nomad

commit 6f2de14eb1e7f1fba1a25812697b0ca780aa6a09
parent 75d88ab7b8ff7d9a4c941acefb9d069a31e136a0
Author: Andreas Gruhler <agruhl@gmx.ch>
Date:   Mon,  1 Dec 2025 00:26:17 +0100

feat(jenkins): persist nomad token to bao

Diffstat:
M
hcl/default/jenkins/templates/jenkins.yaml.tmpl
 | 
6
++++++

1 file changed, 6 insertions(+), 0 deletions(-)
diff --git a/hcl/default/jenkins/templates/jenkins.yaml.tmpl b/hcl/default/jenkins/templates/jenkins.yaml.tmpl
@@ -10,6 +10,11 @@ credentials:
           scope: GLOBAL
           secretId: "{{with secret "kv/jenkins/vault-secret-source"}}{{index .Data.data.secret_id}}{{end}}"
           usePolicies: false
+      - string:
+          description: "Nomad ACL NOMAD_TOKEN for Nomad cloud plugin"
+          id: "nomad"
+          scope: GLOBAL
+          secret: "{{with secret "kv/jenkins/nomad_token"}}{{index .Data.data.password}}{{end}}"
 unclassified:
   location:
     adminAddress: "{{ if nomadVarExists "nomad/jobs/jenkins" -}}
@@ -70,6 +75,7 @@ jenkins:
   - nomad:
       name: "nomad"
       nomadUrl: "https://{{env "attr.unique.network.ip-address"}}:4646"
+      nomadACLCredentialsId: "nomad"
       tlsEnabled: true
       serverCertificate: "/etc/ssl/certs/nomad-agent-ca.p12"
       # the truststore only contains public certificates, password is irrelevant here