Jenkins 버전 업그레이드

Helm 으로 설치한 Jenkins 버전 업그레이드

• helm repo : https://charts.jenkins.io/
• Jenkins chart 버전: jenkins-5.6.4
• Jenkins 버전: 2.462.2

 

2.462.2 버전에서 보안취약성 발견으로 인하여 버전 업그레이드를 진행합니다.

Jenkins 2.462.2 core and libraries
Denial of service vulnerability in bundled json-lib
Multiple security vulnerabilities in Jenkins 2.478 and earlier, LTS 2.462.2 and earlier
Fixes for all of these issues are available. Update Jenkins now.

 

사전 준비사항

helm repo 업데이트

helm repo update

 

설치 가능한 버전 확인

helm search repo jenkins/jenkins --versions

NAME            CHART VERSION   APP VERSION     DESCRIPTION
jenkins/jenkins 5.7.26          2.479.2         Jenkins - Build great things at any scale! As t...
jenkins/jenkins 5.7.25          2.479.2         Jenkins - Build great things at any scale! As t...
jenkins/jenkins 5.7.24          2.479.2         Jenkins - Build great things at any scale! As t...
jenkins/jenkins 5.7.23          2.479.2         Jenkins - Build great things at any scale! As t...
jenkins/jenkins 5.7.22          2.479.2         Jenkins - Build great things at any scale! As t...
jenkins/jenkins 5.7.21          2.479.2         Jenkins - Build great things at any scale! As t...
jenkins/jenkins 5.7.20          2.479.2         Jenkins - Build great things at any scale! As t...
jenkins/jenkins 5.7.19          2.479.2         Jenkins - Build great things at any scale! As t...
jenkins/jenkins 5.7.18          2.479.2         Jenkins - Build great things at any scale! As t...
jenkins/jenkins 5.7.17          2.479.2         Jenkins - Build great things at any scale! As t...
jenkins/jenkins 5.7.16          2.479.2         Jenkins - Build great things at any scale! As t...
jenkins/jenkins 5.7.15          2.479.2         Jenkins - Build great things at any scale! As t..

 

기존 values 파일 백업

helm get values jenkins > jenkins-values.yaml

 

values 파일 수정

서비스 타입과 기존의 pvc를 그대로 이용하기 위해 existingClaim 필드 추가

serviceType: LoadBalancer # 운영중인 상황에 맞게 설정

persistence:
  accessMode: ReadWriteOnce
  annotations: {}
  dataSource: {}
  enabled: true
  labels: {}
  mounts: []
  size: 8Gi
  existingClaim: jenkins # exisingClaim 필드 추가
  storageClass: nfs-client
  volumes: []

 

helm upgrade

helm upgrade -n default jenkins jenkins/jenkins --version 5.7.26 -f jenkins-values.yaml

 

Credentials Plugin의 버전이 낮아 에러 발생

java.io.IOException: Failed to load: Folders Plugin (cloudbees-folder 6.975.v4161e479479f)
 - Update required: Credentials Plugin (credentials 1380.va_435002fa_924) to be updated to 1389.vd7a_b_f5fa_50a_2 or higher
        at hudson.PluginWrapper.resolvePluginDependencies(PluginWrapper.java:992)
        at hudson.PluginManager$2$1$1.run(PluginManager.java:581)
        at org.jvnet.hudson.reactor.TaskGraphBuilder$TaskImpl.run(TaskGraphBuilder.java:177)
        at org.jvnet.hudson.reactor.Reactor.runTask(Reactor.java:305)
        at jenkins.model.Jenkins$5.runTask(Jenkins.java:1195)
        at org.jvnet.hudson.reactor.Reactor$2.run(Reactor.java:221)
        at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:120)
        at jenkins.security.ImpersonatingExecutorService$1.run(ImpersonatingExecutorService.java:68)
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
        at java.base/java.lang.Thread.run(Unknown Source)

 

Credential Plugin 버전 수정

$JENKINS_HOME/plugins/credentials/META-INF (pv 경로)

MANIFEST.MF 파일 수정

Plugin-Version: 1389.vd7a_b_f5fa_50a_2

 

Jenkins 재기동

kubectl delete pods jenkins-0

 

Jenkins 버전 확인

helm list jenkins
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART           APP VERSION
jenkins         default         2               2024-12-25 02:42:28.166660098 +0900 KST deployed        jenkins-5.7.26  2.479.2