Trust model for CloudBees CI on modern cloud platforms


In the CloudBees CI on modern cloud platforms trust model, Managed Master administrators are trusted, but build agents are not trusted.


Managed Masters can only manage build agents in another namespace so that they can’t affect the runtime of other masters, but they can interfere with builds started by other masters. Build agents can be scheduled only with service accounts that are defined in the other namespace.


  • One namespace with operations center and Managed Masters

  • One namespace with all build agents

CloudBees recommends the following additional security considerations:


  • Deny team members from having administrative rights to their Managed Masters. This enables Managed Masters to be used as a security boundary between teams.


