Controlling who can generate Support bundles

By default, only Jenkins administrators can generate support bundles. The CloudBees Support Plugin defines an additional security permission within Jenkins (CloudBees Support/DownloadBundle). You can assign this permission to any users that you want to be able to generate support bundles, even the Anonymous user. The content of such bundles can be useful in diagnosing authentication issues that specific users are having.

Note

Our general recommendation is only to allow trusted users to generate support bundles. Enabling the anonymous user to generate a bundle should be something that is time bounded and used specifically to obtain a bundle from a user who is having issues with authentication.

Note

In order to reduce the possibility of the support plugin from leaking confidential information about your Jenkins installation, when a non-administrator generates a support bundle, certain specific components are not available for selection. For example, the Environment variables, System properties and Thread dumps components are disabled (Figure 22.2, “Generating a bundle as a user who is not a Jenkins administrator”) as these components tend to include information that is often not for general consumption.

Figure 22.2. Generating a bundle as a user who is not a Jenkins administrator

generate restricted