From 46ae864209ca7de62689f8ee4a8d53e129013bb1 Mon Sep 17 00:00:00 2001
From: jenkins <brad@bstein.dev>
Date: Sun, 8 Nov 2026 15:36:10 -0600
Subject: [PATCH] jenkins: reserve one bounded Lesavka worker allocation

---
 services/jenkins/configmap-jcasc.yaml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/services/jenkins/configmap-jcasc.yaml b/services/jenkins/configmap-jcasc.yaml
index 9b4ff8f8..e93f0743 100644
--- a/services/jenkins/configmap-jcasc.yaml
+++ b/services/jenkins/configmap-jcasc.yaml
@@ -827,6 +827,25 @@ data:
               - key: "GIT_CONFIG_VALUE_0"
                 value: "*"
       clouds:
+      - kubernetes:
+          # One bounded Lesavka worker must not wait behind unrelated stale jobs.
+          name: "lesavka"
+          containerCapStr: "1"
+          connectTimeout: "20"
+          readTimeout: "90"
+          jenkinsUrl: "http://jenkins.jenkins.svc.cluster.local:8080"
+          jenkinsTunnel: "jenkins.jenkins.svc.cluster.local:50000"
+          skipTlsVerify: false
+          maxRequestsPerHostStr: "8"
+          retentionTimeout: "5"
+          waitForPodSec: "300"
+          namespace: "jenkins"
+          restrictedPssSecurityContext: false
+          serverUrl: "https://kubernetes.default"
+          credentialsId: ""
+          podLabels:
+          - key: "jenkins/lesavka-agent"
+            value: "true"
       - kubernetes:
           # Stabilization: one build at a time leaves headroom for live services.
           containerCapStr: "1"