dev-intel-v2/foxtrot-docs-v3/reference/helm/charts/app-common-charts-jenkins.md

jenkins

Jenkins - Build great things at any scale! As the leading open source automation server, Jenkins provides over 2000 plugins to support building, deploying and automating any project.

Homepage: https://www.jenkins.io/

Maintainers

Name	Email	Url
maorfr	maor.friedman@redhat.com
torstenwalter	mail@torstenwalter.de
mogaal	garridomota@gmail.com
wmcdona89	wmcdona89@gmail.com
timja	timjacomb1@gmail.com

Source Code

• https://github.com/jenkinsci/jenkins
• https://github.com/jenkinsci/docker-inbound-agent
• https://github.com/maorfr/kube-tasks
• https://github.com/jenkinsci/configuration-as-code-plugin

Values

Key	Type	Default	Description
additionalAgents	object	{}	Configure additional
additionalClouds	object	{}
agent.TTYEnabled	bool	false	Allocate pseudo tty to the side container
agent.additionalContainers	list	[]	Add additional containers to the agents
agent.alwaysPullImage	bool	false	Always pull agent container image before build
agent.annotations	object	{}	Annotations to apply to the pod
agent.args	string	"${computer.jnlpmac} ${computer.name}"	Arguments passed to command to execute
agent.command	string	nil	Command to execute when side container starts
agent.componentName	string	"jenkins-agent"
agent.connectTimeout	int	100	Timeout in seconds for an agent to be online
agent.containerCap	int	10	Max number of agents to launch for a whole cluster.
agent.customJenkinsLabels	list	[]	Append Jenkins labels to the agent
agent.defaultsProviderTemplate	string	""	The name of the pod template to use for providing default values
agent.directConnection	bool	false
agent.disableDefaultAgent	bool	false	Disable the default Jenkins Agent configuration
agent.enabled	bool	true	Enable Kubernetes plugin jnlp-agent podTemplate
agent.envVars	list	[]	Environment variables for the agent Pod
agent.garbageCollection.enabled	bool	false	When enabled, Jenkins will periodically check for orphan pods that have not been touched for the given timeout period and delete them.
agent.garbageCollection.namespaces	string	""	Namespaces to look at for garbage collection, in addition to the default namespace defined for the cloud. One namespace per line.
agent.garbageCollection.timeout	int	300	Timeout value for orphaned pods
agent.hostNetworking	bool	false	Enables the agent to use the host network
agent.idleMinutes	int	0	Allows the Pod to remain active for reuse until the configured number of minutes has passed since the last step was executed on it
agent.image.repository	string	"gcr.io/customer-facing/jenkins/inbound-agent"	Repository to pull the agent jnlp image from
agent.image.tag	string	"3309.v27b_9314fd1a_4-1"	Tag of the image to pull
agent.imagePullSecretName	string	nil	Name of the secret to be used to pull the image
agent.inheritYamlMergeStrategy	bool	false	Controls whether the defined yaml merge strategy will be inherited if another defined pod template is configured to inherit from the current one
agent.instanceCap	int	2147483647	Max number of agents to launch for this type of agent
agent.jenkinsTunnel	string	nil	Overrides the Kubernetes Jenkins tunnel
agent.jenkinsUrl	string	nil	Overrides the Kubernetes Jenkins URL
agent.jnlpregistry	string	nil	Custom registry used to pull the agent jnlp image from
agent.kubernetesConnectTimeout	int	5	The connection timeout in seconds for connections to Kubernetes API. The minimum value is 5
agent.kubernetesReadTimeout	int	15	The read timeout in seconds for connections to Kubernetes API. The minimum value is 15
agent.livenessProbe	object	{}
agent.maxRequestsPerHostStr	string	"32"	The maximum concurrent connections to Kubernetes API
agent.namespace	string	nil	Namespace in which the Kubernetes agents should be launched
agent.nodeSelector	object	{}	Node labels for pod assignment
agent.nodeUsageMode	string	"NORMAL"
agent.podLabels	object	{}	Custom Pod labels (an object with label-key: label-value pairs)
agent.podName	string	"default"	Agent Pod base name
agent.podRetention	string	"Never"
agent.podTemplates	object	{}	Configures extra pod templates for the default kubernetes cloud
agent.privileged	bool	false	Agent privileged container
agent.resources	object	{"limits":{"cpu":"512m","memory":"512Mi"},"requests":{"cpu":"512m","memory":"512Mi"}}	Resources allocation (Requests and Limits)
agent.restrictedPssSecurityContext	bool	false	Set a restricted securityContext on jnlp containers
agent.retentionTimeout	int	5	Time in minutes after which the Kubernetes cloud plugin will clean up an idle worker that has not already terminated
agent.runAsGroup	string	nil	Configure container group
agent.runAsUser	string	nil	Configure container user
agent.secretEnvVars	list	[]	Mount a secret as environment variable
agent.serviceAccount	string	serviceAccountAgent.name if agent.useDefaultServiceAccount is true	Override the default service account
agent.showRawYaml	bool	true
agent.sideContainerName	string	"jnlp"	Side container name
agent.skipTlsVerify	bool	false	Disables the verification of the controller certificate on remote connection. This flag correspond to the "Disable https certificate check" flag in kubernetes plugin UI
agent.usageRestricted	bool	false	Enable the possibility to restrict the usage of this agent to specific folder. This flag correspond to the "Restrict pipeline support to authorized folders" flag in kubernetes plugin UI
agent.useDefaultServiceAccount	bool	true	Use serviceAccountAgent.name as the default value for defaults template serviceAccount
agent.volumes	list	[]	Additional volumes
agent.waitForPodSec	int	600	Seconds to wait for pod to be running
agent.websocket	bool	false	Enables agent communication via websockets
agent.workingDir	string	"/home/jenkins/agent"	Configure working directory for default agent
agent.workspaceVolume	object	{}	Workspace volume (defaults to EmptyDir)
agent.yamlMergeStrategy	string	"override"	Defines how the raw yaml field gets merged with yaml definitions from inherited pod templates. Possible values: "merge" or "override"
agent.yamlTemplate	string	""	The raw yaml of a Pod API Object to merge into the agent spec
awsSecurityGroupPolicies.enabled	bool	false
awsSecurityGroupPolicies.policies[0].name	string	""
awsSecurityGroupPolicies.policies[0].podSelector	object	{}
awsSecurityGroupPolicies.policies[0].securityGroupIds	list	[]
checkDeprecation	bool	true	Checks if any deprecated values are used
clusterZone	string	"cluster.local"	Override the cluster name for FQDN resolving
controller.JCasC.authorizationStrategy	string	"loggedInUsersCanDoAnything:\n allowAnonymousRead: false"	Jenkins Config as Code Authorization Strategy-section
controller.JCasC.configMapAnnotations	object	{}	Annotations for the JCasC ConfigMap
controller.JCasC.configScripts	object	{}	List of Jenkins Config as Code scripts
controller.JCasC.configUrls	list	[]	Remote URLs for configuration files.
controller.JCasC.defaultConfig	bool	true	Enables default Jenkins configuration via configuration as code plugin
controller.JCasC.overwriteConfiguration	bool	false	Whether Jenkins Config as Code should overwrite any existing configuration
controller.JCasC.security	object	{"apiToken":{"creationOfLegacyTokenEnabled":false,"tokenGenerationOnCreationEnabled":false,"usageStatisticsEnabled":true}}	Jenkins Config as Code security-section
controller.JCasC.securityRealm	string	"local:\n allowsSignup: false\n enableCaptcha: false\n users:\n - id: \"${chart-admin-username}\"\n name: \"Jenkins Admin\"\n password: \"${chart-admin-password}\""	Jenkins Config as Code Security Realm-section
controller.additionalExistingSecrets	list	[]	List of additional existing secrets to mount
controller.additionalPlugins	list	[]	List of plugins to install in addition to those listed in controller.installPlugins
controller.additionalSecrets	list	[]	List of additional secrets to create and mount
controller.admin.createSecret	bool	true	Create secret for admin user
controller.admin.existingSecret	string	""	The name of an existing secret containing the admin credentials
controller.admin.password	string		Admin password created as a secret if controller.admin.createSecret is true
controller.admin.passwordKey	string	"jenkins-admin-password"	The key in the existing admin secret containing the password
controller.admin.userKey	string	"jenkins-admin-user"	The key in the existing admin secret containing the username
controller.admin.username	string	"admin"	Admin username created as a secret if controller.admin.createSecret is true
controller.affinity	object	{}	Affinity settings
controller.agentListenerEnabled	bool	true	Create Agent listener service
controller.agentListenerExternalTrafficPolicy	string	nil	Traffic Policy of for the agentListener service
controller.agentListenerHostPort	string	nil	Host port to listen for agents
controller.agentListenerLoadBalancerIP	string	nil	Static IP for the agentListener LoadBalancer
controller.agentListenerLoadBalancerSourceRanges	list	["0.0.0.0/0"]	Allowed inbound IP for the agentListener service
controller.agentListenerNodePort	string	nil	Node port to listen for agents
controller.agentListenerPort	int	50000	Listening port for agents
controller.agentListenerServiceAnnotations	object	{}	Annotations for the agentListener service
controller.agentListenerServiceType	string	"ClusterIP"	Defines how to expose the agentListener service
controller.backendconfig.annotations	object	{}	backendconfig annotations
controller.backendconfig.apiVersion	string	"extensions/v1beta1"	backendconfig API version
controller.backendconfig.enabled	bool	false	Enables backendconfig
controller.backendconfig.labels	object	{}	backendconfig labels
controller.backendconfig.name	string	nil	backendconfig name
controller.backendconfig.spec	object	{}	backendconfig spec
controller.cloudName	string	"kubernetes"	Name of default cloud configuration.
controller.clusterIp	string	nil	k8s service clusterIP. Only used if serviceType is ClusterIP
controller.componentName	string	"jenkins-controller"	Used for label app.kubernetes.io/component
controller.containerEnv	list	[]	Environment variables for Jenkins Container
controller.containerEnvFrom	list	[]	Environment variable sources for Jenkins Container
controller.containerSecurityContext	object	{"allowPrivilegeEscalation":false,"readOnlyRootFilesystem":true,"runAsGroup":1000,"runAsUser":1000}	Allow controlling the securityContext for the jenkins container
controller.csrf.defaultCrumbIssuer.enabled	bool	true	Enable the default CSRF Crumb issuer
controller.csrf.defaultCrumbIssuer.proxyCompatability	bool	true	Enable proxy compatibility
controller.customInitContainers	list	[]	Custom init-container specification in raw-yaml format
controller.customJenkinsLabels	list	[]	Append Jenkins labels to the controller
controller.disableRememberMe	bool	false	Disable use of remember me
controller.disabledAgentProtocols	list	["JNLP-connect","JNLP2-connect"]	Disabled agent protocols
controller.enableRawHtmlMarkupFormatter	bool	false	Enable HTML parsing using OWASP Markup Formatter Plugin (antisamy-markup-formatter)
controller.enableServiceLinks	bool	false
controller.executorMode	string	"NORMAL"	Sets the executor mode of the Jenkins node. Possible values are "NORMAL" or "EXCLUSIVE"
controller.existingSecret	string	nil
controller.extraPorts	list	[]	Optionally configure other ports to expose in the controller container
controller.fsGroup	int	1000	Deprecated in favor of controller.podSecurityContextOverride. uid that will be used for persistent volume.
controller.googlePodMonitor.enabled	bool	false
controller.googlePodMonitor.scrapeEndpoint	string	"/prometheus"
controller.googlePodMonitor.scrapeInterval	string	"60s"
controller.healthProbes	bool	true	Enable Kubernetes Probes configuration configured in controller.probes
controller.hostAliases	list	[]	Allows for adding entries to Pod /etc/hosts
controller.hostNetworking	bool	false
controller.httpsKeyStore.disableSecretMount	bool	false
controller.httpsKeyStore.enable	bool	false	Enables HTTPS keystore on jenkins controller
controller.httpsKeyStore.fileName	string	"keystore.jks"	Jenkins keystore filename which will appear under controller.httpsKeyStore.path
controller.httpsKeyStore.httpPort	int	8081	HTTP Port that Jenkins should listen to along with HTTPS, it also serves as the liveness and readiness probes port.
controller.httpsKeyStore.jenkinsHttpsJksPasswordSecretKey	string	"https-jks-password"	Name of the key in the secret that contains the JKS password
controller.httpsKeyStore.jenkinsHttpsJksPasswordSecretName	string	""	Name of the secret that contains the JKS password, if it is not in the same secret as the JKS file
controller.httpsKeyStore.jenkinsHttpsJksSecretKey	string	"jenkins-jks-file"	Name of the key in the secret that already has ssl keystore
controller.httpsKeyStore.jenkinsHttpsJksSecretName	string	""	Name of the secret that already has ssl keystore
controller.httpsKeyStore.jenkinsKeyStoreBase64Encoded	string	nil	Base64 encoded Keystore content. Keystore must be converted to base64 then being pasted here
controller.httpsKeyStore.password	string	"password"	Jenkins keystore password
controller.httpsKeyStore.path	string	"/var/jenkins_keystore"	Path of HTTPS keystore file
controller.image.pullPolicy	string	"Always"	Controller image pull policy
controller.image.registry	string	"docker.io"	Controller image registry
controller.image.repository	string	"jenkins/jenkins"	Controller image repository
controller.image.tag	string	nil	Controller image tag override; i.e., tag: "2.440.1-jdk21"
controller.image.tagLabel	string	"jdk21"	Controller image tag label
controller.imagePullSecretName	string	nil	Controller image pull secret
controller.ingress.annotations	object	{}	Ingress annotations
controller.ingress.apiVersion	string	"extensions/v1beta1"	Ingress API version
controller.ingress.enabled	bool	false	Enables ingress
controller.ingress.hostName	string	nil	Ingress hostname
controller.ingress.labels	object	{}	Ingress labels
controller.ingress.path	string	nil	Ingress path
controller.ingress.paths	list	[]	Override for the default Ingress paths
controller.ingress.resourceRootUrl	string	nil	Hostname to serve assets from
controller.ingress.tls	list	[]	Ingress TLS configuration
controller.initConfigMap	string	nil	Name of the existing ConfigMap that contains init scripts
controller.initContainerEnv	list	[]	Environment variables for Init Container
controller.initContainerEnvFrom	list	[]	Environment variable sources for Init Container
controller.initContainerResources	object	{}	Resources allocation (Requests and Limits) for Init Container
controller.initScripts	object	{}	Map of groovy init scripts to be executed during Jenkins controller start
controller.initializeOnce	bool	false	Initialize only on first installation. Ensures plugins do not get updated inadvertently. Requires persistence.enabled to be set to true
controller.installLatestPlugins	bool	true	Download the minimum required version or latest version of all dependencies
controller.installLatestSpecifiedPlugins	bool	false	Set to true to download the latest version of any plugin that is requested to have the latest version
controller.installPlugins	list	["kubernetes:4336.v55d9a_494db_38","workflow-aggregator:608.v67378e9d3db_1","git:5.7.0","configuration-as-code:1967.va_968e15fd05b_"]	List of Jenkins plugins to install. If you don't want to install plugins, set it to false
controller.javaOpts	string	nil	Append to JAVA_OPTS env var
controller.jenkinsAdminEmail	string	nil	Email address for the administrator of the Jenkins instance
controller.jenkinsHome	string	"/var/jenkins_home"	Custom Jenkins home path
controller.jenkinsOpts	string	nil	Append to JENKINS_OPTS env var
controller.jenkinsRef	string	"/usr/share/jenkins/ref"	Custom Jenkins reference path
controller.jenkinsUriPrefix	string	nil	Root URI Jenkins will be served on
controller.jenkinsUrl	string	nil	Set Jenkins URL if you are not using the ingress definitions provided by the chart
controller.jenkinsUrlProtocol	string	nil	Set protocol for Jenkins URL; https if controller.ingress.tls, http otherwise
controller.jenkinsWar	string	"/usr/share/jenkins/jenkins.war"
controller.jmxPort	string	nil	Open a port, for JMX stats
controller.legacyRemotingSecurityEnabled	bool	false	Whether legacy remoting security should be enabled
controller.lifecycle	object	{}	Lifecycle specification for controller-container
controller.loadBalancerIP	string	nil	Optionally assign a known public LB IP
controller.loadBalancerSourceRanges	list	["0.0.0.0/0"]	Allowed inbound IP addresses
controller.markupFormatter	string	"plainText"	Yaml of the markup formatter to use
controller.nodePort	string	nil	k8s node port. Only used if serviceType is NodePort
controller.nodeSelector	object	{}	Node labels for pod assignment
controller.numExecutors	int	0	Set Number of executors
controller.overwritePlugins	bool	false	Overwrite installed plugins on start
controller.overwritePluginsFromImage	bool	true	Overwrite plugins that are already installed in the controller image
controller.podAnnotations	object	{}	Annotations for controller pod
controller.podDisruptionBudget.annotations	object	{}
controller.podDisruptionBudget.apiVersion	string	"policy/v1beta1"	Policy API version
controller.podDisruptionBudget.enabled	bool	false	Enable Kubernetes Pod Disruption Budget configuration
controller.podDisruptionBudget.labels	object	{}
controller.podDisruptionBudget.maxUnavailable	string	"0"	Number of pods that can be unavailable. Either an absolute number or a percentage
controller.podLabels	object	{}	Custom Pod labels (an object with label-key: label-value pairs)
controller.podSecurityContextOverride	string	nil	Completely overwrites the contents of the pod security context, ignoring the values provided for runAsUser, fsGroup, and securityContextCapabilities
controller.priorityClassName	string	nil	The name of a priorityClass to apply to the controller pod
controller.probes.livenessProbe.failureThreshold	int	5	Set the failure threshold for the liveness probe
controller.probes.livenessProbe.httpGet.path	string	"{{ default \"\" .Values.controller.jenkinsUriPrefix }}/login"	Set the Pod's HTTP path for the liveness probe
controller.probes.livenessProbe.httpGet.port	string	"http"	Set the Pod's HTTP port to use for the liveness probe
controller.probes.livenessProbe.initialDelaySeconds	string	nil	Set the initial delay for the liveness probe in seconds
controller.probes.livenessProbe.periodSeconds	int	10	Set the time interval between two liveness probes executions in seconds
controller.probes.livenessProbe.timeoutSeconds	int	5	Set the timeout for the liveness probe in seconds
controller.probes.readinessProbe.failureThreshold	int	3	Set the failure threshold for the readiness probe
controller.probes.readinessProbe.httpGet.path	string	"{{ default \"\" .Values.controller.jenkinsUriPrefix }}/login"	Set the Pod's HTTP path for the liveness probe
controller.probes.readinessProbe.httpGet.port	string	"http"	Set the Pod's HTTP port to use for the readiness probe
controller.probes.readinessProbe.initialDelaySeconds	string	nil	Set the initial delay for the readiness probe in seconds
controller.probes.readinessProbe.periodSeconds	int	10	Set the time interval between two readiness probes executions in seconds
controller.probes.readinessProbe.timeoutSeconds	int	5	Set the timeout for the readiness probe in seconds
controller.probes.startupProbe.failureThreshold	int	12	Set the failure threshold for the startup probe
controller.probes.startupProbe.httpGet.path	string	"{{ default \"\" .Values.controller.jenkinsUriPrefix }}/login"	Set the Pod's HTTP path for the startup probe
controller.probes.startupProbe.httpGet.port	string	"http"	Set the Pod's HTTP port to use for the startup probe
controller.probes.startupProbe.periodSeconds	int	10	Set the time interval between two startup probes executions in seconds
controller.probes.startupProbe.timeoutSeconds	int	5	Set the timeout for the startup probe in seconds
controller.projectNamingStrategy	string	"standard"
controller.prometheus.alertingRulesAdditionalLabels	object	{}	Additional labels to add to the PrometheusRule object
controller.prometheus.alertingrules	list	[]	Array of prometheus alerting rules
controller.prometheus.enabled	bool	false	Enables prometheus service monitor
controller.prometheus.metricRelabelings	list	[]
controller.prometheus.prometheusRuleNamespace	string	""	Set a custom namespace where to deploy PrometheusRule resource
controller.prometheus.relabelings	list	[]
controller.prometheus.scrapeEndpoint	string	"/prometheus"	The endpoint prometheus should get metrics from
controller.prometheus.scrapeInterval	string	"60s"	How often prometheus should scrape metrics
controller.prometheus.serviceMonitorAdditionalLabels	object	{}	Additional labels to add to the service monitor object
controller.prometheus.serviceMonitorNamespace	string	nil	Set a custom namespace where to deploy ServiceMonitor resource
controller.publishNotReadyAddresses	string	nil
controller.resources	object	{"limits":{"cpu":"2000m","memory":"4096Mi"},"requests":{"cpu":"50m","memory":"256Mi"}}	Resource allocation (Requests and Limits)
controller.route.annotations	object	{}	Route annotations
controller.route.enabled	bool	false	Enables openshift route
controller.route.labels	object	{}	Route labels
controller.route.path	string	nil	Route path
controller.runAsUser	int	1000	Deprecated in favor of controller.podSecurityContextOverride. uid that jenkins runs with.
controller.schedulerName	string	""	Name of the Kubernetes scheduler to use
controller.scriptApproval	list	[]	List of groovy functions to approve
controller.secondaryingress.annotations	object	{}
controller.secondaryingress.apiVersion	string	"extensions/v1beta1"
controller.secondaryingress.enabled	bool	false
controller.secondaryingress.hostName	string	nil
controller.secondaryingress.labels	object	{}
controller.secondaryingress.paths	list	[]
controller.secondaryingress.tls	string	nil
controller.secretClaims	list	[]	List of SecretClaim resources to create
controller.securityContextCapabilities	object	{}
controller.serviceAnnotations	object	{}	Jenkins controller service annotations
controller.serviceExternalTrafficPolicy	string	nil
controller.serviceLabels	object	{}	Labels for the Jenkins controller-service
controller.servicePort	int	8080	k8s service port
controller.serviceType	string	"ClusterIP"	k8s service type
controller.shareProcessNamespace	bool	false
controller.sidecars.additionalSidecarContainers	list	[]	Configures additional sidecar container(s) for the Jenkins controller
controller.sidecars.configAutoReload.additionalVolumeMounts	list	[]	Enables additional volume mounts for the config auto-reload container
controller.sidecars.configAutoReload.containerSecurityContext	object	{"allowPrivilegeEscalation":false,"readOnlyRootFilesystem":true}	Enable container security context
controller.sidecars.configAutoReload.enabled	bool	true	Enables Jenkins Config as Code auto-reload
controller.sidecars.configAutoReload.env	object	{}	Environment variables for the Jenkins Config as Code auto-reload container
controller.sidecars.configAutoReload.envFrom	list	[]	Environment variable sources for the Jenkins Config as Code auto-reload container
controller.sidecars.configAutoReload.folder	string	"/var/jenkins_home/casc_configs"
controller.sidecars.configAutoReload.image.registry	string	"gcr.io"	Registry for the image that triggers the reload
controller.sidecars.configAutoReload.image.repository	string	"customer-facing/kiwigrid/k8s-sidecar"	Repository of the image that triggers the reload
controller.sidecars.configAutoReload.image.tag	string	"1.30.3"	Tag for the image that triggers the reload
controller.sidecars.configAutoReload.imagePullPolicy	string	"IfNotPresent"
controller.sidecars.configAutoReload.logging	object	{"configuration":{"backupCount":3,"formatter":"JSON","logLevel":"INFO","logToConsole":true,"logToFile":false,"maxBytes":1024,"override":false}}	Config auto-reload logging settings
controller.sidecars.configAutoReload.logging.configuration.override	bool	false	Enables custom log config utilizing using the settings below.
controller.sidecars.configAutoReload.reqRetryConnect	int	10	How many connection-related errors to retry on
controller.sidecars.configAutoReload.resources	object	{}
controller.sidecars.configAutoReload.scheme	string	"http"	The scheme to use when connecting to the Jenkins configuration as code endpoint
controller.sidecars.configAutoReload.skipTlsVerify	bool	false	Skip TLS verification when connecting to the Jenkins configuration as code endpoint
controller.sidecars.configAutoReload.sleepTime	string	nil	How many seconds to wait before updating config-maps/secrets (sets METHOD=SLEEP on the sidecar)
controller.sidecars.configAutoReload.sshTcpPort	int	1044
controller.statefulSetAnnotations	object	{}	Annotations for controller StatefulSet
controller.statefulSetLabels	object	{}	Jenkins controller custom labels for the StatefulSet
controller.targetPort	int	8080	k8s target port
controller.terminationGracePeriodSeconds	string	nil	Set TerminationGracePeriodSeconds
controller.terminationMessagePath	string	nil	Set the termination message path
controller.terminationMessagePolicy	string	nil	Set the termination message policy
controller.testEnabled	bool	true	Can be used to disable rendering controller test resources when using helm template
controller.tolerations	list	[]	Toleration labels for pod assignment
controller.topologySpreadConstraints	object	{}	Topology spread constraints
controller.updateStrategy	object	{}	Update strategy for StatefulSet
controller.usePodSecurityContext	bool	true	Enable pod security context (must be true if podSecurityContextOverride, runAsUser or fsGroup are set)
credentialsId	string	nil	The Jenkins credentials to access the Kubernetes API server. For the default cluster it is not needed.
extraManifests	list	[]	Array of extra Kubernetes manifests to deploy Can be used to add additional resources like PersistentVolumes, ConfigMaps, Secrets, etc. Supports both YAML objects and raw strings with template functions.
fullnameOverride	string	jenkins-(release-name) or jenkins if the release-name is jenkins	Override the full resource names
helmtest.bats.image.registry	string	"gcr.io"	Registry of the image used to test the framework
helmtest.bats.image.repository	string	"customer-facing/bats/bats"	Repository of the image used to test the framework
helmtest.bats.image.tag	string	"1.11.1"	Tag of the image to test the framework
kubernetesURL	string	"https://kubernetes.default"	The URL of the Kubernetes API server
nameOverride	string	Chart.Name	Override the resource name prefix
namespaceOverride	string	Release.Namespace	Override the deployment namespace
networkPolicy.apiVersion	string	"networking.k8s.io/v1"	NetworkPolicy ApiVersion
networkPolicy.enabled	bool	false	Enable the creation of NetworkPolicy resources
networkPolicy.externalAgents.except	list	[]	A list of IP sub-ranges to be excluded from the allowlisted IP range
networkPolicy.externalAgents.ipCIDR	string	nil	The IP range from which external agents are allowed to connect to controller, i.e., 172.17.0.0/16
networkPolicy.internalAgents.allowed	bool	true	Allow internal agents (from the same cluster) to connect to controller. Agent pods will be filtered based on PodLabels
networkPolicy.internalAgents.namespaceLabels	object	{}	A map of labels (keys/values) that agents namespaces must have to be able to connect to controller
networkPolicy.internalAgents.podLabels	object	{}	A map of labels (keys/values) that agent pods must have to be able to connect to controller
persistence.accessMode	string	"ReadWriteOnce"	The PVC access mode
persistence.annotations	object	{}	Annotations for the PVC
persistence.dataSource	object	{}	Existing data source to clone PVC from
persistence.enabled	bool	true	Enable the use of a Jenkins PVC
persistence.existingClaim	string	nil	Provide the name of a PVC
persistence.labels	object	{}	Labels for the PVC
persistence.mounts	list	[]	Additional mounts
persistence.size	string	"8Gi"	The size of the PVC
persistence.storageClass	string	nil	Storage class for the PVC
persistence.subPath	string	nil	SubPath for jenkins-home mount
persistence.volumes	list	[]	Additional volumes
rbac.create	bool	true	Whether RBAC resources are created
rbac.readSecrets	bool	false	Whether the Jenkins service account should be able to read Kubernetes secrets
rbac.useOpenShiftNonRootSCC	bool	false	Whether the Jenkins service account should be able to use the OpenShift "nonroot" Security Context Constraints
renderHelmLabels	bool	true	Enables rendering of the helm.sh/chart label to the annotations
serviceAccount.annotations	object	{}	Configures annotations for the ServiceAccount
serviceAccount.automountServiceAccountToken	bool	true	Auto-mount ServiceAccount token
serviceAccount.create	bool	true	Configures if a ServiceAccount with this name should be created
serviceAccount.extraLabels	object	{}	Configures extra labels for the ServiceAccount
serviceAccount.imagePullSecretName	string	nil	Controller ServiceAccount image pull secret
serviceAccount.name	string	nil
serviceAccountAgent.annotations	object	{}	Configures annotations for the agent ServiceAccount
serviceAccountAgent.automountServiceAccountToken	bool	true	Auto-mount ServiceAccount token
serviceAccountAgent.create	bool	false	Configures if an agent ServiceAccount should be created
serviceAccountAgent.extraLabels	object	{}	Configures extra labels for the agent ServiceAccount
serviceAccountAgent.imagePullSecretName	string	nil	Agent ServiceAccount image pull secret
serviceAccountAgent.name	string	nil	The name of the agent ServiceAccount to be used by access-controlled resources

---

Autogenerated from chart metadata using helm-docs v1.14.2