forked from screwdriver-cd/screwdriver
-
Notifications
You must be signed in to change notification settings - Fork 0
/
default.yaml
207 lines (198 loc) · 7.05 KB
/
default.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
---
auth:
# A private key used for signing jwt tokens
# Easily generate one by running
# $ openssl genrsa -out jwt.pem 2048
jwtPrivateKey: |
-----BEGIN RSA PRIVATE KEY-----
YOUR-KEY-HERE
-----END RSA PRIVATE KEY-----
# The public key used for verifying the signature
# Generate one by running
# $ openssl rsa -in jwt.pem -pubout -out jwt.pub
jwtPublicKey: |
-----BEGIN PUBLIC KEY-----
YOUR-KEY-HERE
-----END PUBLIC KEY-----
# A password used for encrypting session data.
# **Needs to be minimum 32 characters**
cookiePassword: WOW-ANOTHER-INSECURE-PASSWORD!!!
# A password used for encrypting stored secrets.
# **Needs to be minimum 32 characters**
encryptionPassword: WOW-ANOTHER-MORE-INSECURE-PASSWORD!!!
# A flag to set if the server is running over https.
# Used as a flag for the OAuth flow
https: false
# Whitelist of users able to authenticate against the system
# if empty, it allows everyone
# @TODO Move this content to our configuration and change the default to []
whitelist:
# Primary Contributors
- github:FenrirUnbound
- github:cynthiax
- github:d2lam
- github:dvdizon
- github:jer
- github:jithin1987
- github:minz1027
- github:petey
- github:r3rastogi
- github:stjohnjohnson
- github:tkyi
# Automated Account
- github:sd-buildbot
# Pilots
- github:aressem
- github:bjorncs
- github:drewfish
- github:gjoranv2
- github:jpcollins
- github:tonytamsf
- github:pranavrc
admins:
- github:FenrirUnbound
- github:cynthiax
- github:d2lam
- github:dvdizon
- github:jer
- github:minz1027
- github:petey
- github:r3rastogi
- github:stjohnjohnson
- github:tkyi
httpd:
# Port to listen on
port: 80
# Host to listen on (set to localhost to only accept connections from this machine)
host: 0.0.0.0
# Externally routable URI (usually your load balancer or CNAME)
uri: http://localhost:80
# SSL Support
tls: false
# If you want SSL, you can easily add it by replacing `tls: false` with an object that
# provides the options required by `tls.createServer`
# https://nodejs.org/api/tls.html#tls_tls_createserver_options_secureconnectionlistener
# key: |
# PRIVATE KEY HERE
# cert: |
# YOUR CERT HERE
datastore:
plugin: sequelize
sequelize:
# Type of server to talk to
dialect: sqlite
# More arguments here:
# http://docs.sequelizejs.com/en/latest/api/sequelize/
executor:
# Default executor
plugin: k8s
k8s:
enabled: true
options:
kubernetes:
# The host or IP of the kubernetes cluster
host: kubernetes.default
# The jwt token used for authenticating kubernetes requests
# Loaded from /var/run/secrets/kubernetes.io/serviceaccount/token by default
# Container tags to use
launchVersion: stable
docker:
enabled: true
options:
# Dockerode configuration https://github.com/apocas/dockerode#getting-started
docker: {}
# Container tags to use
launchVersion: stable
k8s-vm:
enabled: true
options:
# Configuration of Docker
kubernetes:
# The host or IP of the kubernetes cluster
host: kubernetes.default
# The jwt token used for authenticating kubernetes requests
# Loaded from /var/run/secrets/kubernetes.io/serviceaccount/token by default
# Launcher container tag to use
launchVersion: stable
# jenkins:
# options:
# # Configuration of Jenkins
# jenkins:
# host: jenkins.default
# port: 8080
# username: screwdriver
# password: "WOW-AN-EVEN-MORE-INSECURE-PASSWORD!!!!"
queue:
enabled: true
options:
# Configuration of the redis instance containing resque
redisConnection:
host: "127.0.0.1"
port: 9999
password: "THIS-IS-A-PASSWORD"
database: 0
scms: {}
# github:
# plugin: github
# config:
# # The client id used for OAuth with github. Look up GitHub OAuth for details
# # https://developer.github.com/v3/oauth/
# oauthClientId: YOU-PROBABLY-WANT-SOMETHING-HERE
# # The client secret used for OAuth with github
# oauthClientSecret: AGAIN-SOMETHING-HERE-IS-USEFUL
# # You can also configure for use with GitHub enterprise
# # gheHost: github.screwdriver.cd
# # The username and email used for checkout with github
# username: sd-buildbot
# email: [email protected]
# # Secret to add to GitHub webhooks so that we can validate them
# secret: SUPER-SECRET-SIGNING-THING
# # Whether it supports private repo: boolean value.
# # If true, it will ask for read and write access to public and private repos
# # https://developer.github.com/v3/oauth/#scopes
# privateRepo: false
# bitbucket:
# plugin: bitbucket
# config:
# oauthClientId: YOUR-BITBUCKET-OAUTH-CLIENT-ID
# oauthClientSecret: YOUR-BITBUCKET-OAUTH-CLIENT-SECRET
# # The username and email used for checkout with bitbucket
# username: sd-buildbot
# email: [email protected]
# gitlab:
# plugin: gitlab
# config:
# oauthClientId: YOUR-GITLAB-OAUTH-CLIENT-ID
# oauthClientSecret: YOUR-GITLAB-OAUTH-CLIENT-SECRET
# # If you have on-premise gitlab, you can specify that here
# # gitlabHost: mygitlab.com
# # gitlabProtocol: https
# # The username and email used for checkout with gitlab
# # username: sd-buildbot
# # email: [email protected]
webhooks:
# Obtains the SCM token for a given user. If a user does not have a valid SCM token registered with Screwdriver, it will use this user's token instead.
username: sd-buildbot
bookends:
# Plugins for build setup
setup:
- scm
teardown:
- screwdriver-artifact-bookend
notifications:
# Email notification when build finishes
# email:
# host: email-host
# port: email-port
# from: email-address-to-send-from
ecosystem:
# Externally routable URL for the User Interface
ui: https://cd.screwdriver.cd
# Externally routable URL for the Artifact Store
store: https://store.screwdriver.cd
# Badge service (needs to add a status and color)
badges: https://img.shields.io/badge/build-{{status}}-{{color}}.svg
# Default registry to pull build containers from. Uses Docker Hub if nothing/empty string is provided
dockerRegistry: ""
# Extra origins allowed to do CORS to API
allowCors: []