amazon-ecs-plugin
amazon-ecs-plugin copied to clipboard
Support Job Restrictions Plugin
This plugin, https://plugins.jenkins.io/job-restrictions/, allows you the ability to say what jobs can use a node. Combined with user permissions, we could effectively lock down what nodes a user can set up a job for. Being that Jenkins agents created through this plugin use are particular IAM role, we can have multiple configurations that use different IAM roles, and ensure that teams get a specific set of permissions for their build jobs. In our use case, we want to be able to use Jenkins for our VPC configuration and other admin configurations, without worry a dev team could exploit those permissions. Having this functionality would create the same security we come to love/hate about AWS, and honestly is one of the bigger concerns with Jenkins and permissions.
Here is a snippet of what I am referencing from the Job Restrictions plugin:

Bump. Currently using another Jenkins deployment to achieve this, but this doesn't;t allow us to have different teams to have different permissions, and we def don't want a Jenkins deployment per team.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
I'm also interested in this. Would like to be able to have jobs run on our normal worker nodes OR a container.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
Bump