Credential types and storage in Jenkins - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of credentials in Jenkins?

Credentials in Jenkins store sensitive information like passwords, tokens, or keys securely to allow Jenkins jobs to access external systems without exposing secrets.

beginner

Name three common types of credentials supported by Jenkins.

Jenkins supports Username and Password, Secret Text, and SSH Username with Private Key as common credential types.

intermediate

How does Jenkins store credentials securely?

Jenkins encrypts credentials and stores them in its internal credentials store, which is protected by Jenkins' security settings and file system permissions.

intermediate

What is the difference between 'Secret Text' and 'Username and Password' credential types in Jenkins?

'Secret Text' stores a single secret string like an API token, while 'Username and Password' stores a pair of username and password for authentication.

intermediate

Where can Jenkins credentials be scoped to control their availability?

Credentials in Jenkins can be scoped globally (available to all jobs) or to specific folders or pipelines to limit access.

Which Jenkins credential type would you use to store an SSH private key?

A Certificate

B Secret Text

C Username and Password

D SSH Username with Private Key

The 'SSH Username with Private Key' credential type is designed specifically to store SSH private keys for authentication.

Where are Jenkins credentials stored?

A In environment variables only

B In plain text files on the Jenkins server

C Encrypted in Jenkins internal credentials store

D On the user's local machine

Jenkins encrypts credentials and stores them securely in its internal credentials store on the server.

What is the main benefit of scoping credentials in Jenkins?

A To limit credential access to specific jobs or folders

B To speed up Jenkins builds

C To make credentials available to all users

D To store credentials in plain text

Scoping credentials limits their availability to specific jobs or folders, improving security by reducing exposure.

Which credential type is best for storing an API token in Jenkins?

A Username and Password

B Secret Text

C SSH Username with Private Key

D Certificate

Secret Text is used to store single secret strings like API tokens.

Can Jenkins credentials be shared between different pipelines?

A Yes, if credentials are scoped globally or to a shared folder

B No, credentials are always private to one pipeline

C Only if stored in environment variables

D Only if manually copied

Credentials scoped globally or to a shared folder can be accessed by multiple pipelines.

Explain the different types of credentials Jenkins supports and when to use each.

Think about what kind of secret you need to store and how Jenkins uses it.

Describe how Jenkins stores credentials securely and how scoping affects their availability.

Consider both storage and access control.