Folder RBAC

bundle/bundle.yaml

@@ -1,8 +1,10 @@
 apiVersion: "1"
-version: "2"
+version: "3"
 id: "cloudbeed-CI-dev-controller"
 description: "CloudBees CI configuration bundle for the cloudbeed-CI dev-controller Controller"
 availabilityPattern: "cloudbees-ci-casc-workshop/cloudbeed-ci/dev-controller"
 parent: "base"
 rbac:
   - "rbac.yaml"
+items:
+  - "folder.yaml"

bundle/folder.yaml

@@ -0,0 +1,16 @@
+removeStrategy:
+ items: "none"
+ rbac: "sync"
+items:
+ - kind: "folder"
+   name: "controller-jobs"
+   description: "Base controller folder for all jobs."
+   groups:
+     - name: "Job Managers"
+       members:
+         internal_groups:
+         - Managers
+       roles:
+         - name: "job-manager"
+           grantedAt: "current"
+           propagates: "true"

bundle/rbac.yaml

@@ -20,6 +20,13 @@ roles:
   - com.cloudbees.jenkins.plugin.metrics.views.Alerter.View
   - nectar.plugins.rbac.groups.Group.View
   - nectar.plugins.rbac.roles.Role.View
+- name: job-manager
+  filterable: 'true'
+  permissions:
+  - hudson.model.Item.Read
+  - hudson.model.Item.Create
+  - hudson.model.Item.Configure
+  - hudson.model.Item.Build
 groups:
 - name: Administrators
   members: