jenkinsci / gitlab-plugin

A Jenkins plugin for interfacing with GitLab
https://plugins.jenkins.io/gitlab-plugin/
GNU General Public License v2.0
1.44k stars 612 forks source link

Disabling the option "Enable authentication for '/project' end-point" in Jenkins #1585

Open njchandu opened 10 months ago

njchandu commented 10 months ago

Describe your use-case which is not covered by existing documentation.

We are working on a monorepo in gitlab which has 100s of branches. We use Jenkins for CI, and the tooling decision is made by different stakeholders and I don't want to go to the details of that. We use gitlab webhooks to trigger the builds in Jenkins when a new branch is pushed. The scanning of the branches take forever - almost 30 to 90 minutes. We disabled the checkbox: "Enable authentication for '/project' end-point" in manage Jenkins and boom the branch index scan is taking seconds now.

As per the documentation https://docs.gitlab.com/ee/integration/jenkins.html disabling this option allows anybody knowing the url of the hook to trigger a job. I tried to make the webhook POST call (as explained here: https://docs.gitlab.com/ee/integration/jenkins.html#with-a-webhook) by both enabling and disabling this option through Postman and I am able to make the calls. Can someone please help me understand what are the downsides of disabling this option?

Thanks.

Reference any relevant documentation, other materials or issues/pull requests that can be used for inspiration.

https://github.com/jenkinsci/gitlab-plugin#disabling-authentication