amazon-ecs-plugin icon indicating copy to clipboard operation
amazon-ecs-plugin copied to clipboard

Support Job Restrictions Plugin

Open MikeKroell opened this issue 4 years ago • 6 comments

This plugin, https://plugins.jenkins.io/job-restrictions/, allows you the ability to say what jobs can use a node. Combined with user permissions, we could effectively lock down what nodes a user can set up a job for. Being that Jenkins agents created through this plugin use are particular IAM role, we can have multiple configurations that use different IAM roles, and ensure that teams get a specific set of permissions for their build jobs. In our use case, we want to be able to use Jenkins for our VPC configuration and other admin configurations, without worry a dev team could exploit those permissions. Having this functionality would create the same security we come to love/hate about AWS, and honestly is one of the bigger concerns with Jenkins and permissions.

Here is a snippet of what I am referencing from the Job Restrictions plugin:

image

MikeKroell avatar Dec 07 '20 17:12 MikeKroell

Bump. Currently using another Jenkins deployment to achieve this, but this doesn't;t allow us to have different teams to have different permissions, and we def don't want a Jenkins deployment per team.

MikeKroell avatar Mar 26 '21 15:03 MikeKroell

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

stale[bot] avatar Jul 21 '21 00:07 stale[bot]

I'm also interested in this. Would like to be able to have jobs run on our normal worker nodes OR a container.

rjl126 avatar Aug 30 '21 22:08 rjl126

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

stale[bot] avatar Apr 17 '22 05:04 stale[bot]

Bump

MikeKroell avatar Apr 22 '22 22:04 MikeKroell