From 126e77b39c7daf0a4c38500a3982b72ca301d186 Mon Sep 17 00:00:00 2001
From: cbcauthen-casc-workshop-dev <CBCauthen@workshop.cb-sa.io>
Date: Wed, 4 Sep 2024 18:23:59 +0000
Subject: [PATCH] adding folder rbac updates for folder rbac lab

---
 bundle/bundle.yaml |  4 +++-
 bundle/folder.yaml | 16 ++++++++++++++++
 bundle/rbac.yaml   |  7 +++++++
 3 files changed, 26 insertions(+), 1 deletion(-)
 create mode 100644 bundle/folder.yaml

diff --git a/bundle/bundle.yaml b/bundle/bundle.yaml
index 1d19fd6..ebabbd0 100644
--- a/bundle/bundle.yaml
+++ b/bundle/bundle.yaml
@@ -1,8 +1,10 @@
 apiVersion: "1"
-version: "2"
+version: "3"
 id: "cbcauthen-casc-workshop-dev-dev-controller"
 description: "CloudBees CI configuration bundle for the cbcauthen-casc-workshop-dev dev-controller Controller"
 availabilityPattern: "cloudbees-ci-casc-workshop/cbcauthen-casc-workshop-dev/dev-controller"
 parent: "base"
 rbac:
   - "rbac.yaml"
+items:
+  - "folder.yaml"
diff --git a/bundle/folder.yaml b/bundle/folder.yaml
new file mode 100644
index 0000000..9c0afb4
--- /dev/null
+++ b/bundle/folder.yaml
@@ -0,0 +1,16 @@
+removeStrategy:
+ items: "none"
+ rbac: "sync"
+items:
+ - kind: "folder"
+   name: "controller-jobs"
+   description: "Base controller folder for all jobs."
+   groups:
+     - name: "job-managers"
+       members:
+         internal_groups:
+         - controller-managers
+       roles:
+         - name: "job-manager"
+           grantedAt: "current"
+           propagates: "true"
diff --git a/bundle/rbac.yaml b/bundle/rbac.yaml
index ed17bb5..ae27635 100644
--- a/bundle/rbac.yaml
+++ b/bundle/rbac.yaml
@@ -20,6 +20,13 @@ roles:
   - com.cloudbees.jenkins.plugin.metrics.views.Alerter.View
   - nectar.plugins.rbac.groups.Group.View
   - nectar.plugins.rbac.roles.Role.View
+- name: job-manager
+  filterable: 'true'
+  permissions:
+  - hudson.model.Item.Read
+  - hudson.model.Item.Create
+  - hudson.model.Item.Configure
+  - hudson.model.Item.Build
 groups:
 - name: controller-admins
   members: