[improvement] - Add option to add scriptapproval hashes value on helm chart

[jenkinsci]

[improvement] - Add option to add scriptapproval hashes value on helm chart

[jfrabaute]

Hi,

Here is a PR which might be related to this: #105

[ofir-elementor]

please open this there is no option to add approvedScriptHashes

[davidreis97]

@torstenwalter #105 does not close this issue, as this issue relates to the approvedScriptHashes field and #105 only enables the scriptApproval field.

[torstenwalter]

Do you know if we could configure script approvals via JCasC.
If so then I would prefer to configure it with that as we plan to remove all xml configuration (#10).

You can test that already if you configure it via configScripts like the example below:

master:
  JCasC:
    enabled: true
    defaultConfig: true
    configScripts:
      welcome-message: |
        jenkins:
          systemMessage: Welcome to our CI\CD server.

[ricardojdsilva87]

@torstenwalter, not sure if you can create the xml file using the CASC feature, since the scriptApproval.xml file is built during the deployment, I'm not sure if it would be overwritten

[torstenwalter]

I haven't tried it, but it looks quite promising.

jenkinsci/script-security-plugin#233 (comment)

For anybody searching current working configuration is under security. See here.

security:
scriptApproval:
approvedSignatures:
- method java.net.URI getHost
And it works for me on Jenkins 2.190, casc plugin 1.36 and Script Security plugin 1.68.

@ricardoespsanto Could you verify if that works? If so then it would be useful to document it.

[torstenwalter]

#105 actually closes this ;-)

[pete-leese]

Did you ever find a solution? I still see that this support for approvedScriptHashes has not been implemented.

[chenshap]

did you find a resolution for approvedScriptHashes?