| {%- from "jenkins/map.jinja" import client with context %} |
| {%- if client.security.ldap is defined %} |
| set_jenkins_ldap: |
| jenkins_security.ldap: |
| - server: {{ client.security.ldap.server }} |
| - root_dn: {{ client.security.ldap.get('root_dn','') }} |
| - user_search_base: {{ client.security.ldap.get('user_search_base','') }} |
| - manager_dn: {{ client.security.ldap.get('manager_dn','') }} |
| - manager_password: {{ client.security.ldap.get('manager_password','') }} |
| - user_search: {{ client.security.ldap.get('user_search','') }} |
| - group_search_base: {{ client.security.ldap.get('group_search_base', '') }} |
| - inhibit_infer_root_dn: {{ client.security.ldap.get('inhibit_infer_root_dn', False) }} |
| {%- endif %} |
| |
| {%- if client.security.matrix is defined %} |
| set_jenkins_matrix_security: |
| jenkins_security.matrix: |
| - strategies: {{ client.security.matrix.permissions }} |
| - project_based: {{ client.security.matrix.get('project_based', False) }} |
| {%- endif %} |
| |
| {%- if client.security.csrf is defined %} |
| jenkins_csrf_protection: |
| jenkins_security.csrf: |
| - enabled: {{ client.security.csrf.get('enabled', False) }} |
| - proxy_compat: {{ client.security.csrf.get('proxy_compat', False) }} |
| {%- endif %} |
| |
| {%- if client.security.csp is defined %} |
| jenkins_content_security_policy: |
| jenkins_security.csp: |
| - policy: {{ client.security.csp }} |
| {%- endif %} |
| |
| {%- if client.security.agent2master is defined %} |
| jenkins_agent2master_security: |
| jenkins_security.agent2master: |
| - enabled: {{ client.security.agent2master.get('enabled', False) }} |
| - whitelisted: | |
| {{ client.security.agent2master.get('whitelisted', '')|indent(8) }} |
| - file_path_rules: | |
| {{ client.security.agent2master.get('file_path_rules', '')|indent(8) }} |
| {%- endif %} |
| |