diff --git a/Jenkinsfile b/Jenkinsfile index 303bfd37..cfeb1d4c 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -7,6 +7,7 @@ pipeline { apiVersion: v1 kind: Pod spec: + serviceAccountName: "jenkins" nodeSelector: hardware: rpi5 kubernetes.io/arch: arm64 @@ -25,6 +26,7 @@ spec: PYTHONUNBUFFERED = '1' SUITE_NAME = 'titan-iac' PUSHGATEWAY_URL = 'http://platform-quality-gateway.monitoring.svc.cluster.local:9091' + VM_URL = 'http://victoria-metrics-single-server.monitoring.svc.cluster.local:8428' } stages { stage('Checkout') { diff --git a/ci/Jenkinsfile.titan-iac b/ci/Jenkinsfile.titan-iac index 0d494c18..aaf4ce5b 100644 --- a/ci/Jenkinsfile.titan-iac +++ b/ci/Jenkinsfile.titan-iac @@ -6,6 +6,7 @@ pipeline { apiVersion: v1 kind: Pod spec: + serviceAccountName: "jenkins" nodeSelector: hardware: rpi5 kubernetes.io/arch: arm64 @@ -24,6 +25,7 @@ spec: PYTHONUNBUFFERED = '1' SUITE_NAME = 'titan-iac' PUSHGATEWAY_URL = 'http://platform-quality-gateway.monitoring.svc.cluster.local:9091' + VM_URL = 'http://victoria-metrics-single-server.monitoring.svc.cluster.local:8428' } stages { stage('Checkout') { diff --git a/services/jenkins/serviceaccount.yaml b/services/jenkins/serviceaccount.yaml index 27caeedc..f20356b5 100644 --- a/services/jenkins/serviceaccount.yaml +++ b/services/jenkins/serviceaccount.yaml @@ -39,3 +39,28 @@ roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: jenkins-agent + +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: jenkins-glue-observer +rules: + - apiGroups: ["batch"] + resources: + - cronjobs + verbs: ["get", "list", "watch"] + +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: jenkins-glue-observer +subjects: + - kind: ServiceAccount + name: jenkins + namespace: jenkins +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: jenkins-glue-observer