From 369e738cf32e07c5bc98a9e0a60402224c36a0f6 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sun, 12 Apr 2026 05:47:06 -0300
Subject: [PATCH] jenkins: run default jnlp agent as root and fix default label

---
 services/jenkins/configmap-jcasc.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/services/jenkins/configmap-jcasc.yaml b/services/jenkins/configmap-jcasc.yaml
index 6a775c03..a839feca 100644
--- a/services/jenkins/configmap-jcasc.yaml
+++ b/services/jenkins/configmap-jcasc.yaml
@@ -412,6 +412,8 @@ data:
                       value: "http://jenkins.jenkins.svc.cluster.local:8080/"
                 image: "jenkins/inbound-agent:3355.v388858a_47b_33-3"
                 privileged: "false"
+                runAsUser: "0"
+                runAsGroup: "0"
                 resourceLimitCpu: 512m
                 resourceLimitMemory: 512Mi
                 resourceRequestCpu: 512m
@@ -420,7 +422,7 @@ data:
                 workingDir: /home/jenkins/agent
               idleMinutes: 0
               instanceCap: 2147483647
-              label: "jenkins-jenkins-agent "
+              label: "jenkins-jenkins-agent"
               nodeUsageMode: "NORMAL"
               podRetention: Never
               serviceAccount: "jenkins"