API keys and secrets are difficult to handle safely, and probably something you avoid thinking about. In this post I’ll show how the new AWS Secrets Manager Credentials Provider plugin allows you to marshal your secrets into one place, and use them securely from Jenkins. When CI/CD pipelines moved to the public cloud, credential management did not evolve with them. If you’re in this situation,...

Table of Contents Matrix building with scripted pipeline Screenshot of matrix pipeline Adding static choices Adding dynamic choices Full pipeline example with dynamic choices Background: How does it work? Exposing a shared library pipeline step Summary With the recent announcement about matrix building you can perform Matrix builds with declarative pipeline. However, if you must use scripted pipeline, then I’m going to cover how to matrix build platforms and tools using scripted pipeline. The examples...

This is a speaker blog post for a DevOps World | Jenkins World 2019 talk in Lisbon, Portugal and has been posted in line with NCC Group responsible disclosure policy. Related Jenkins security advisories: 2017-11-08, 2017-11-16, 2018-06-25, 2018-07-30, 2018-09-25, 2019-02-19, 2019-03-06, 2019-03-25, 2019-04-03, 2019-04-17, 2019-08-07, 2019-09-12, 2019-10-01, 2019-10-16, 2019-10-23. Some of the vulnerabilities have been announced without a fix, see Jenkins Security Spring Cleaning 2019. The most of the announced vulnerabilities are fixed at the moment of this blogpost publishing. Come join us...

In addition to WAR files and Docker images, the Jenkins project provides native installers for each weekly and LTS release. There are installers available for Linux distributions, Windows, macOS and other operating systems. There are also installers provided by third parties. You can find the list of these installers on the Downloads page. In this blog post, we announce the upcoming deprecation of the macOS native installer. We will...

I often find myself needing to run the same actions on a bunch of different configurations. Up to now, that meant I had to make multiple copies of the same stages in my pipelines. When I needed to make changes, I had to make the same changes in multiple places throughout my pipeline. Maintaining even a small number of configuration was difficult for larger pipelines. Declarative Pipeline 1.5.0-beta1...

Managing any software presents its own unique challenges. Jenkins controllers are no exception. For example, How do you keep a finger on the pulse of everything going on in your Jenkins environment? Are you looking at every new defect opened in the issue tracker? How do you make sure that your controllers or agents don’t silently fail? Are you monitoring its logs? All of its internal...

The Jenkins community is conducting the 2019 elections for Board and Officer positions. The call for nominations has concluded. We received many nominations. Based on the people who are willing to accept their nomination and the uncontested officer positions, we will have 3 votes: A vote to elect 3 board members A vote to elect the Jenkins security officer A vote to elect the Jenkins events officer Candidates Each candidate has provided...

Context You have been tasked with managing the Jenkins instance for the highest grossing mobile game in the world. You learn that this involves helping the game studio iterate their work against eight different target platforms, each with their SDK, on four different main pipelines, plus a lot of extra auxiliary jobs. And, of course, the studio wants all of this to go smoothly, in order to maintain a...