Tristan Cole

Correct, the key is eyaml encrypted in Hiera. Reading further on this issue it is referenced to be a bug in the jenkins-cli.jar because of args4j, however the provided example...

@ConstantineXVI Were you able to workaround this problem? I am currently running into this using Rancher/K8s. It seems that new nodes I spin up with annotations seem to get roles...

It would definitely be nice to have some sort of default "read only" mode.

Was just wondering if this is possible. Would be a very useful feature!