From 1f98a5be129f699e7a97a80e786c39313560f752 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Wed, 17 Dec 2025 00:37:37 -0300
Subject: [PATCH] jenkins: clean stale JCasC files on startup

---
 services/jenkins/helmrelease.yaml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/services/jenkins/helmrelease.yaml b/services/jenkins/helmrelease.yaml
index 5bb9255..75fb8b6 100644
--- a/services/jenkins/helmrelease.yaml
+++ b/services/jenkins/helmrelease.yaml
@@ -79,6 +79,21 @@ spec:
             secretKeyRef:
               name: jenkins-oidc
               key: logoutUrl
+      customInitContainers:
+        - name: clean-jcasc-stale
+          image: alpine:3.20
+          imagePullPolicy: IfNotPresent
+          command:
+            - sh
+            - -c
+            - |
+              set -euo pipefail
+              rm -f /var/jenkins_home/casc_configs/*.yaml || true
+          securityContext:
+            runAsUser: 0
+          volumeMounts:
+            - name: jenkins-home
+              mountPath: /var/jenkins_home
       initScripts:
         oidc.groovy: |
           import hudson.util.Secret