Jenkins pipeline fails on script approval, although it was approved

Question

I have a pipeline which fails on script approval:

Scripts not permitted to use method org.jenkinsci.plugins.workflow.support.actions.EnvironmentAction getEnvironment. Administrators can decide whether to approve or reject this signature.
[Pipeline] End of Pipeline
[BFA] Scanning build for known causes...
[BFA] No failure causes found
[BFA] Done. 0s
[JobCompletedListener] Build result is: FAILURE
org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: Scripts not permitted to use method org.jenkinsci.plugins.workflow.support.actions.EnvironmentAction getEnvironment

I went to in scriptApproval screen, approved the below:

signature: method org.jenkinsci.plugins.workflow.support.steps.build.RunWrapper getRawBuild     
signature: method java.net.URL getProtocol
signature: method java.lang.Throwable printStackTrace
signature: method org.jenkinsci.plugins.workflow.support.actions.EnvironmentAction getEnvironment

but on the next run I'm getting the exact same error, and approval request in scriptApproval screen, comes up again. any idea what is the root cause of this behavior? is there a workaround for it?

Jenkins is running as a container, and the Security plugin version is 1.60. BTW, the same job works perfect on other Jenkins which is VM

@Alex it runs groovy file from bitbucket. I don't have the option of disabling the sandbox — arielma, Mar 03 '20 at 15:40
Can you test it directly in jenkins once to see if you’re having the same issue? — Alex, Mar 03 '20 at 17:22
I don't think this is the issue, as it works as well on other Jenkins. the only difference is that the other one is VM, while this is a container. — arielma, Mar 03 '20 at 22:17

score 1 · Accepted Answer · answered Mar 09 '20 at 18:28

1

The issue was with the wrong UID and GID of the user. after I've changed it from jenkins to 1000 1000 recursively, issue solved.

answered Mar 09 '20 at 18:28

arielma

339
2
9
21

Can you elaborate? I experience the same issue. UID GID of user where? in the filesystem? can you explain? – Moshe Sep 30 '20 at 13:35

Jenkins pipeline fails on script approval, although it was approved

1 Answers1