Skip to content

Kubernetes RBAC for Jenkins

Kubernetes RBAC (Role-Based Access Control) within the context of the Jenkins Helm chart manages the permissions required for the Jenkins controller and its agents to interact with the Kubernetes API.

Configuration

RBAC is enabled by default for this Helm chart^[400-devops-06-kubernetes-devops-helm-helm-jenkins-readme.md]. To disable this functionality, the rbac.create value must be set to false^[400-devops-06-kubernetes-devops-helm-helm-jenkins-readme.md].

Requirements for Features

Certain operational features, specifically the auto-reload capability for Configuration as Code (JCasC), explicitly require RBAC to be enabled^[400-devops-06-kubernetes-devops-helm-helm-jenkins-readme.md]. This is because the auxiliary container responsible for detecting changes needs permissions to watch Kubernetes ConfigMaps^[400-devops-06-kubernetes-devops-helm-helm-jenkins-readme.md].

Sources

  • 400-devops-06-kubernetes-devops-helm-helm-jenkins-readme.md