Loading...

XML

Word

Printable

Type: Sub-task
Resolution: Done
Priority: Undefined
Fix Version/s: OpenShift Jenkins LTS 2.504.2
Affects Version/s: 4.18
Component/s: Jenkins, jenkins-agent-base
Labels:
None

Blocked:
False
Blocked Reason:

Hide

None

Show
None
Ready:
False
Intelligence Requested:
Market:

Sprint:
Sprint 265, Sprint 266, Sprint 269

SFDC Cases Links:
SFDC Cases Open:
SFDC Cases Counter:

Recently, we raised Jenkins PR #1912 with the following changes

Bump jenkins version to 2.504.2 to resolve CVE-2025-1948 CVE-2025-22228
Bump json-path-api plugin to resolve CVE-2024-57699
Bump base plugins to latest available version

however, the jenkins-sync-plugin CI test `TestConfigMapPodTemplate` failing with the following error in Jenkins pod logs.

2025-06-02 06:15:34 SEVERE  io.fabric8.kubernetes.client.informers.impl.cache.SharedProcessor lambda$distribute$1 v1/namespaces/jenkins-sync-plugin-test-namespace-c77d7/configmaps failed invoking io.fabric8.jenkins.openshiftsync.ConfigMapInformer@7969f376 event handler: anonymous is missing the Overall/Administer permission
hudson.security.AccessDeniedException3: anonymous is missing the Overall/Administer permission
        at hudson.security.ACL.checkPermission(ACL.java:80)
        at hudson.security.AccessControlled.checkPermission(AccessControlled.java:52)
        at PluginClassLoader for kubernetes//org.csanchez.jenkins.plugins.kubernetes.PodTemplateGroup.checkManagePermission(PodTemplateGroup.java:51)
        at PluginClassLoader for kubernetes//org.csanchez.jenkins.plugins.kubernetes.KubernetesCloud.addTemplate(KubernetesCloud.java:853)
        at PluginClassLoader for openshift-sync//io.fabric8.jenkins.openshiftsync.PodTemplateUtils.addPodTemplate(PodTemplateUtils.java:155)
        at PluginClassLoader for openshift-sync//io.fabric8.jenkins.openshiftsync.PodTemplateUtils.addPodTemplate(PodTemplateUtils.java:229)
        at PluginClassLoader for openshift-sync//io.fabric8.jenkins.openshiftsync.PodTemplateUtils.addAgents(PodTemplateUtils.java:435)
        at PluginClassLoader for openshift-sync//io.fabric8.jenkins.openshiftsync.ConfigMapInformer.onAdd(ConfigMapInformer.java:78)
        at PluginClassLoader for openshift-sync//io.fabric8.jenkins.openshiftsync.ConfigMapInformer.onAdd(ConfigMapInformer.java:36)
        at PluginClassLoader for kubernetes-client-api//io.fabric8.kubernetes.client.informers.impl.cache.ProcessorListener$AddNotification.handle(ProcessorListener.java:103)
        at PluginClassLoader for kubernetes-client-api//io.fabric8.kubernetes.client.informers.impl.cache.ProcessorListener.add(ProcessorListener.java:50)
        at PluginClassLoader for kubernetes-client-api//io.fabric8.kubernetes.client.informers.impl.cache.SharedProcessor.lambda$distribute$0(SharedProcessor.java:91)
        at PluginClassLoader for kubernetes-client-api//io.fabric8.kubernetes.client.informers.impl.cache.SharedProcessor.lambda$distribute$1(SharedProcessor.java:114)
        at PluginClassLoader for kubernetes-client-api//io.fabric8.kubernetes.client.utils.internal.SerialExecutor.lambda$execute$0(SerialExecutor.java:58)
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
        at java.base/java.lang.Thread.run(Thread.java:1583)