Update security.md

This commit is contained in:
antoniaklja 2019-01-10 23:50:53 +01:00
parent 039ee41e33
commit f8190d61ce
1 changed files with 8 additions and 2 deletions

View File

@ -21,9 +21,15 @@ The list below describes all the default security setting configured by the **je
If you would like to dig a little bit into the code, take a look [here](../pkg/controller/jenkins/configuration/base/resources/base_configuration_configmap.go). If you would like to dig a little bit into the code, take a look [here](../pkg/controller/jenkins/configuration/base/resources/base_configuration_configmap.go).
## Jenkins API access ## Jenkins API
**jenkins-operator** generates and configures Basic Authentication token for Jenkins go client stores it in a Kubernetes Secret. The **jenkins-operator** generates and configures Basic Authentication token for Jenkins go client and stores it in a Kubernetes Secret.
## Kubernetes
Kubernetes API permissions are limited by the following RBAC roles:
- [jenkins-operator role](../deploy/role.yaml)
- [Jenkins Master role](../pkg/controller/jenkins/configuration/base/resources/rbac.go)
## Report a Security Vulnerability ## Report a Security Vulnerability