From 4e1c4e7cee47ca010881da42f5b2f9a1564dae01 Mon Sep 17 00:00:00 2001
From: archit-org <iarc13@workshop.cb-sa.io>
Date: Thu, 28 Jul 2022 07:49:02 +0000
Subject: [PATCH] adding controller.yaml for provisioning lab

---
 bundle/bundle.yaml |  6 ++++
 controller.yaml    | 71 ++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 77 insertions(+)
 create mode 100644 bundle/bundle.yaml
 create mode 100644 controller.yaml

diff --git a/bundle/bundle.yaml b/bundle/bundle.yaml
new file mode 100644
index 0000000..c178b91
--- /dev/null
+++ b/bundle/bundle.yaml
@@ -0,0 +1,6 @@
+apiVersion: "1"
+version: "1"
+id: "archit-org-dev-controller"
+description: "CloudBees CI configuration bundle for the archit-org dev-controller Controller"
+availabilityPattern: "cloudbees-ci-casc-workshop/archit-org/dev-controller"
+parent: "base"
diff --git a/controller.yaml b/controller.yaml
new file mode 100644
index 0000000..115149b
--- /dev/null
+++ b/controller.yaml
@@ -0,0 +1,71 @@
+removeStrategy:
+  rbac: SYNC
+  items: NONE
+items:
+- kind: folder
+  name: archit-org
+  groups:
+  - members:
+      users:
+      - iarc13
+      - iarc13-admin
+    roles:
+    - name: browse
+      grantedAt: current
+    - name: workshop-admin
+      grantedAt: child
+    name: Team Administrators
+  filteredRoles:
+  - workshop-admin
+  - browse
+  items:
+  - kind: managedController
+    name: dev-controller
+    properties:
+    - healthReporting:
+        enabled: true
+    - configurationAsCode:
+        bundle: archit-org-dev-controller
+    - optOutProperty:
+        securityEnforcerOptOutMode:
+          authorizationOptOutMode: {
+            }
+    configuration:
+      kubernetes:
+        memory: 4000
+        cpus: 1.0
+        clusterEndpointId: default
+        disk: 10
+        storageClassName: premium-rwo
+        domain: archit-org-dev-controller
+        namespace: controllers
+        yaml: |
+          kind: "StatefulSet"
+          spec:
+            template:
+              metadata:
+                labels:
+                  networking/allow-internet-access: "true"
+              spec:
+                containers:
+                - name: "jenkins"
+                  env:
+                  - name: "SECRETS"
+                    value: "/var/jenkins_home/jcasc_secrets"
+                  - name: "GITHUB_ORGANIZATION"
+                    value: "archit-org"
+                  - name: "GITHUB_USER"
+                    value: "iarc13"
+                  - name: "GITHUB_APP"
+                    value: "cloudbees-ci-casc-workshop"
+                  - name: "CONTROLLER_SUBDOMAIN"
+                    value: "archit-org-dev-controller"
+                  - name: "CASC_BUNDLE_ID"
+                    value: "archit-org-dev-controller"
+                  volumeMounts:
+                  - name: "jcasc-secrets"
+                    mountPath: "/var/jenkins_home/jcasc_secrets"
+                volumes:
+                - name: "jcasc-secrets"
+                  secret:
+                    secretName: cbci-mc-secret