infra
/
kubernetes
1
0
Fork 0
Code Pull Requests 4 Activity
kubernetes/jenkins
History
Dustin b8ccbd0b09 jenkins: Avoid SELinux relabel of data dir 
Setting a static SELinux level for the container allows CRI-O to skip
relabeling all the files in the persistent volume each time the
container starts.  For this to work, the pod needs a special annotation,
and CRI-O itself has to be configured to respect it:

```toml
[crio.runtime.runtimes.runc]
allowed_annotations = ["io.kubernetes.cri-o.TrySkipVolumeSELinuxLabel"]
```

This *dramatically* improves the start time of the Jenkins container.
Instead of taking 5+ minutes, it now starts instantly.

https://github.com/cri-o/cri-o/issues/6185#issuecomment-1334719982
 		2022-12-01 21:35:02 -06:00
..
README.md jenkins: Run Jenkins in Kubernetes 2022-11-25 13:38:10 -06:00
jenkins.yaml jenkins: Avoid SELinux relabel of data dir 2022-12-01 21:35:02 -06:00
kustomization.yaml jenkins: Run Jenkins in Kubernetes 2022-11-25 13:38:10 -06:00

README.md

Jenkins in Kubernetes

Kubernetes Setup

Configure Jenkins resources:

ln imagepull-gitea jenkins/.dockerconfigjson
kubectl apply -k jenkins

Jenkins Setup

Install Kubernetes plugin.

Set TCP port for inbound agents setting (Manage Jenkins → Configure Global Security) to Fixed and enter 40414.

Configure Kubernetes (Manage Jenkins → Manage Nodes and Clouds → Configure Clouds:

  1. Add a new cloud → Kubernetes
  2. Enter a name
  3. Kubernetes Cloud details...
    • Kubernetes URL: (leave blank; will use Kubernetes service discovery)
    • Kubernetes Namespace: jenkins-jobs
    • Credentials: - none - (will use Service Account token)
    • Jenkins tunnel: jenkins.jenkins.svc.cluster.local: (trailing colon!)