jenkinsci / jenkinsci/gitlab-plugin

Disabling the option "Enable authentication for '/project' end-point" in Jenkins

Open
#1,585 0 comments 0 reactions 0 assignees View on GitHub
documentation
Dominant language
Java
Stars
1.4k
Forks
615
Avg merge
4h 32m
Merged PRs (30d)
10

Description

### Describe your use-case which is not covered by existing documentation.

We are working on a monorepo in gitlab which has 100s of branches. We use Jenkins for CI, and the tooling decision is made by different stakeholders and I don't want to go to the details of that. We use gitlab webhooks to trigger the builds in Jenkins when a new branch is pushed. The scanning of the branches take forever - almost 30 to 90 minutes. We disabled the checkbox: "Enable authentication for '/project' end-point" in manage Jenkins and boom the branch index scan is taking seconds now.

As per the documentation https://docs.gitlab.com/ee/integration/jenkins.html disabling this option allows anybody knowing the url of the hook to trigger a job. I tried to make the webhook POST call (as explained here: https://docs.gitlab.com/ee/integration/jenkins.html#with-a-webhook) by both enabling and disabling this option through Postman and I am able to make the calls. Can someone please help me understand what are the downsides of disabling this option?

Thanks.

### Reference any relevant documentation, other materials or issues/pull requests that can be used for inspiration.

https://github.com/jenkinsci/gitlab-plugin#disabling-authentication

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.