From 30048a9ae5d20a31b25baa888bcfc7fb3158c4db Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Wed, 17 Dec 2025 00:28:52 -0300
Subject: [PATCH] jenkins: drop invalid JCasC OIDC realm (use init script)

---
 services/jenkins/helmrelease.yaml | 18 ------------------
 1 file changed, 18 deletions(-)

diff --git a/services/jenkins/helmrelease.yaml b/services/jenkins/helmrelease.yaml
index 451d0bc..5bb9255 100644
--- a/services/jenkins/helmrelease.yaml
+++ b/services/jenkins/helmrelease.yaml
@@ -130,24 +130,6 @@ spec:
           }
       JCasC:
         configScripts:
-          security.yaml: |
-            jenkins:
-              securityRealm:
-                oic:
-                  clientId: "${OIDC_CLIENT_ID}"
-                  clientSecret: "${OIDC_CLIENT_SECRET}"
-                  wellKnownOpenIDConfigurationUrl: "${OIDC_ISSUER}/.well-known/openid-configuration"
-                  logoutFromOpenidProvider: true
-                  postLogoutRedirectUrl: "https://ci.bstein.dev"
-                  scopes: "openid profile email"
-                  userNameField: "preferred_username"
-                  fullNameFieldName: "name"
-                  emailFieldName: "email"
-                  groupsFieldName: "groups"
-                  disableSslVerification: false
-              authorizationStrategy:
-                fullControlOnceLoggedIn:
-                  allowAnonymousRead: false
           creds.yaml: |
             credentials:
               system: