/
configuration-as-code.yml
96 lines (96 loc) · 2.74 KB
/
configuration-as-code.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
jenkins:
authorizationStrategy:
azureAdMatrix:
entries:
- group:
name: authenticated
permissions:
- Agent/Build
- Job/Build
- user:
name: abc (abc@jenkins.com)
permissions:
- Agent/Configure
- Agent/Connect
- Agent/Create
- Agent/Delete
- Agent/Disconnect
- Credentials/Create
- Credentials/Delete
- Credentials/ManageDomains
- Credentials/Update
- Credentials/View
- Job/Cancel
- Job/Configure
- Job/Create
- Job/Delete
- Job/Discover
- Job/Move
- Job/Read
- Job/Workspace
- Overall/Administer
- Overall/Read
- Run/Delete
- Run/Replay
- Run/Update
- View/Configure
- View/Create
- View/Delete
- View/Read
- user:
name: anonymous
permissions:
- Overall/Read
securityRealm:
azureSecurityRealm:
clientid: "clientId"
clientsecret: "clientSecret"
tenant: "tenantId"
cacheduration: 0
fromrequest: true
nodes:
- permanent:
labelString: "agent"
launcher:
jnlp:
webSocket: true
workDirSettings:
disabled: false
failIfWorkDirIsMissing: false
internalDir: "remoting"
name: "agent"
nodeProperties:
- azureAdAuthorizationMatrix:
inheritanceStrategy: "nonInheriting"
entries:
- user:
name: Adele Vance (be674052-e519-4231-b5e7-2b390bff6346)
permissions:
- "Agent/Build"
- user:
name: Lee Gu (7678bed6-0e7f-4a83-86d2-81d8e47614ee)
permissions:
- "Agent/Disconnect"
remoteFS: "/opt/jenkins"
retentionStrategy: "always"
jobs:
- script: >
folder('generated') {
properties {
azureAdAuthorizationMatrix {
inheritanceStrategy {
nonInheriting()
}
entries {
group {
name('Some group (7fe913e8-6c9f-40f8-913e-7178b7768cc5)')
permissions([ 'Job/Build', 'Job/Configure', 'Job/Delete', 'Job/Read' ])
}
user {
name('c411116f-cfa6-472c-8ccf-d0cb6053c9aa')
permissions([ 'Job/Build', 'Job/Configure' ])
}
}
}
}
}