Credential scoping (global, folder) in Jenkins - Mini Project: Build & Apply

Credential Scoping in Jenkins: Global vs Folder

📖 Scenario: You are managing Jenkins credentials for a team. Some credentials should be available to all projects, while others should only be accessible within a specific folder to keep them secure.

🎯 Goal: Learn how to create and scope Jenkins credentials globally and within a folder, then verify their accessibility.

📋 What You'll Learn

Create a global credential in Jenkins

Create a folder-scoped credential in Jenkins

Access and list credentials in the global scope

Access and list credentials in a specific folder scope

💡 Why This Matters

🌍 Real World

In real Jenkins environments, credential scoping helps teams control who can access sensitive information like passwords or tokens, reducing security risks.

💼 Career

Understanding credential scoping is essential for Jenkins administrators and DevOps engineers to manage secrets securely and comply with best practices.

1

Create a global credential

Create a Jenkins credential with ID global-cred and description Global Credential in the global scope using the Jenkins CLI command jenkins-cli.jar. Use username admin and password admin123.

Jenkins

# Use Jenkins CLI to create a global credential
# Your code here

Need a hint?

Use Jenkins CLI with an XML file defining the credential. The scope tag should be GLOBAL.

2

Create a folder-scoped credential

Create a Jenkins folder named ProjectFolder. Then create a credential with ID folder-cred and description Folder Credential scoped to ProjectFolder using Jenkins CLI and XML.

Jenkins

# Create folder ProjectFolder and add folder-scoped credential
# Your code here

Need a hint?

Create the folder first, then use the folder's credentials store path to add the credential with scope FOLDER.

3

List global credentials

Use Jenkins CLI to list all credentials in the global scope and verify that global-cred is present.

Jenkins

# List global credentials
# Your code here

Need a hint?

Use the Jenkins CLI list-credentials command with the global system scope.

4

List folder credentials

Use Jenkins CLI to list all credentials in the ProjectFolder folder scope and verify that folder-cred is present.

Jenkins

# List credentials in ProjectFolder
# Your code here

Need a hint?

Use the Jenkins CLI list-credentials command with the folder scope path.