From 8e15f2242dadeadbd135f5b99caf1a0ccf666c7d Mon Sep 17 00:00:00 2001
From: Jim Bair <james.d.bair@gmail.com>
Date: May 14 2020 13:32:20 +0000
Subject: Start documentation around Fedora CI Jenkins instances


---

diff --git a/modules/ROOT/nav.adoc b/modules/ROOT/nav.adoc
index 9a61169..54618e5 100644
--- a/modules/ROOT/nav.adoc
+++ b/modules/ROOT/nav.adoc
@@ -11,6 +11,8 @@
 ** xref:tests.adoc[Tests]
 ** xref:pipeline.adoc[Pipeline]
 ** xref:gating.adoc[Gating]
+* Infrastructure
+** xref:jenkins.adoc[Jenkins]
 * Maintenance
 ** xref:rebuild-container-image.adoc[Rebuild container images]
 * More
diff --git a/modules/ROOT/pages/jenkins.adoc b/modules/ROOT/pages/jenkins.adoc
new file mode 100644
index 0000000..8b049e0
--- /dev/null
+++ b/modules/ROOT/pages/jenkins.adoc
@@ -0,0 +1,43 @@
+:toc:
+
+= Jenkins =
+
+The Fedora CI team relies heavily on Jenkins automation for testing builds in Fedora.
+
+== Setup ==
+
+Our Jenkins instances are configured with https://plugins.jenkins.io/openid/[OpenID] to allow admins in the https://admin.fedoraproject.org/accounts/group/view/fedora-ci-admins[fedora-ci-admins] group admin access.
+
+To configure this, you simply need to:
+
+* install the https://plugins.jenkins.io/openid/[OpenID] plugin
+* As an admin, go to Jenkins -> Configure Global Security
+* Under Access Control, change Security Realm to "OpenID SSO"
+  ** Set Provider URL to: `https://id.fedoraproject.org/`
+* Under Authorization, set to "Project-based Matrix Authorization Strategy"
+  ** Add `fedora-ci-admins` and check the "Administer" box in the Overall column
+* Once you save/apply this config, you may need to logout/login to re-apply your permissions
+  ** NOTE: OpenID does pulls from groups in Jenkins without any custom prefixes required
+
+== Notes ==
+
+The Fedora CI team has recently created an organiation in github here: https://github.com/fedora-ci[Fedora CI github]
+
+The goal is to move all of our repos under this org in the near future.
+
+=== Links ===
+
+Jenkins repos:
+
+* https://github.com/tflink/fedora-ci-generic-checks[Fedora CI Jenkins]
+* https://github.com/CentOS-PaaS-SIG/ci-pipeline[Fedora CI Current Deploy]
+* https://github.com/CentOS-PaaS-SIG/upstream-fedora-pipeline[Fedora CI Jenkins Triggers]
+* http://fedora-build-checks.apps.ci.centos.org/[rpminspect Jenkins]
+* https://github.com/tflink/fedora-ci-generic-checks[rpminspect Jenkins Deploy]
+
+=== Contact ===
+
+* Andrei Stepanov (astepano)
+* Bruno Goncalves (bgoncalv)
+* Jim Bair (jimbair)
+* Tim Flink (tflink)