When adding confimap with jenkins agent xml , the new agent is not added and in jenkins logs i get error "anonymous is missing the Overall/Administer permission".

 

Error message from jenkins pod:

2026-01-15 10:49:09 INFO io.fabric8.jenkins.openshiftsync.ConfigMapInformer onAdd ConfigMap informer received add event for: jenkins-agent-maven-jdk21
2026-01-15 10:49:10 INFO io.fabric8.jenkins.openshiftsync.PodTemplateUtils addAgents Adding PodTemplate(s) for my-project
2026-01-15 10:49:10 INFO io.fabric8.jenkins.openshiftsync.PodTemplateUtils removePodTemplate Removing PodTemplate: maven-jdk21 in namespace: null
2026-01-15 10:49:10 INFO io.fabric8.jenkins.openshiftsync.PodTemplateUtils addPodTemplate Adding PodTemplate: maven-jdk21
2026-01-15 10:49:10 SEVERE io.fabric8.kubernetes.client.informers.impl.cache.SharedProcessor lambda$distribute$1 v1/namespaces/my-project/configmaps failed invoking io.fabric8.jenkins.openshiftsync.ConfigMapInformer@52abcf9a event handler: anonymous is missing the Overall/Administer permission
hudson.security.AccessDeniedException3: anonymous is missing the Overall/Administer permission
at hudson.security.ACL.checkPermission(ACL.java:80)
at hudson.security.AccessControlled.checkPermission(AccessControlled.java:52)
at PluginClassLoader for kubernetes//org.csanchez.jenkins.plugins.kubernetes.PodTemplateGroup.checkManagePermission(PodTemplateGroup.java:51)
at PluginClassLoader for kubernetes//org.csanchez.jenkins.plugins.kubernetes.KubernetesCloud.addTemplate(KubernetesCloud.java:889)
at PluginClassLoader for openshift-sync//io.fabric8.jenkins.openshiftsync.PodTemplateUtils.addPodTemplate(PodTemplateUtils.java:155)
at PluginClassLoader for openshift-sync//io.fabric8.jenkins.openshiftsync.PodTemplateUtils.addPodTemplate(PodTemplateUtils.java:229)
at PluginClassLoader for openshift-sync//io.fabric8.jenkins.openshiftsync.PodTemplateUtils.addAgents(PodTemplateUtils.java:435)
at PluginClassLoader for openshift-sync//io.fabric8.jenkins.openshiftsync.ConfigMapInformer.onAdd(ConfigMapInformer.java:78)
at PluginClassLoader for openshift-sync//io.fabric8.jenkins.openshiftsync.ConfigMapInformer.onAdd(ConfigMapInformer.java:36)
at PluginClassLoader for kubernetes-client-api//io.fabric8.kubernetes.client.informers.impl.cache.ProcessorListener$AddNotification.handle(ProcessorListener.java:107)
at PluginClassLoader for kubernetes-client-api//io.fabric8.kubernetes.client.informers.impl.cache.ProcessorListener.add(ProcessorListener.java:50)
at PluginClassLoader for kubernetes-client-api//io.fabric8.kubernetes.client.informers.impl.cache.SharedProcessor.lambda$distribute$0(SharedProcessor.java:91)
at PluginClassLoader for kubernetes-client-api//io.fabric8.kubernetes.client.informers.impl.cache.SharedProcessor.lambda$distribute$1(SharedProcessor.java:113)
at PluginClassLoader for kubernetes-client-api//io.fabric8.kubernetes.client.utils.internal.SerialExecutor.lambda$execute$0(SerialExecutor.java:67)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
at java.base/java.lang.Thread.run(Thread.java:1583)

 

Steps to reproduce:

1. While jenkins pod is up and running and in a ready state, add a new configmap for new agent template.
2. Jenkins plugin is unable to create the pod template inside jenkins due to lack of permission(anonymous is missing the Overall/Administer permission")

 

Jenkins and plugin versions:

Jenkins: 2.516.2 OS: Linux - 5.14.0-427.74.1.el9_4.x86_64 Java: 21.0.8 - Red Hat, Inc. (OpenJDK 64-Bit Server VM) — Office-365-Connector:5.2.0 ace-editor:1.1 ansicolor:1.0.6 ant:513.vde9e7b_a_0da_0f antisamy-markup-formatter:173.v680e3a_b_69ff3 apache-httpcomponents-client-4-api:4.5.14-269.vfa_2321039a_83 apache-httpcomponents-client-5-api:5.5-150.veb_76e719855b_ asm-api:9.8-135.vb_2239d08ee90 authentication-tokens:1.131.v7199556c3004 blueocean:1.27.19 blueocean-autofavorite:1.2.5 blueocean-bitbucket-pipeline:1.27.19 blueocean-commons:1.27.19 blueocean-config:1.27.19 blueocean-core-js:1.27.19 blueocean-dashboard:1.27.19 blueocean-display-url:2.4.4 blueocean-events:1.27.19 blueocean-git-pipeline:1.27.19 blueocean-github-pipeline:1.27.19 blueocean-i18n:1.27.19 blueocean-jwt:1.27.19 blueocean-personalization:1.27.19 blueocean-pipeline-api-impl:1.27.19 blueocean-pipeline-editor:1.27.19 blueocean-pipeline-scm-api:1.27.19 blueocean-rest:1.27.19 blueocean-rest-impl:1.27.19 blueocean-web:1.27.19 bootstrap5-api:5.3.5-1 bouncycastle-api:2.30.1.80-261.v00c0e2618ec3 branch-api:2.1217.v43d8b_b_d8b_2c7 caffeine-api:3.2.2-178.v353b_8428ed56 checks-api:370.vb_61a_c57328f3 cloudbees-bitbucket-branch-source:936.3.1 cloudbees-disk-usage-simple:256.v20ec4eb_884f1 cloudbees-folder:6.1026.ve06dfa_cf31c3 command-launcher:123.v37cfdc92ef67 commons-compress-api:1.28.0-1 commons-lang3-api:3.19.0-104.v12125f33a_255 commons-text-api:1.14.0-194.v804a_dc3a_1b_d8 conditional-buildstep:1.5.0 config-file-provider:988.v0461fcc2b_9d1 configuration-as-code:1995.v540b_50a_eb_0c1 configuration-as-code-groovy:1.1 credentials:1447.v4cb_b_539b_5321 credentials-binding:696.v256688029804 dark-theme:574.va_19f05d54df5 data-tables-api:2.2.2-1 display-url-api:2.217.va_6b_de84cc74b_ docker-commons:457.v0f62a_94f11a_3 durable-task:587.v84b_877235b_45 echarts-api:5.6.0-5 eddsa-api:0.3.0.1-19.vc432d923e5ee email-ext:1876.v28d8d38315b_d favorite:2.237.v79163ca_8b_892 font-awesome-api:6.7.2-1 generic-webhook-trigger:2.4.1 ghprb:1.42.2 git:5.7.0 git-client:6.4.0 git-server:137.ve0060b_432302 github:1.43.0 github-api:1.321-488.v9b_c0da_9533f8 github-branch-source:1848.v42f74f7f4500 github-pullrequest:0.7.2 google-oauth-plugin:1.335.ve6de40e2db_18 groovy:497.v7b_061a_a_de65d gson-api:2.13.2-173.va_a_092315913c handy-uri-templates-2-api:2.1.8-36.v85e4cb_234a_13 htmlpublisher:427 http_request:1.20 instance-identity:203.v15e81a_1b_7a_38 ionicons-api:94.vcc3065403257 jackson2-api:2.20.0-411.v6ef8fdee4fe9 jacoco:3.3.7 jakarta-activation-api:2.1.3-2 jakarta-mail-api:2.1.3-3 javadoc:327.vdfe586651ee0 javax-activation-api:1.2.0-8 javax-mail-api:1.6.2-11 jaxb:2.3.9-133.vb_ec76a_73f706 jdk-tool:83.v417146707a_3d jenkins-design-language:1.27.19 jersey2-api:2.45-154.v4ded3dc34f81 jira:3.16 jjwt-api:0.11.5-120.v0268cf544b_89 job-dsl:1.92 jobcacher:764.v098c635e4315 joda-time-api:2.14.0-127.v7d9da_295a_d51 jquery3-api:3.7.1-3 jsch:0.2.16-95.v3eecb_55fa_b_78 json-api:20250517-173.v596efb_962a_31 json-path-api:2.9.0-148.v22a_7ffe323ce jsoup:1.20.1-46.ve5f1416988c2 junit:1354.v5b_348580de7f kubernetes:4371.vb_33b_086d54a_1 kubernetes-client-api:7.3.1-256.v788a_0b_787114 kubernetes-credentials:206.vde31a_b_0f71a_c lockable-resources:1349.v8b_ccb_c5487f7 mailer:489.vd4b_25144138f mapdb-api:1.0.9-44.va_1e1310c9118 matrix-auth:3.2.6 matrix-project:849.v0cd64ed7e531 maven-plugin:3.26 mercurial:1309.v6802b_f0efb_b_9 metrics:4.2.33-484.v2fcd689980d1 mina-sshd-api-common:2.16.0-167.va_269f38cc024 mina-sshd-api-core:2.16.0-167.va_269f38cc024 momentjs:1.1.1 mstest:1.0.5 oauth-credentials:0.657.v7d8dd90b_0382 okhttp-api:4.11.0-189.v976fa_d3379d6 openshift-client:1.1.0.437.v08c5053d5fe2 openshift-login:1.1.0.263.v2e0ddecf8b_25 openshift-sync:1.1.0.825.v30618768da_42 oss-symbols-api:324.v432cce4172ca_ pam-auth:1.12 parameterized-trigger:859.vb_e3907a_07a_16 pipeline-build-step:567.vea_ce550ece97 pipeline-graph-analysis:237.v2b_75640ca_888 pipeline-graph-view:642.v39f37c8e1e70 pipeline-groovy-lib:752.vdddedf804e72 pipeline-input-step:534.v352f0a_e98918 pipeline-milestone-step:138.v78ca_76831a_43 pipeline-model-api:2.2265.v140e610fe9d5 pipeline-model-definition:2.2265.v140e610fe9d5 pipeline-model-extensions:2.2265.v140e610fe9d5 pipeline-rest-api:2.38 pipeline-stage-step:322.vecffa_99f371c pipeline-stage-tags-metadata:2.2265.v140e610fe9d5 pipeline-stage-view:2.38 pipeline-utility-steps:2.19.0 plain-credentials:199.v9f8e1f741799 plugin-util-api:6.1167.v022176c7e0ca_ prism-api:1.30.0-609.vf0a_df102d9a_f prometheus:819.v50953a_c560dd pubsub-light:1.19 run-condition:243.v3c3f94e46a_8b_ scm-api:709.v6c27075a_b_1c7 script-security:1378.vf25626395f49 snakeyaml-api:2.3-125.v4d77857a_b_402 sonar:2.18 sse-gateway:1.28 ssh-agent:386.v36cc0c7582f0 ssh-credentials:361.vb_f6760818e8c ssh-slaves:3.1071.v0d059c7b_c555 sshd:3.353.v2b_d33c46e970 structs:353.v261ea_40a_80fb_ subversion:1287.vd2d507146906 test-results-analyzer:309.vda_3a_a_f100542 theme-manager:319.v9193461f9671 timestamper:1.30 token-macro:444.v52de7e9c573d trilead-api:2.209.v0e69b_c43c245 uno-choice:2.8.8 variant:70.va_d9f17f859e0 workflow-api:1384.vdc05a_48f535f workflow-basic-steps:1079.vce64b_a_929c5a_ workflow-cps:4209.v83c4e257f1e9 workflow-cps-global-lib:615.vb_b_0664a_b_19f3 workflow-durable-task-step:1452.v0ee719c104a_7 workflow-job:1540.v295eccc9778f workflow-multibranch:806.vb_b_688f609ee9 workflow-scm-step:437.v05a_f66b_e5ef8 workflow-step-api:710.v3e456cc85233 workflow-support:989.va_20a_1a_57710a_