https://github.com/dev-sec/chef-jenkins-hardening

⛔ DEPRECATED: A secure jenkins installation
https://github.com/dev-sec/chef-jenkins-hardening

chef chef-cookbook devops hardening jenkins security

Last synced: 1 day ago
JSON representation

⛔ DEPRECATED: A secure jenkins installation

• Host: GitHub
• URL: https://github.com/dev-sec/chef-jenkins-hardening
• Owner: dev-sec
• License: apache-2.0
• Archived: true
• Created: 2014-06-16T09:57:12.000Z (over 10 years ago)
• Default Branch: master
• Last Pushed: 2019-07-23T12:31:59.000Z (over 5 years ago)
• Last Synced: 2024-08-02T06:14:51.702Z (3 months ago)
• Topics: chef, chef-cookbook, devops, hardening, jenkins, security
• Language: Ruby
• Homepage: http://dev-sec.io/
• Size: 34.2 KB
• Stars: 17
• Watchers: 13
• Forks: 6
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE

Awesome Lists containing this project

• DevSecOps - DEPRECATED/chef-jenkins-hardening

README

        
# Jenkins Hardening

This project is DEPRECATED and NO LONGER SUPPORTED. If you think this should really be supported, [reach out](https://dev-sec.io/community/) and we can discuss options.

This cookbook aims to provide a default jenkins setup that is secure. Specifically it

- installs jenkins behind nginx

- configures ssl for nginx

- configures user logins

- runs jenkins slaves on different servers

Currently this cookbook is work-in-progress and is not yet considered secure enough for production use.

## Default Plugins

Default Plugins can be overridden by

default['hardening']['jenkins']['plugins']

 - [ant](https://wiki.jenkins-ci.org/display/JENKINS/Ant+Plugin)

 - [build-timeout](https://wiki.jenkins-ci.org/display/JENKINS/Build-timeout+Plugin)

 - [credentials](https://wiki.jenkins-ci.org/display/JENKINS/Credentials+Plugin)

 - [git-client](https://wiki.jenkins-ci.org/display/JENKINS/Git+Client+Plugin)

 - [git] (https://wiki.jenkins-ci.org/display/JENKINS/Git+Plugin)

 - [github](https://wiki.jenkins-ci.org/display/JENKINS/Github+Plugin)

 - [github-api](https://wiki.jenkins-ci.org/display/JENKINS/GitHub+API+Plugin)

 - [jquery](https://wiki.jenkins-ci.org/display/JENKINS/jQuery+Plugin)

 - [matrix-auth](https://wiki.jenkins-ci.org/display/JENKINS/Matrix+Authorization+Strategy+Plugin)

 - [maven-plugin](https://wiki.jenkins-ci.org/display/JENKINS/Maven+Project+Plugin)

 - [metrics](https://wiki.jenkins-ci.org/display/JENKINS/Metrics+Plugin)

 - [rvm](https://wiki.jenkins-ci.org/display/JENKINS/RVM+Plugin)

 - [simple-theme-plugin](https://wiki.jenkins-ci.org/display/JENKINS/Simple+Theme+Plugin)

 - [swarm](https://wiki.jenkins-ci.org/display/JENKINS/Swarm+Plugin)

 - [windows-slaves](https://wiki.jenkins-ci.org/display/JENKINS/Windows+Slaves+Plugin)

## Jenkins Slaves

### Windows

https://wiki.jenkins-ci.org/display/JENKINS/Step+by+step+guide+to+set+up+master+and+slave+machines

# Usage

This cookbook is optimized for a usage with [chef-os-hardening](https://github.com/TelekomLabs/chef-os-hardening) and [chef-ssh-hardening](https://github.com/TelekomLabs/chef-ssh-hardening), but has no direct dependency. Therefore this cookbook is even happy without them.

# Test

```bash

# Install dependencies

gem install bundler

bundle install

# Do lint checks

bundle exec rake lint

# Kitchen test

bundle exec kitchen list

bundle exec kitchen test default-ubuntu-1204

```

## References

- [Securing Jenkins](http://slideshare.net/cloudbees/securing-jenkins)

## Contributing

See [contributor guideline](CONTRIBUTING.md).

## License and Author

* Author:: Christoph Hartmann 

* Author:: Trent Petersen 

* Author:: Deutsche Telekom AG

Licensed under the Apache License, Version 2.0 (the "License");

you may not use this file except in compliance with the License.

You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software

distributed under the License is distributed on an "AS IS" BASIS,

WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

See the License for the specific language governing permissions and

limitations under the License.