The pipeline configurations can be changed by the modification of the configurations in the values.yaml file corresponding to the pipeline. The sample modifications for each product provide a good indication as to how these configurations could be modified upon deployment. Once a configuration change has been made, run the helm upgrade command to apply the changes. bash<RELEASE_NAME> should be replaced with the release name provided when the pipeline is installed initially. Configuration changes could occur which will affect the Jenkins deployment, some of which include: Changes to the private Docker repository Changes to the artifact source repository Changes to the chart source repository
In these cases the Jenkins pod would be restarted for these configurations to be reflected. Use the following Advance configurations to Customize and Secure the Pipeline tool. Change domain nameTo customize the domain name override the host values as shown in the example below. ymlexample.com refers to the domain name
Using Ingress with Secure Sockets Layer(SSL) / Transport Layer Security (TLS)The WSO2 Kubernetes Pipeline resource uses the NGINX Ingress Controller maintained by Kubernetes.Therefore, it is possible to use SSL/TLS security layers by adding a certificate to be used with the ingress controller. This could be done using the following methods: - Default SSL certificate
- Add individual certificates
Default SSL certificateRefer to NGINX Ingress Controller user guide on how to configure a default SSL certificate.
Add individual certificatesTo add individual certificates to each ingress endpoint follow the steps shown below - Create Kubernetes secret objects for each endpoint containing the certificate and the private key.
Refer NGINX Ingress Controller user guide. Add the following content to your values.yaml with the secret and hostname.
ymlReplace example.com , my-tls-cert with your domain name and secret name respectively.
Access private GitHub repositoriesThe use of private repositories are recommended when using WSO2 Kubernetes Pipeline.. While it is possible to use the basic credentials to authorize the pipeline to use these private repositories, we recommend the use of Github personal access tokens since it provides more control over the level of access. - Create a personal access token as mentioned here.
Add the username and personal access token to the values.yaml as shown below. yml
Change credentials for Jenkins administratorJenkins starts as an administrative user by default. The password for this account could be changed by overriding the values as shown below. ymlIn addition, we need to configure Spinnaker to authenticate with Jenkins since it would be used to run tests. This is done by overriding the additional scripts section to change the default credentials indicated by `JENKINS_USERNAME` and `JENKINS_PASSWORD`. yml
|