Securing Jenkins - Documentation

Andrew Mercer

▶ Docs
- ▶ Linux
  - ▶ Bash
    - Bash one-liners
  - ▶ Linux Core Subsystem
    - ▶ Bash And Builtins
      - Readme
    - ▶ Coreutils
      - or
    - ▶ Util Linux
      - etc.
      - ▶ Ionice
        
        Readme
      - ▶ Logger
        
        Test inserting log messages into logging stream
      - ▶ Rename
        
        Rename files
  - ▶ Linux Desktop
    - Linux fun stuff
  - ▶ Linux Distros
    - ▶ Android
      - Backup Android Phone
    - ▶ Debian And Debian Based
      - ▶ Ubuntu
        
        Install Ubuntu Server
    - ▶ OpenWrt
    - ▶ Rhel And Rhel Based
      - ▶ AlmaLinux
        
        Install Almalinux
      - ▶ Fedora
        
        Upgrading Fedora
      - ▶ Red Hat Satellite
        
        ▶ Hammer
      - ▶ Rocky Linux
    - ▶ Windows Subsystem for Linux Wsl
      - Install WSL
  - ▶ Linux Filesystems
  - ▶ Linux from scratch (LFS)
    - Home
  - ▶ Linux high availability
    - ▶ Corosync
      - Home
  - ▶ Linux Networking
  - ▶ Linux tools
    - Fdisk
    - History
- ▶ Cloud
  - ▶ Amazon Web Services (AWS)
  - ▶ Azure
    - ▶ Azure certification
    - ▶ Azure compute infrastructure
      - Azure virtual machines
      - Home
    - ▶ Azure Container apps
    - ▶ Azure Container instances
    - ▶ Azure Front Door
      - Azure Front Door best practices
      - Home
    - ▶ Azure Functions
      - Home
    - ▶ Azure Key Vault
    - ▶ Azure Kubernetes services
      - AKS troubleshooting
      - Home
    - ▶ Azure Management and Governance
    - ▶ Azure Monitor
      - ▶ Azure Application Insights
        
        Diagrams
        
        Resources
      - Readme
    - ▶ Azure SQL
      - Azure SQL Hyperscale
      - ▶ Lorem
        
        ▶ Ipsum
        
        Ipsum
    - ▶ Azure Traffic Manager
      - Home
    - ▶ Azure Virtual Network (VNET)
    - ▶ Azure VPN Gateway
      - Create an AWS to Azure site-to-site VPN
    - ▶ Bicep
      - Home
    - Install the Azure cli tool
  - Cloud provider service equivalents
  - Create an AWS to Azure site-to-site VPN
  - ▶ Digital Ocean
    - Use CDROM
  - ▶ Google Cloud Platform (GCP)
    - Install the GCP gcloud cli tool
    - ▶ Secret Manager
      - ▶ Lorem
        
        ▶ Ipsum
        
        Ipsum
  - ▶ Hetzner
    - Home
  - ▶ OpenStack
    - Home
  - Well-Architected Framework
- ▶ Infrastructure as Code (IaC)
  - ▶ Ansible
  - ▶ Kickstart
  - ▶ Pulumi
    - Pulumi
  - ▶ Terraform
- ▶ Observability
  - ▶ Elasticsearch
    - ▶ Index Lifecycle Management Ilm
      - Steady state
    - ▶ Install Elasticsearch
      - Install Elasticsearch in a container
      - Install Elasticsearch with RPM
  - ▶ Filebeat
  - ▶ Grafana
    - Home
  - ▶ LGTM
    - ▶ Grafana
      - Home
    - Home
    - ▶ Loki
      - Home
    - ▶ Mimir
      - Home
    - ▶ Tempo
      - Home
  - ▶ Logstash
    - Home
  - ▶ Loki
    - Home
  - ▶ Mimir
    - Home
  - ▶ Monit
    - Home
  - ▶ Opensearch
  - ▶ Prometheus and Grafana
    - Home
  - ▶ Tempo
    - Home
  - ▶ Vector
- ▶ CI CD
  - ▶ Jenkins
    - Install Jenkins
    - Securing Jenkins
  - Software Release Strategies
- ▶ Infrastructure
  - ▶ Cobbler
  - ▶ Domain Name System (DNS)
    - ▶ BIND
    - ▶ CoreDNS
      - CoreDNS
    - ▶ DNS Explained
    - ▶ DNS Providers
      - ▶ Namcheap
        
        Create Namecheap DNS records
    - ▶ Dnsmasq
      - dnsmasq
    - ▶ DNSSEC
    - ▶ OctoDNS
    - ▶ PiHole
      - PiHole
    - ▶ Systemd Resolved
      - systemd-resolved
    - ▶ Unbound
      - Unbound
  - ▶ Kernel-based virtual machine (KVM)
  - ▶ Mail
- ▶ Site Reliability
- ▶ CMS
- ▶ Containers
  - ▶ Docker
    - Docker logs
    - Docker run
- ▶ Desktop
  - ▶ Applications
    - ▶ Audacity
      - Create a ringtone
    - ▶ Bruno
      - Configure Bruno
      - Install Bruno
- ▶ DevOps
- ▶ Distributed Social Networking
  - ▶ AT Protocol
    - AT Protocol
  - ▶ Bluesky
    - Bluesky
  - ▶ Mastodon
    - Install Mastdon
  - ▶ Matrix
    - Matrix
- ▶ Freebsd
  - ▶ OPNsense
- ▶ Jellyfin
- ▶ Markdown
  - Markdown_formatting
- ▶ Message Queues
  - ▶ RabbitMQ
    - Home
- ▶ Networking
  - ▶ CCNA exam
    - Home
  - ▶ Network monitoring
    - Port mirroring
    - Tap devices
- ▶ Project management
  - ▶ OpenProject
    - Reset OpenProject admin password
- ▶ Quantum Computing
  - Basic Tenets of Quantum Computing
- ▶ Relational Database Management System (RDBMS)
  - ▶ Galera
    - Create Galera cluster
    - Home
  - ▶ MariaDB and MySQL
  - ▶ PostgreSQL
    - Home
    - Postgresql HA Citus
- ▶ Security
  - ▶ KeyCloak
    - Install Keycloak
    - Keycloak integration with Jenkins
  - ▶ Lets Encrypt
    - Create a Let's Encrypt wildcard certificate
  - ▶ Secret management
    - ▶ Infisical
      - Home
    - ▶ Vault
- ▶ Software architecture
- ▶ Software development
- ▶ Technical Writing
- ▶ Version control
- ▶ Web
  - ▶ Apache
    - Home
  - ▶ Haproxy
    - Home
  - ▶ Nginx
    - Home
    - Nginx web server
  - ▶ Traefik
    - Home
- ▶ Windows
  - ▶ Windows Desktop
    - Add App to Startup
  - ▶ Windows Server
    - Home
- ▶ Blockchain
  - ▶ Cosmos
    - Home
  - ▶ Ethereum
    - Home
  - Home
- ▶ Artifical Intelligence (AI)
  - GenAI's Environmental Impact
  - Running Generative AI Models Locally
Getting Started
▶ Resume
- Resume
▶ Ecology
▶ Food and Drink
▶ Music
▶ Philosophy

Controller isolation / distributed builds¶

https://www.jenkins.io/doc/book/security/controller-isolation

Install build agent(s)¶

on this page

Controller isolation / distributed builds
- Install build agent(s)