Varroa Operator Handbook
Varroa manages Jenkins controllers on Kubernetes through declarative resources, shared configuration, centralized access control, and fleet operations.
Start here
Section titled “Start here”- Evaluate: Architecture, prerequisites, then create a controller.
- Install: Helm installation, ingress, and network policies.
- Operate: Reconciliation, observability, and troubleshooting.
- Automate: API, varroactl, or MCP clients.
Commands use kubectl and helm. Replace values in <angle-brackets> before running them. Example hosts use example.com.
Architecture
Section titled “Architecture”- Overview: components, resources, and controller lifecycle
- The mite: controller agent identity, commands, and failure behavior
- Scaling: replicas, capacity controls, and sizing
Install
Section titled “Install”- Prerequisites
- Helm installation
- Ingress
- Multi-cluster
- Amazon EKS
- Air-gapped installation
- Network policies
Tutorials
Section titled “Tutorials”- Create your first controller
- Author a bundle
- Read and run pipelines
- Operate a run
- Move a Jenkinsfile onto a cell
- Work with multibranch jobs
Configuration
Section titled “Configuration”- Composed bundles
- CasC catalog
- Bundle sources
- Jobs and items
- Pipeline templates
- Controller classes
- Jenkins versions
- Plugin pinning
- Plugin packs
- Pod customization
- Cross-tenant pipelines
Security
Section titled “Security”- Authentication
- Varroa RBAC
- Jenkins RBAC
- API keys
- Runner tokens
- executeGroovy controls
- Headless controllers
- Outbound connections
Agents
Section titled “Agents”- Agents overview
- Connect a client
- Assistant
- Identity and auditing
- Jenkins controller tools
- Tool reference
- Write through MCP
Operations
Section titled “Operations”- Reconciliation
- Lifecycle
- Multi-tenancy
- Cells
- Tenant webhooks
- Cell pools
- Cell usage
- Cell views
- Cell loss
- Pipeline mesh
- Tenant slots
- Tenant pod templates
- Tenant shared libraries
- Pool shared libraries
- Script approvals
- Agent Services
- External runners
- Brood operations
- Brood schedules
- Rollout waves
- Update center
- Build records
- Build claims
- Build logs and artifacts
- Commit status
- Artifact credentials
- Notifications
- NATS upgrades
- Observability
- Troubleshooting