controller.yaml

removeStrategy:
  rbac: SYNC
  items: NONE
items:
- kind: folder
  name: rkiss-jcasc
  groups:
  - members:
      users:
      - rkiss
      - rkiss-admin
    roles:
    - name: browse
      grantedAt: current
    - name: workshop-admin
      grantedAt: child
    name: Team Administrators
  filteredRoles:
  - workshop-admin
  - browse
  items:
  - kind: managedController
    name: ops-controller
    properties:
    - healthReporting:
        enabled: true
    - configurationAsCode:
        bundle: rkiss-jcasc-ops-controller
    configuration:
      kubernetes:
        memory: 4000
        cpus: 1.0
        clusterEndpointId: default
        disk: 10
        storageClassName: premium-rwo
        domain: rkiss-jcasc-ops-controller
        namespace: controllers
        yaml: |
          kind: "StatefulSet"
          spec:
            template:
              metadata:
                labels:
                  networking/allow-internet-access: "true"
              spec:
                containers:
                - name: "jenkins"
                  env:
                  - name: "SECRETS"
                    value: "/var/jenkins_home/jcasc_secrets"
                  - name: "GITHUB_ORGANIZATION"
                    value: "rkiss-jcasc"
                  - name: "GITHUB_USER"
                    value: "rkiss"
                  - name: "GITHUB_APP"
                    value: "cloudbees-ci-casc-workshop"
                  - name: "CONTROLLER_SUBDOMAIN"
                    value: "rkiss-jcasc-ops-controller"
                  - name: "CASC_BUNDLE_ID"
                    value: "rkiss-jcasc-ops-controller"
                  volumeMounts:
                  - name: "jcasc-secrets"
                    mountPath: "/var/jenkins_home/jcasc_secrets"
                volumes:
                - name: "jcasc-secrets"
                  secret:
                    secretName: cbci-mc-secret