[JIRA] (JENKINS-56687) Restrict pipeline support to authorized folders not working correctly

abermudez1718@gmail.com (JIRA)

unread,

Mar 22, 2019, 12:04:02 PM3/22/19

to jenkinsc...@googlegroups.com

Angel Bermudez created an issue

Jenkins /

JENKINS-56687

Restrict pipeline support to authorized folders not working correctly

Issue Type:	Bug
Assignee:	Carlos Sanchez
Components:	kubernetes-plugin
Created:	2019-03-22 16:03
Environment:	RHEL6, Java 8, Jenkins Master 2.138.4 running in Tomcat 8.5.30, Kubernetes Plugin 1.14.9, Folders Plugin 6.7, AWS EKS cluster 1.11+
Priority:	Major
Reporter:	Angel Bermudez

I have a Jenkins Master v2.138.4 running kubernetes plugin v1.14.9 connected to an AWS EKS cluster 1.11+.

I check "Restrict pipeline support to authorized folders" in the managed Jenkins page under the Kubernetes cloud config.
I then configure Kubernetes Pod Template with the Name, Namespace, and Label use the "Raw yaml for the Pod" section.
Then after, I purposely do not configure the folder containing my Jenkins Declarative pipeline.
When I click "Build Now" on my pipeline, the plugin does not seem to be Restricting my pipeline from running or using the Kubernetes Cloud.

The is also true when configuring the Kubernetes Pod and Container Template directly in the UI Jenkins manage page.

I read the instructions on the plugin READ.md: https://github.com/jenkinsci/kubernetes-plugin#restricting-what-jobs-can-use-your-configured-cloud

Jenkinsfile:

 
                                                                pipeline {
  agent { label('aws-jenkins-kube-agent') }

  options {
    ansiColor('xterm')
    timestamps()
    buildDiscarder logRotator(artifactDaysToKeepStr: '', artifactNumToKeepStr: '', daysToKeepStr: '10', numToKeepStr: '10')
    disableConcurrentBuilds()
  }

  stages {
    stage ("Run Maven"){
      steps {
        container('maven') {
          stage('Get Maven Version') {
            sh '''
              mvn -v
          '''
          }
        }
      }
    }
  }
} 
                                                            

Any thoughts?