Jenkins security audit - Githubissues

icgc-argo / roadmap

Place to review/request new features and new tools on ICGC-ARGO's roadmap

1 stars 0 forks source link

Open akachru-github opened 3 years ago

akachru-github commented 3 years ago

audit jenkins service account security permissions inside kubs cluster.
if you run a job from jenkins, you have too much power at the moment. Cluster admin permissions
Want to reduce this down to a subset of namespaces, more controlled.
- Restrict access to ingress from the jenkins namespace.

akachru-github commented 3 years ago

@henro001 , @yalturmes

akachru-github commented 3 years ago

@henro001 is this something that will be covered by your work with Jenkins here: https://github.com/icgc-argo/roadmap/issues/704?