From b8f2d00547fd97b3c752bb61726c4c3ccdf9463b Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Tue, 20 Jan 2026 09:37:21 -0300
Subject: [PATCH] jenkins: pin root url for OIDC

---
 services/jenkins/configmap-jcasc.yaml | 5 ++++-
 services/jenkins/deployment.yaml      | 2 +-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/services/jenkins/configmap-jcasc.yaml b/services/jenkins/configmap-jcasc.yaml
index 78d98fe..d4a29f1 100644
--- a/services/jenkins/configmap-jcasc.yaml
+++ b/services/jenkins/configmap-jcasc.yaml
@@ -18,7 +18,7 @@ data:
           logoutFromOpenIdProvider: true
           postLogoutRedirectUrl: "https://ci.bstein.dev"
           sendScopesInTokenRequest: true
-          rootURLFromRequest: true
+          rootURLFromRequest: false
           userNameField: "preferred_username"
           fullNameFieldName: "name"
           emailFieldName: "email"
@@ -245,3 +245,6 @@ data:
       crumbIssuer:
         standard:
           excludeClientIPFromCrumb: true
+    unclassified:
+      location:
+        url: "https://ci.bstein.dev/"
diff --git a/services/jenkins/deployment.yaml b/services/jenkins/deployment.yaml
index dfbe5fe..fdb8d10 100644
--- a/services/jenkins/deployment.yaml
+++ b/services/jenkins/deployment.yaml
@@ -38,7 +38,7 @@ spec:
           GITEA_PAT_USERNAME={{ .Data.data.username }}
           GITEA_PAT_TOKEN={{ .Data.data.token }}
           {{- end -}}
-        bstein.dev/restarted-at: "2026-01-20T04:14:13Z"
+        bstein.dev/restarted-at: "2026-01-20T05:05:00Z"
     spec:
       serviceAccountName: jenkins
       nodeSelector: