n oracle\n \n /opt/tools/java/oracle/jdk-8/latest\n \n \n jdk\n \n JavaSE-9\n 9\n openjdk\n \n /opt/tools/java/openjdk/jdk-9/latest\n \n \n jdk\n \n JavaSE-10\n 10\n openjdk\n \n /opt/tools/java/openjdk/jdk-10/latest\n \n \n jdk\n \n JavaSE-11\n 11\n openjdk\n \n /opt/tools/java/openjdk/jdk-11/latest\n \n \n jdk\n \n JavaSE-12\n 12\n openjdk\n \n /opt/tools/java/openjdk/jdk-12/latest\n \n \n jdk\n \n JavaSE-13\n 13\n openjdk\n \n /opt/tools/java/openjdk/jdk-13/latest\n \n \n jdk\n \n JavaSE-14\n 14\n openjdk\n \n /opt/tools/java/openjdk/jdk-14/latest\n \n \n jdk\n \n JavaSE-15\n 15\n openjdk\n \n /opt/tools/java/openjdk/jdk-15/latest\n \n \n jdk\n \n JavaSE-16\n 16\n openjdk\n \n /opt/tools/java/openjdk/jdk-16/latest\n \n \n jdk\n \n JavaSE-17\n 17\n openjdk\n \n /opt/tools/java/openjdk/jdk-17/latest\n \n \n jdk\n \n JavaSE-18\n 18\n openjdk\n \n /opt/tools/java/openjdk/jdk-18/latest\n \n \n jdk\n \n JavaSE-19\n 19\n openjdk\n \n /opt/tools/java/openjdk/jdk-19/latest\n \n \n jdk\n \n JavaSE-20\n 20\n openjdk\n \n /opt/tools/java/openjdk/jdk-20/latest\n \n \n jdk\n \n JavaSE-21\n 21\n openjdk\n \n /opt/tools/java/openjdk/jdk-21/latest\n \n \n jdk\n \n JavaSE-22\n 22\n openjdk\n \n /opt/tools/java/openjdk/jdk-22/latest\n \n \n jdk\n \n JavaSE-23\n 23\n openjdk\n \n /opt/tools/java/openjdk/jdk-23/latest\n \n\n" + "toolchains.xml": "\n\n \n jdk\n \n JavaSE-1.8\n 1.8\n oracle\n \n /opt/tools/java/oracle/jdk-8/latest\n \n \n jdk\n \n JavaSE-9\n 9\n openjdk\n \n /opt/tools/java/openjdk/jdk-9/latest\n \n \n jdk\n \n JavaSE-10\n 10\n openjdk\n \n /opt/tools/java/openjdk/jdk-10/latest\n \n \n jdk\n \n JavaSE-11\n 11\n openjdk\n \n /opt/tools/java/openjdk/jdk-11/latest\n \n \n jdk\n \n JavaSE-12\n 12\n openjdk\n \n /opt/tools/java/openjdk/jdk-12/latest\n \n \n jdk\n \n JavaSE-13\n 13\n openjdk\n \n /opt/tools/java/openjdk/jdk-13/latest\n \n \n jdk\n \n JavaSE-14\n 14\n openjdk\n \n /opt/tools/java/openjdk/jdk-14/latest\n \n \n jdk\n \n JavaSE-15\n 15\n openjdk\n \n /opt/tools/java/openjdk/jdk-15/latest\n \n \n jdk\n \n JavaSE-16\n 16\n openjdk\n \n /opt/tools/java/openjdk/jdk-16/latest\n \n \n jdk\n \n JavaSE-17\n 17\n openjdk\n \n /opt/tools/java/openjdk/jdk-17/latest\n \n \n jdk\n \n JavaSE-18\n 18\n openjdk\n \n /opt/tools/java/openjdk/jdk-18/latest\n \n \n jdk\n \n JavaSE-19\n 19\n openjdk\n \n /opt/tools/java/openjdk/jdk-19/latest\n \n \n jdk\n \n JavaSE-20\n 20\n openjdk\n \n /opt/tools/java/openjdk/jdk-20/latest\n \n \n jdk\n \n JavaSE-21\n 21\n openjdk\n \n /opt/tools/java/openjdk/jdk-21/latest\n \n \n jdk\n \n JavaSE-22\n 22\n openjdk\n \n /opt/tools/java/openjdk/jdk-22/latest\n \n \n jdk\n \n JavaSE-23\n 23\n openjdk\n \n /opt/tools/java/openjdk/jdk-23/latest\n \n \n jdk\n \n JavaSE-24\n 24\n openjdk\n \n /opt/tools/java/openjdk/jdk-24/latest\n \n\n" }, "kind": "ConfigMap", "metadata": { diff --git a/instances/ee4j.ca/target/k8s/statefulset.json b/instances/ee4j.ca/target/k8s/statefulset.json index 578da9ecc4..0d62c269a8 100644 --- a/instances/ee4j.ca/target/k8s/statefulset.json +++ b/instances/ee4j.ca/target/k8s/statefulset.json @@ -119,6 +119,12 @@ "cpu": "250m" } }, + "securityContext": { + "seLinuxOptions": { + "level": "s0:c31,c5", + "type": "spc_t" + } + }, "volumeMounts": [ { "mountPath": "/var/jenkins", diff --git a/instances/ee4j/config.jsonnet b/instances/ee4j/config.jsonnet index bdada6e905..fb933cb23e 100644 --- a/instances/ee4j/config.jsonnet +++ b/instances/ee4j/config.jsonnet @@ -3,4 +3,5 @@ fullName: "ee4j", displayName: "Eclipse EE4J", }, + seLinuxLevel: "s0:c36,c20", } diff --git a/instances/ee4j/target/config.json b/instances/ee4j/target/config.json index 765189add5..6efdb4a705 100644 --- a/instances/ee4j/target/config.json +++ b/instances/ee4j/target/config.json @@ -217,7 +217,7 @@ "docker.io/eclipsecbi/jiro-agent-centos-7:latest" ], "context": "centos-7", - "dockerfile": "#*******************************************************************************\n# Copyright (c) 2020 Eclipse Foundation and others.\n# This program and the accompanying materials are made available\n# under the terms of the Eclipse Public License 2.0\n# which is available at http://www.eclipse.org/legal/epl-v20.html,\n# or the MIT License which is available at https://opensource.org/licenses/MIT.\n# SPDX-License-Identifier: EPL-2.0 OR MIT\n#*******************************************************************************\nFROM docker.io/eclipsecbi/jiro-agent-centos-7:spec\n\n# These environment variables will be used in the uid_entrypoint script from the parent image\nENV USER_NAME=\"jenkins\"\nENV HOME=\"/home/jenkins\"\n\nVOLUME [ \"/home/jenkins\", ]\nWORKDIR \"/home/jenkins\"\nENTRYPOINT [ \"uid_entrypoint\", \"/usr/local/bin/jenkins-agent\" ]\n\nADD \"https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar\" \"/usr/share/jenkins/agent.jar\" \nADD \"https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent\" \"/usr/local/bin/jenkins-agent\"\n\nRUN sed -e 's/JAVA_OPTS/JAVA_OPTS \\$JENKINS_REMOTING_JAVA_OPTS/g' /usr/local/bin/jenkins-agent > /usr/local/bin/jenkins-agent.sed \\\n && mv /usr/local/bin/jenkins-agent.sed /usr/local/bin/jenkins-agent\n\nRUN chmod 755 \"$(dirname \"/usr/share/jenkins/agent.jar\")\" \\\n && chmod 644 \"/usr/share/jenkins/agent.jar\" \\\n && chmod ug+rx \"/usr/local/bin/jenkins-agent\" \\\n && chgrp 0 \"/usr/local/bin/jenkins-agent\"\n\nUSER 10001:0\n", + "dockerfile": "#*******************************************************************************\n# Copyright (c) 2020 Eclipse Foundation and others.\n# This program and the accompanying materials are made available\n# under the terms of the Eclipse Public License 2.0\n# which is available at http://www.eclipse.org/legal/epl-v20.html,\n# or the MIT License which is available at https://opensource.org/licenses/MIT.\n# SPDX-License-Identifier: EPL-2.0 OR MIT\n#*******************************************************************************\nFROM docker.io/eclipsecbi/jiro-agent-centos-7:spec\n\n# These environment variables will be used in the uid_entrypoint script from the parent image\nENV USER_NAME=\"jenkins\"\nENV HOME=\"/home/jenkins\"\n\nVOLUME [ \"/home/jenkins\", ]\nWORKDIR \"/home/jenkins\"\nENTRYPOINT [ \"/usr/local/bin/jenkins-agent\" ]\n\nADD \"https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar\" \"/usr/share/jenkins/agent.jar\"\nADD \"https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent\" \"/usr/local/bin/jenkins-agent\"\n\nRUN sed -e 's/JAVA_OPTS/JAVA_OPTS \\$JENKINS_REMOTING_JAVA_OPTS/g' /usr/local/bin/jenkins-agent > /usr/local/bin/jenkins-agent.sed \\\n && mv /usr/local/bin/jenkins-agent.sed /usr/local/bin/jenkins-agent\n\nRUN chmod 755 \"$(dirname \"/usr/share/jenkins/agent.jar\")\" \\\n && chmod 644 \"/usr/share/jenkins/agent.jar\" \\\n && chmod ug+rx \"/usr/local/bin/jenkins-agent\" \\\n && chgrp 0 \"/usr/local/bin/jenkins-agent\"\n\nUSER 10001:0\n", "image": "jiro-agent-centos-7", "registry": "docker.io", "repository": "eclipsecbi", @@ -316,7 +316,7 @@ "docker.io/eclipsecbi/jiro-agent-centos-8:latest" ], "context": "centos-8", - "dockerfile": "#*******************************************************************************\n# Copyright (c) 2020 Eclipse Foundation and others.\n# This program and the accompanying materials are made available\n# under the terms of the Eclipse Public License 2.0\n# which is available at http://www.eclipse.org/legal/epl-v20.html,\n# or the MIT License which is available at https://opensource.org/licenses/MIT.\n# SPDX-License-Identifier: EPL-2.0 OR MIT\n#*******************************************************************************\nFROM docker.io/eclipsecbi/jiro-agent-centos-8:spec\n\n# These environment variables will be used in the uid_entrypoint script from the parent image\nENV USER_NAME=\"jenkins\"\nENV HOME=\"/home/jenkins\"\n\nVOLUME [ \"/home/jenkins\", ]\nWORKDIR \"/home/jenkins\"\nENTRYPOINT [ \"uid_entrypoint\", \"/usr/local/bin/jenkins-agent\" ]\n\nADD \"https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar\" \"/usr/share/jenkins/agent.jar\" \nADD \"https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent\" \"/usr/local/bin/jenkins-agent\"\n\nRUN sed -e 's/JAVA_OPTS/JAVA_OPTS \\$JENKINS_REMOTING_JAVA_OPTS/g' /usr/local/bin/jenkins-agent > /usr/local/bin/jenkins-agent.sed \\\n && mv /usr/local/bin/jenkins-agent.sed /usr/local/bin/jenkins-agent\n\nRUN chmod 755 \"$(dirname \"/usr/share/jenkins/agent.jar\")\" \\\n && chmod 644 \"/usr/share/jenkins/agent.jar\" \\\n && chmod ug+rx \"/usr/local/bin/jenkins-agent\" \\\n && chgrp 0 \"/usr/local/bin/jenkins-agent\"\n\nUSER 10001:0\n", + "dockerfile": "#*******************************************************************************\n# Copyright (c) 2020 Eclipse Foundation and others.\n# This program and the accompanying materials are made available\n# under the terms of the Eclipse Public License 2.0\n# which is available at http://www.eclipse.org/legal/epl-v20.html,\n# or the MIT License which is available at https://opensource.org/licenses/MIT.\n# SPDX-License-Identifier: EPL-2.0 OR MIT\n#*******************************************************************************\nFROM docker.io/eclipsecbi/jiro-agent-centos-8:spec\n\n# These environment variables will be used in the uid_entrypoint script from the parent image\nENV USER_NAME=\"jenkins\"\nENV HOME=\"/home/jenkins\"\n\nVOLUME [ \"/home/jenkins\", ]\nWORKDIR \"/home/jenkins\"\nENTRYPOINT [ \"/usr/local/bin/jenkins-agent\" ]\n\nADD \"https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar\" \"/usr/share/jenkins/agent.jar\"\nADD \"https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent\" \"/usr/local/bin/jenkins-agent\"\n\nRUN sed -e 's/JAVA_OPTS/JAVA_OPTS \\$JENKINS_REMOTING_JAVA_OPTS/g' /usr/local/bin/jenkins-agent > /usr/local/bin/jenkins-agent.sed \\\n && mv /usr/local/bin/jenkins-agent.sed /usr/local/bin/jenkins-agent\n\nRUN chmod 755 \"$(dirname \"/usr/share/jenkins/agent.jar\")\" \\\n && chmod 644 \"/usr/share/jenkins/agent.jar\" \\\n && chmod ug+rx \"/usr/local/bin/jenkins-agent\" \\\n && chgrp 0 \"/usr/local/bin/jenkins-agent\"\n\nUSER 10001:0\n", "image": "jiro-agent-centos-8", "registry": "docker.io", "repository": "eclipsecbi", @@ -406,6 +406,203 @@ }, "startupScript": "/usr/local/bin/jenkins-agent", "username": "jenkins" + }, + "ubuntu-2204": { + "agentWorkdir": "/home/jenkins/jenkins-agent", + "docker": { + "aliases": [ + "docker.io/eclipsecbi/jiro-agent-ubuntu-2204:latest" + ], + "build_args": "['FROM_TAG': '22.04']", + "context": "ubuntu", + "dockerfile": "#*******************************************************************************\n# Copyright (c) 2020 Eclipse Foundation and others.\n# This program and the accompanying materials are made available\n# under the terms of the Eclipse Public License 2.0\n# which is available at http://www.eclipse.org/legal/epl-v20.html,\n# or the MIT License which is available at https://opensource.org/licenses/MIT.\n# SPDX-License-Identifier: EPL-2.0 OR MIT\n#*******************************************************************************\nFROM docker.io/eclipsecbi/jiro-agent-ubuntu-2204:spec\n\n# These environment variables will be used in the uid_entrypoint script from the parent image\nENV USER_NAME=\"jenkins\"\nENV HOME=\"/home/jenkins\"\n\nVOLUME [ \"/home/jenkins\", ]\nWORKDIR \"/home/jenkins\"\nENTRYPOINT [ \"/usr/local/bin/jenkins-agent\" ]\n\nADD \"https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar\" \"/usr/share/jenkins/agent.jar\"\nADD \"https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent\" \"/usr/local/bin/jenkins-agent\"\n\nRUN sed -e 's/JAVA_OPTS/JAVA_OPTS \\$JENKINS_REMOTING_JAVA_OPTS/g' /usr/local/bin/jenkins-agent > /usr/local/bin/jenkins-agent.sed \\\n && mv /usr/local/bin/jenkins-agent.sed /usr/local/bin/jenkins-agent\n\nRUN chmod 755 \"$(dirname \"/usr/share/jenkins/agent.jar\")\" \\\n && chmod 644 \"/usr/share/jenkins/agent.jar\" \\\n && chmod ug+rx \"/usr/local/bin/jenkins-agent\" \\\n && chgrp 0 \"/usr/local/bin/jenkins-agent\"\n\nUSER 10001:0\n", + "image": "jiro-agent-ubuntu-2204", + "registry": "docker.io", + "repository": "eclipsecbi", + "tag": "remoting-3206.3208.v409508a_675ff" + }, + "env": { + "JAVA_TOOL_OPTIONS": [ ], + "JENKINS_REMOTING_JAVA_OPTS": [ + "-showversion", + "-XshowSettings:vm", + "-Xmx256m", + "-Dorg.jenkinsci.remoting.engine.JnlpProtocol3.disabled=true", + "-Dorg.jenkinsci.plugins.gitclient.CliGitAPIImpl.useSETSID=true" + ], + "OPENJ9_JAVA_OPTIONS": [ + "-XX:+IgnoreUnrecognizedVMOptions", + "-XX:+IdleTuningCompactOnIdle", + "-XX:+IdleTuningGcOnIdle" + ], + "_JAVA_OPTIONS": [ ] + }, + "home": "/home/jenkins", + "kubernetes": { + "inheritYamlMergeStrategy": true, + "resources": { + "cpu": { + "limit": "2000m", + "request": "1000m" + }, + "memory": { + "limit": "4096Mi", + "request": "4096Mi" + } + }, + "volumes": [ + { + "mounts": [ + { + "mountPath": "/home/jenkins/.m2/settings-security.xml", + "subPath": "settings-security.xml" + }, + { + "mountPath": "/home/jenkins/.m2/settings.xml", + "subPath": "settings.xml" + } + ], + "name": "m2-secret-dir", + "secret": { + "name": "m2-secret-dir" + } + }, + { + "configMap": { + "name": "m2-dir" + }, + "mounts": [ + { + "mountPath": "/home/jenkins/.m2/toolchains.xml", + "subPath": "toolchains.xml" + }, + { + "mountPath": "/home/jenkins/.mavenrc", + "subPath": ".mavenrc" + } + ], + "name": "m2-dir" + } + ], + "yamlMergeStrategy": "merge" + }, + "labels": [ + "ubuntu-2204" + ], + "maxHeap": "256m", + "mode": "EXCLUSIVE", + "name": "ubuntu-2204", + "remoting": { + "jar": "/usr/share/jenkins/agent.jar", + "startupScript": { + "name": "jenkins-agent", + "url": "https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent", + "version": "3206.vb_15dcf73f6a_9-12" + }, + "url": "https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar", + "version": "3206.3208.v409508a_675ff" + }, + "startupScript": "/usr/local/bin/jenkins-agent", + "username": "jenkins" + }, + "ubuntu-2404": { + "agentWorkdir": "/home/jenkins/jenkins-agent", + "docker": { + "aliases": [ + "docker.io/eclipsecbi/jiro-agent-ubuntu-2404:latest" + ], + "build_args": "['FROM_TAG': '24.04']", + "context": "ubuntu", + "dockerfile": "#*******************************************************************************\n# Copyright (c) 2020 Eclipse Foundation and others.\n# This program and the accompanying materials are made available\n# under the terms of the Eclipse Public License 2.0\n# which is available at http://www.eclipse.org/legal/epl-v20.html,\n# or the MIT License which is available at https://opensource.org/licenses/MIT.\n# SPDX-License-Identifier: EPL-2.0 OR MIT\n#*******************************************************************************\nFROM docker.io/eclipsecbi/jiro-agent-ubuntu-2404:spec\n\n# These environment variables will be used in the uid_entrypoint script from the parent image\nENV USER_NAME=\"jenkins\"\nENV HOME=\"/home/jenkins\"\n\nVOLUME [ \"/home/jenkins\", ]\nWORKDIR \"/home/jenkins\"\nENTRYPOINT [ \"/usr/local/bin/jenkins-agent\" ]\n\nADD \"https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar\" \"/usr/share/jenkins/agent.jar\"\nADD \"https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent\" \"/usr/local/bin/jenkins-agent\"\n\nRUN sed -e 's/JAVA_OPTS/JAVA_OPTS \\$JENKINS_REMOTING_JAVA_OPTS/g' /usr/local/bin/jenkins-agent > /usr/local/bin/jenkins-agent.sed \\\n && mv /usr/local/bin/jenkins-agent.sed /usr/local/bin/jenkins-agent\n\nRUN chmod 755 \"$(dirname \"/usr/share/jenkins/agent.jar\")\" \\\n && chmod 644 \"/usr/share/jenkins/agent.jar\" \\\n && chmod ug+rx \"/usr/local/bin/jenkins-agent\" \\\n && chgrp 0 \"/usr/local/bin/jenkins-agent\"\n\nUSER 10001:0\n", + "image": "jiro-agent-ubuntu-2404", + "registry": "docker.io", + "repository": "eclipsecbi", + "tag": "remoting-3206.3208.v409508a_675ff" + }, + "env": { + "JAVA_TOOL_OPTIONS": [ ], + "JENKINS_REMOTING_JAVA_OPTS": [ + "-showversion", + "-XshowSettings:vm", + "-Xmx256m", + "-Dorg.jenkinsci.remoting.engine.JnlpProtocol3.disabled=true", + "-Dorg.jenkinsci.plugins.gitclient.CliGitAPIImpl.useSETSID=true" + ], + "OPENJ9_JAVA_OPTIONS": [ + "-XX:+IgnoreUnrecognizedVMOptions", + "-XX:+IdleTuningCompactOnIdle", + "-XX:+IdleTuningGcOnIdle" + ], + "_JAVA_OPTIONS": [ ] + }, + "home": "/home/jenkins", + "kubernetes": { + "inheritYamlMergeStrategy": true, + "resources": { + "cpu": { + "limit": "2000m", + "request": "1000m" + }, + "memory": { + "limit": "4096Mi", + "request": "4096Mi" + } + }, + "volumes": [ + { + "mounts": [ + { + "mountPath": "/home/jenkins/.m2/settings-security.xml", + "subPath": "settings-security.xml" + }, + { + "mountPath": "/home/jenkins/.m2/settings.xml", + "subPath": "settings.xml" + } + ], + "name": "m2-secret-dir", + "secret": { + "name": "m2-secret-dir" + } + }, + { + "configMap": { + "name": "m2-dir" + }, + "mounts": [ + { + "mountPath": "/home/jenkins/.m2/toolchains.xml", + "subPath": "toolchains.xml" + }, + { + "mountPath": "/home/jenkins/.mavenrc", + "subPath": ".mavenrc" + } + ], + "name": "m2-dir" + } + ], + "yamlMergeStrategy": "merge" + }, + "labels": [ + "ubuntu-latest", + "ubuntu-2404" + ], + "maxHeap": "256m", + "mode": "EXCLUSIVE", + "name": "ubuntu-2404", + "remoting": { + "jar": "/usr/share/jenkins/agent.jar", + "startupScript": { + "name": "jenkins-agent", + "url": "https://github.com/jenkinsci/docker-agent/raw/3206.vb_15dcf73f6a_9-12/jenkins-agent", + "version": "3206.vb_15dcf73f6a_9-12" + }, + "url": "https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/3206.3208.v409508a_675ff/remoting-3206.3208.v409508a_675ff.jar", + "version": "3206.3208.v409508a_675ff" + }, + "startupScript": "/usr/local/bin/jenkins-agent", + "username": "jenkins" } } } @@ -701,6 +898,7 @@ }, "generate": false }, + "seLinuxLevel": "s0:c36,c20", "secrets": { "dockerconfigjson": { "dockerconfigjson-for-pull-as-default": { diff --git a/instances/ee4j/target/jenkins/configuration.yml b/instances/ee4j/target/jenkins/configuration.yml index 94c184df81..18406af15b 100644 --- a/instances/ee4j/target/jenkins/configuration.yml +++ b/instances/ee4j/target/jenkins/configuration.yml @@ -441,6 +441,188 @@ jenkins: name: m2-dir inheritYamlMergeStrategy: "true" yamlMergeStrategy: "merge" + - name: "ubuntu-2204" + namespace: "ee4j" + label: "ubuntu-2204" + containers: + - name: "jnlp" + image: docker.io/eclipsecbi/jiro-agent-ubuntu-2204:remoting-3206.3208.v409508a_675ff + alwaysPullImage: true + livenessProbe: + failureThreshold: 0 + initialDelaySeconds: 0 + periodSeconds: 0 + successThreshold: 0 + timeoutSeconds: 0 + ttyEnabled: true + command: "" + args: "" + instanceCap: -1 + nodeUsageMode: EXCLUSIVE + envVars: + - envVar: + key: "JAVA_TOOL_OPTIONS" + value: "" + - envVar: + key: "JENKINS_REMOTING_JAVA_OPTS" + value: "-showversion -XshowSettings:vm -Xmx256m -Dorg.jenkinsci.remoting.engine.JnlpProtocol3.disabled=true -Dorg.jenkinsci.plugins.gitclient.CliGitAPIImpl.useSETSID=true" + - envVar: + key: "OPENJ9_JAVA_OPTIONS" + value: "-XX:+IgnoreUnrecognizedVMOptions -XX:+IdleTuningCompactOnIdle -XX:+IdleTuningGcOnIdle" + - envVar: + key: "_JAVA_OPTIONS" + value: "" + volumes: + - persistentVolumeClaim: + claimName: "tools-claim-jiro-ee4j" + mountPath: "/opt/tools" + readOnly: true + - configMapVolume: + configMapName: "known-hosts" + mountPath: "/home/jenkins/.ssh/" + subPath: "." + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/repository" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/wrapper" + workspaceVolume: + emptyDirWorkspaceVolume: + memory: false + yaml: | + apiVersion: v1 + kind: Pod + spec: + containers: + - name: jnlp + resources: + limits: + cpu: "2000m" + memory: "4096Mi" + requests: + cpu: "1000m" + memory: "4096Mi" + volumeMounts: + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings-security.xml + subPath: settings-security.xml + readOnly: true + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings.xml + subPath: settings.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.m2/toolchains.xml + subPath: toolchains.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.mavenrc + subPath: .mavenrc + readOnly: true + volumes: + - name: m2-secret-dir + secret: + secretName: m2-secret-dir + - name: m2-dir + configMap: + name: m2-dir + inheritYamlMergeStrategy: "true" + yamlMergeStrategy: "merge" + - name: "ubuntu-2404" + namespace: "ee4j" + label: "ubuntu-latest ubuntu-2404" + containers: + - name: "jnlp" + image: docker.io/eclipsecbi/jiro-agent-ubuntu-2404:remoting-3206.3208.v409508a_675ff + alwaysPullImage: true + livenessProbe: + failureThreshold: 0 + initialDelaySeconds: 0 + periodSeconds: 0 + successThreshold: 0 + timeoutSeconds: 0 + ttyEnabled: true + command: "" + args: "" + instanceCap: -1 + nodeUsageMode: EXCLUSIVE + envVars: + - envVar: + key: "JAVA_TOOL_OPTIONS" + value: "" + - envVar: + key: "JENKINS_REMOTING_JAVA_OPTS" + value: "-showversion -XshowSettings:vm -Xmx256m -Dorg.jenkinsci.remoting.engine.JnlpProtocol3.disabled=true -Dorg.jenkinsci.plugins.gitclient.CliGitAPIImpl.useSETSID=true" + - envVar: + key: "OPENJ9_JAVA_OPTIONS" + value: "-XX:+IgnoreUnrecognizedVMOptions -XX:+IdleTuningCompactOnIdle -XX:+IdleTuningGcOnIdle" + - envVar: + key: "_JAVA_OPTIONS" + value: "" + volumes: + - persistentVolumeClaim: + claimName: "tools-claim-jiro-ee4j" + mountPath: "/opt/tools" + readOnly: true + - configMapVolume: + configMapName: "known-hosts" + mountPath: "/home/jenkins/.ssh/" + subPath: "." + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/repository" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/wrapper" + workspaceVolume: + emptyDirWorkspaceVolume: + memory: false + yaml: | + apiVersion: v1 + kind: Pod + spec: + containers: + - name: jnlp + resources: + limits: + cpu: "2000m" + memory: "4096Mi" + requests: + cpu: "1000m" + memory: "4096Mi" + volumeMounts: + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings-security.xml + subPath: settings-security.xml + readOnly: true + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings.xml + subPath: settings.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.m2/toolchains.xml + subPath: toolchains.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.mavenrc + subPath: .mavenrc + readOnly: true + volumes: + - name: m2-secret-dir + secret: + secretName: m2-secret-dir + - name: m2-dir + configMap: + name: m2-dir + inheritYamlMergeStrategy: "true" + yamlMergeStrategy: "merge" security: apiToken: creationOfLegacyTokenEnabled: false @@ -535,6 +717,8 @@ tool: home: "/opt/tools/java/openjdk/latest" - name: "openjdk-ea-latest" home: "/opt/tools/java/openjdk/ea-latest" + - name: "openjdk-jdk24-latest" + home: "/opt/tools/java/openjdk/jdk-24/latest" - name: "openjdk-jdk23-latest" home: "/opt/tools/java/openjdk/jdk-23/latest" - name: "openjdk-jdk22-latest" @@ -664,6 +848,8 @@ tool: installations: - name: "apache-maven-latest" home: "/opt/tools/apache-maven/latest" + - name: "apache-maven-3.9.9" + home: "/opt/tools/apache-maven/3.9.9" - name: "apache-maven-3.9.6" home: "/opt/tools/apache-maven/3.9.6" - name: "apache-maven-3.9.5" diff --git a/instances/ee4j/target/k8s/configmap-jenkins-config.yml b/instances/ee4j/target/k8s/configmap-jenkins-config.yml index 868e289ef5..8ea7230c00 100644 --- a/instances/ee4j/target/k8s/configmap-jenkins-config.yml +++ b/instances/ee4j/target/k8s/configmap-jenkins-config.yml @@ -464,6 +464,188 @@ data: name: m2-dir inheritYamlMergeStrategy: "true" yamlMergeStrategy: "merge" + - name: "ubuntu-2204" + namespace: "ee4j" + label: "ubuntu-2204" + containers: + - name: "jnlp" + image: docker.io/eclipsecbi/jiro-agent-ubuntu-2204:remoting-3206.3208.v409508a_675ff + alwaysPullImage: true + livenessProbe: + failureThreshold: 0 + initialDelaySeconds: 0 + periodSeconds: 0 + successThreshold: 0 + timeoutSeconds: 0 + ttyEnabled: true + command: "" + args: "" + instanceCap: -1 + nodeUsageMode: EXCLUSIVE + envVars: + - envVar: + key: "JAVA_TOOL_OPTIONS" + value: "" + - envVar: + key: "JENKINS_REMOTING_JAVA_OPTS" + value: "-showversion -XshowSettings:vm -Xmx256m -Dorg.jenkinsci.remoting.engine.JnlpProtocol3.disabled=true -Dorg.jenkinsci.plugins.gitclient.CliGitAPIImpl.useSETSID=true" + - envVar: + key: "OPENJ9_JAVA_OPTIONS" + value: "-XX:+IgnoreUnrecognizedVMOptions -XX:+IdleTuningCompactOnIdle -XX:+IdleTuningGcOnIdle" + - envVar: + key: "_JAVA_OPTIONS" + value: "" + volumes: + - persistentVolumeClaim: + claimName: "tools-claim-jiro-ee4j" + mountPath: "/opt/tools" + readOnly: true + - configMapVolume: + configMapName: "known-hosts" + mountPath: "/home/jenkins/.ssh/" + subPath: "." + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/repository" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/wrapper" + workspaceVolume: + emptyDirWorkspaceVolume: + memory: false + yaml: | + apiVersion: v1 + kind: Pod + spec: + containers: + - name: jnlp + resources: + limits: + cpu: "2000m" + memory: "4096Mi" + requests: + cpu: "1000m" + memory: "4096Mi" + volumeMounts: + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings-security.xml + subPath: settings-security.xml + readOnly: true + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings.xml + subPath: settings.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.m2/toolchains.xml + subPath: toolchains.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.mavenrc + subPath: .mavenrc + readOnly: true + volumes: + - name: m2-secret-dir + secret: + secretName: m2-secret-dir + - name: m2-dir + configMap: + name: m2-dir + inheritYamlMergeStrategy: "true" + yamlMergeStrategy: "merge" + - name: "ubuntu-2404" + namespace: "ee4j" + label: "ubuntu-latest ubuntu-2404" + containers: + - name: "jnlp" + image: docker.io/eclipsecbi/jiro-agent-ubuntu-2404:remoting-3206.3208.v409508a_675ff + alwaysPullImage: true + livenessProbe: + failureThreshold: 0 + initialDelaySeconds: 0 + periodSeconds: 0 + successThreshold: 0 + timeoutSeconds: 0 + ttyEnabled: true + command: "" + args: "" + instanceCap: -1 + nodeUsageMode: EXCLUSIVE + envVars: + - envVar: + key: "JAVA_TOOL_OPTIONS" + value: "" + - envVar: + key: "JENKINS_REMOTING_JAVA_OPTS" + value: "-showversion -XshowSettings:vm -Xmx256m -Dorg.jenkinsci.remoting.engine.JnlpProtocol3.disabled=true -Dorg.jenkinsci.plugins.gitclient.CliGitAPIImpl.useSETSID=true" + - envVar: + key: "OPENJ9_JAVA_OPTIONS" + value: "-XX:+IgnoreUnrecognizedVMOptions -XX:+IdleTuningCompactOnIdle -XX:+IdleTuningGcOnIdle" + - envVar: + key: "_JAVA_OPTIONS" + value: "" + volumes: + - persistentVolumeClaim: + claimName: "tools-claim-jiro-ee4j" + mountPath: "/opt/tools" + readOnly: true + - configMapVolume: + configMapName: "known-hosts" + mountPath: "/home/jenkins/.ssh/" + subPath: "." + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/repository" + - emptyDirVolume: + memory: false + mountPath: "/home/jenkins/.m2/wrapper" + workspaceVolume: + emptyDirWorkspaceVolume: + memory: false + yaml: | + apiVersion: v1 + kind: Pod + spec: + containers: + - name: jnlp + resources: + limits: + cpu: "2000m" + memory: "4096Mi" + requests: + cpu: "1000m" + memory: "4096Mi" + volumeMounts: + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings-security.xml + subPath: settings-security.xml + readOnly: true + - name: m2-secret-dir + mountPath: /home/jenkins/.m2/settings.xml + subPath: settings.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.m2/toolchains.xml + subPath: toolchains.xml + readOnly: true + - name: m2-dir + mountPath: /home/jenkins/.mavenrc + subPath: .mavenrc + readOnly: true + volumes: + - name: m2-secret-dir + secret: + secretName: m2-secret-dir + - name: m2-dir + configMap: + name: m2-dir + inheritYamlMergeStrategy: "true" + yamlMergeStrategy: "merge" security: apiToken: creationOfLegacyTokenEnabled: false @@ -558,6 +740,8 @@ data: home: "/opt/tools/java/openjdk/latest" - name: "openjdk-ea-latest" home: "/opt/tools/java/openjdk/ea-latest" + - name: "openjdk-jdk24-latest" + home: "/opt/tools/java/openjdk/jdk-24/latest" - name: "openjdk-jdk23-latest" home: "/opt/tools/java/openjdk/jdk-23/latest" - name: "openjdk-jdk22-latest" @@ -687,6 +871,8 @@ data: installations: - name: "apache-maven-latest" home: "/opt/tools/apache-maven/latest" + - name: "apache-maven-3.9.9" + home: "/opt/tools/apache-maven/3.9.9" - name: "apache-maven-3.9.6" home: "/opt/tools/apache-maven/3.9.6" - name: "apache-maven-3.9.5" diff --git a/instances/ee4j/target/k8s/m2-dir.json b/instances/ee4j/target/k8s/m2-dir.json index 581d44f59b..fbdf1db4ee 100644 --- a/instances/ee4j/target/k8s/m2-dir.json +++ b/instances/ee4j/target/k8s/m2-dir.json @@ -2,7 +2,7 @@ "apiVersion": "v1", "data": { ".mavenrc": "set -- -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn --batch-mode \"${@}\"", - "toolchains.xml": "\n\n \n jdk\n \n JavaSE-1.8\n 1.8\n oracle\n \n /opt/tools/java/oracle/jdk-8/latest\n \n \n jdk\n \n JavaSE-9\n 9\n openjdk\n \n /opt/tools/java/openjdk/jdk-9/latest\n \n \n jdk\n \n JavaSE-10\n 10\n openjdk\n \n /opt/tools/java/openjdk/jdk-10/latest\n \n \n jdk\n \n JavaSE-11\n 11\n openjdk\n \n /opt/tools/java/openjdk/jdk-11/latest\n \n \n jdk\n \n JavaSE-12\n 12\n openjdk\n \n /opt/tools/java/openjdk/jdk-12/latest\n \n \n jdk\n \n JavaSE-13\n 13\n openjdk\n \n /opt/tools/java/openjdk/jdk-13/latest\n \n \n jdk\n \n JavaSE-14\n 14\n openjdk\n \n /opt/tools/java/openjdk/jdk-14/latest\n \n \n jdk\n \n JavaSE-15\n 15\n openjdk\n \n /opt/tools/java/openjdk/jdk-15/latest\n \n \n jdk\n \n JavaSE-16\n 16\n openjdk\n \n /opt/tools/java/openjdk/jdk-16/latest\n \n \n jdk\n \n JavaSE-17\n 17\n openjdk\n \n /opt/tools/java/openjdk/jdk-17/latest\n \n \n jdk\n \n JavaSE-18\n 18\n openjdk\n \n /opt/tools/java/openjdk/jdk-18/latest\n \n \n jdk\n \n JavaSE-19\n 19\n openjdk\n \n /opt/tools/java/openjdk/jdk-19/latest\n \n \n jdk\n \n JavaSE-20\n 20\n openjdk\n \n /opt/tools/java/openjdk/jdk-20/latest\n \n \n jdk\n \n JavaSE-21\n 21\n openjdk\n \n /opt/tools/java/openjdk/jdk-21/latest\n \n \n jdk\n \n JavaSE-22\n 22\n openjdk\n \n /opt/tools/java/openjdk/jdk-22/latest\n \n \n jdk\n \n JavaSE-23\n 23\n openjdk\n \n /opt/tools/java/openjdk/jdk-23/latest\n \n\n" + "toolchains.xml": "\n\n \n jdk\n \n JavaSE-1.8\n 1.8\n oracle\n \n /opt/tools/java/oracle/jdk-8/latest\n \n \n jdk\n \n JavaSE-9\n 9\n openjdk\n \n /opt/tools/java/openjdk/jdk-9/latest\n \n \n jdk\n \n JavaSE-10\n 10\n openjdk\n \n /opt/tools/java/openjdk/jdk-10/latest\n \n \n jdk\n \n JavaSE-11\n 11\n openjdk\n \n /opt/tools/java/openjdk/jdk-11/latest\n \n \n jdk\n \n JavaSE-12\n 12\n openjdk\n \n /opt/tools/java/openjdk/jdk-12/latest\n \n \n jdk\n \n JavaSE-13\n 13\n openjdk\n \n /opt/tools/java/openjdk/jdk-13/latest\n \n \n jdk\n \n JavaSE-14\n 14\n openjdk\n \n /opt/tools/java/openjdk/jdk-14/latest\n \n \n jdk\n \n JavaSE-15\n 15\n openjdk\n \n /opt/tools/java/openjdk/jdk-15/latest\n \n \n jdk\n \n JavaSE-16\n 16\n openjdk\n \n /opt/tools/java/openjdk/jdk-16/latest\n \n \n jdk\n \n JavaSE-17\n 17\n openjdk\n \n /opt/tools/java/openjdk/jdk-17/latest\n \n \n jdk\n \n JavaSE-18\n 18\n openjdk\n \n /opt/tools/java/openjdk/jdk-18/latest\n \n \n jdk\n \n JavaSE-19\n 19\n openjdk\n \n /opt/tools/java/openjdk/jdk-19/latest\n \n \n jdk\n \n JavaSE-20\n 20\n openjdk\n \n /opt/tools/java/openjdk/jdk-20/latest\n \n \n jdk\n \n JavaSE-21\n 21\n openjdk\n \n /opt/tools/java/openjdk/jdk-21/latest\n \n \n jdk\n \n JavaSE-22\n 22\n openjdk\n \n /opt/tools/java/openjdk/jdk-22/latest\n \n \n jdk\n \n JavaSE-23\n 23\n openjdk\n \n /opt/tools/java/openjdk/jdk-23/latest\n \n \n jdk\n \n JavaSE-24\n 24\n openjdk\n \n /opt/tools/java/openjdk/jdk-24/latest\n \n\n" }, "kind": "ConfigMap", "metadata": { diff --git a/instances/ee4j/target/k8s/statefulset.json b/instances/ee4j/target/k8s/statefulset.json index 32203d2aa4..08bfa0a7fa 100644 --- a/instances/ee4j/target/k8s/statefulset.json +++ b/instances/ee4j/target/k8s/statefulset.json @@ -119,6 +119,12 @@ "cpu": "250m" } }, + "securityContext": { + "seLinuxOptions": { + "level": "s0:c36,c20", + "type": "spc_t" + } + }, "volumeMounts": [ { "mountPath": "/var/jenkins",