Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-69435

Scripts can not get approved

XMLWordPrintable

      Hi. In my case, there seems to be no way to "approve" a script.
      I am logged in as a Jenkins admin, I edit the script and save it, which should result in automatic approval of the script, that is what he message is saying me.

      The script edits get saved, but the script stays in the "not approved" state.
      As a result it can not be run in a job, it is annoying because I use e.g. a short script to deactivate a job after each run. I use that script in a lot of jobs and all of those jobs  end with an error state.

          [JENKINS-69435] Scripts can not get approved

          Artur Cichosz created issue -
          Artur Cichosz made changes -
          Summary Original: Not New: Scripts can not get approved
          Ioannis Moutsatsos made changes -
          Environment Original: Jenkins Jenkins 2.346.3 LTS, debian, JDK 8 New: Jenkins Jenkins 2.346.3 LTS, debian, JDK 8 Windows 2019, JDK11 Scritpler 3.5

          Ioannis Moutsatsos added a comment -

          Very annoying an unexpected behavior! Fortunately there is an equally annoying workaround.
          Go to Script approval console. Somehow unapproved scriptlets code appears in the list and you can approve it there.

          The same thing happens when you try to run an approved scriptlet after you edit it in the script UI.

          Every small edit requires that you

          1. run the edited scriptlet (fake run: since unapproved, it will not run)
          2. approve it in Script Approval 
          3. run it with the edits

          Ioannis Moutsatsos added a comment - Very annoying an unexpected behavior! Fortunately there is an equally annoying workaround. Go to Script approval console. Somehow unapproved scriptlets code appears in the list and you can approve it there. The same thing happens when you try to run an approved scriptlet after you edit it in the script UI. Every small edit requires that you run the edited scriptlet (fake run: since unapproved, it will not run) approve it in Script Approval  run it with the edits
          Ioannis Moutsatsos made changes -
          Labels New: 2.346.3 LTS
          Ioannis Moutsatsos made changes -
          Environment Original: Jenkins Jenkins 2.346.3 LTS, debian, JDK 8 Windows 2019, JDK11 Scritpler 3.5 New: Jenkins 2.361.1 LTS, Jenkins 2.346.3 LTS, debian, JDK 8 Windows 2019, JDK11 Scritpler 3.5
          Ioannis Moutsatsos made changes -
          Component/s New: script-security-plugin [ 18520 ]

          Filat added a comment -

          I'm uploading approvedScriptHashes in SHA-1 format to the server using jcasc . I can literally watch in the "jcasc view page" how when the scriptler page is activated, the latter takes all the hashes and converts them to sha-512. The problem is that after that, not a single script is actually approved. All scripts have green checkmarks, but inside the launch window there is a notification that the administrator must approve the script. How to get around or fix this?

          Filat added a comment - I'm uploading approvedScriptHashes in SHA-1 format to the server using jcasc . I can literally watch in the "jcasc view page" how when the scriptler page is activated, the latter takes all the hashes and converts them to sha-512. The problem is that after that, not a single script is actually approved. All scripts have green checkmarks, but inside the launch window there is a notification that the administrator must approve the script. How to get around or fix this?

            Unassigned Unassigned
            artur2000 Artur Cichosz
            Votes:
            2 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated: