Re: Missing link in Infra Bootstrap documentation?


Thanh Ha
 

On Tue, Sep 11, 2018 at 11:30 AM Thanh Ha <thanh.ha@...> wrote:
On Tue, Sep 11, 2018 at 3:27 AM Jean-Francois Panisset <panisset@...> wrote:
Hi Thanh,

Hi JF,

I hope you don't mind me cc'ing the mailing lists so that others can benefit from the knowledge from this discussion as well.


I'm starting to configure Jenkins to match the documented config,
looking at the documentation:

https://docs.releng.linuxfoundation.org/en/latest/infra/bootstrap.html

I find:

9. Configure Jenkins security as described in Jenkins Security
<jenkins-security>

which doesn't seem to link to anything. Should it?

Syntax error will be fixed once this is merged https://gerrit.linuxfoundation.org/infra/12532

It's supposed to link to this:


I'll let you know once my project gets to the point of having
reproduced the documented config for Jenkins / Nexus 2 / Nexus 3
servers.

Does the LF have code that creates these servers? There's value for me
in figuring this out on my own, and in particular in creating a local
/ standalone version, but it would be create to have a reference to
compare against.

We do but I've been told we cannot share it because it's tied in with our infra management puppet configuration.

On the other hand I can assure you that there's nothing special about our configuration to create these servers. These docs assume a completely fresh install of these servers with no additional changes in the backend. You could for example even use the official Jenkins docker container and start off from these docs for both Jenkins / Nexus 2 / Nexus 3 even.


Hi JF,

IT gave me the following puppet information in case it's helpful for you but as I suspected we don't have any custom config in place to handle Jenkins and use what's already available out on puppet forge. Here was the response I got:

We use the public puppet module for jenkins @ https://forge.puppet.com/rtyler/jenkins (mod 'rtyler/jenkins', '1.7.0'). Our internal config is essentially:

jenkins::config_hash:
  JENKINS_LISTEN_ADDRESS:
    value: '0.0.0.0'
  JENKINS_AJP_PORT:
    value: '-1'
  JENKINS_ARGS:
    value: '-Dhudson.model.ParametersAction.safeParameters=GERRIT_EVENT_TYPE,GERRIT_EVENT_HASH,GERRIT_BRANCH,GERRIT_TOPIC,GERRIT_CHANGE_NUMBER,GERRIT_CHANGE_ID,GERRIT_PATCHSET_NUMBER,GERRIT_PATCHSET_REVISION,GERRIT_REFSPEC,GERRIT_PROJECT,GERRIT_CHANGE_SUBJECT,GERRIT_CHANGE_COMMIT_MESSAGE,GERRIT_CHANGE_URL,GERRIT_CHANGE_OWNER,GERRIT_CHANGE_OWNER_NAME,GERRIT_CHANGE_OWNER_EMAIL,GERRIT_PATCHSET_UPLOADER,GERRIT_PATCHSET_UPLOADER_NAME'
    # yamllint enable

jenkins::port: '8080'
jenkins::admin: '<projectname>-jenkins'

Join main@lists.aswf.io to automatically receive all group messages.