You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
52 lines
1.6 KiB
52 lines
1.6 KiB
5 years ago
|
#!groovy
|
||
|
|
|
||
|
|
/*
|
||
|
|
* This script is based on the one found here:
|
||
|
|
* https://gist.github.com/eddie-knight/8f0dcb7422cb98d112b5244ea7600372
|
||
|
|
*/
|
||
|
|
|
||
|
|
import jenkins.model.*
|
||
|
|
import hudson.security.*
|
||
|
|
import jenkins.security.s2m.AdminWhitelistRule
|
||
|
|
import hudson.security.csrf.DefaultCrumbIssuer
|
||
|
|
import jenkins.security.s2m.AdminWhitelistRule
|
||
|
|
|
||
|
|
def instance = Jenkins.getInstance()
|
||
|
|
|
||
|
|
// Automate Admin Setup & Plugin Installs
|
||
|
|
def user = new File("/run/secrets/jenkins_admin_username").text.trim()
|
||
|
|
def pass = new File("/run/secrets/jenkins_admin_password").text.trim()
|
||
|
|
|
||
|
|
// Create Admin User
|
||
|
|
def hudsonRealm = new HudsonPrivateSecurityRealm(false)
|
||
|
|
hudsonRealm.createAccount(user, pass)
|
||
|
|
instance.setSecurityRealm(hudsonRealm)
|
||
|
|
|
||
|
|
// Set Auth to Full Control Once Logged In
|
||
|
|
def strategy = new FullControlOnceLoggedInAuthorizationStrategy()
|
||
|
|
instance.setAuthorizationStrategy(strategy)
|
||
|
|
|
||
|
|
// Lock Down Jenkins Security
|
||
|
|
instance.getInjector().getInstance(AdminWhitelistRule.class).setMasterKillSwitch(false)
|
||
|
|
|
||
|
|
// Disable remoting
|
||
|
|
// We are not currently using Jenkins CLI
|
||
|
|
//instance.getDescriptor("jenkins.CLI").get().setEnabled(false)
|
||
|
|
|
||
|
|
// Enable Agent to master security subsystem
|
||
|
|
instance.injector.getInstance(AdminWhitelistRule.class).setMasterKillSwitch(false);
|
||
|
|
|
||
|
|
// Disable jnlp
|
||
|
|
instance.setSlaveAgentPort(-1);
|
||
|
|
|
||
|
|
// CSRF Protection
|
||
|
|
instance.setCrumbIssuer(new DefaultCrumbIssuer(true))
|
||
|
|
|
||
|
|
// Disable old Non-Encrypted protocols
|
||
|
|
HashSet<String> newProtocols = new HashSet<>(instance.getAgentProtocols());
|
||
|
|
newProtocols.removeAll(Arrays.asList(
|
||
|
|
"JNLP3-connect", "JNLP2-connect", "JNLP-connect", "CLI-connect"
|
||
|
|
));
|
||
|
|
instance.setAgentProtocols(newProtocols);
|
||
|
|
|
||
|
|
instance.save()
|