From f709c524e7fbeded54f153ee67adbc3fb1a83d0d Mon Sep 17 00:00:00 2001
From: Torsten Walter <torsten.walter@syncier.com>
Date: Mon, 2 Dec 2019 07:41:16 +0100
Subject: [PATCH] [stable/jenkins] enable agent master security (#19048)

Signed-off-by: Torsten Walter <torsten.walter@syncier.com>
---
 stable/jenkins/CHANGELOG.md           | 4 ++++
 stable/jenkins/Chart.yaml             | 2 +-
 stable/jenkins/templates/_helpers.tpl | 2 ++
 3 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/stable/jenkins/CHANGELOG.md b/stable/jenkins/CHANGELOG.md
index dda7f4ab3d..e18232365a 100644
--- a/stable/jenkins/CHANGELOG.md
+++ b/stable/jenkins/CHANGELOG.md
@@ -5,6 +5,10 @@ numbering uses [semantic versioning](http://semver.org).
 
 NOTE: The change log until version 1.5.7 is auto generated based on git commits. Those include a reference to the git commit to be able to get more details.
 
+## 1.9.5 Enable remoting security
+
+`Manage Jenkins` -> `Configure Global Security` -> `Enable Agent → Master Access Control` is now enabled via configuration as code plugin
+
 ## 1.9.4 Option to set existing secret with Google Application Default Credentials
 
 Google application credentials are kept in a file, which has to be mounted to a pod. You can set `gcpcredentials` in `existingSecret` as follows:
diff --git a/stable/jenkins/Chart.yaml b/stable/jenkins/Chart.yaml
index 43805e7d79..f1e35bf68d 100755
--- a/stable/jenkins/Chart.yaml
+++ b/stable/jenkins/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: jenkins
 home: https://jenkins.io/
-version: 1.9.4
+version: 1.9.5
 appVersion: lts
 description: Open source continuous integration server. It supports multiple SCM tools
   including CVS, Subversion and Git. It can execute Apache Ant and Apache Maven-based
diff --git a/stable/jenkins/templates/_helpers.tpl b/stable/jenkins/templates/_helpers.tpl
index e3f3f8b4f6..b9c51a7998 100644
--- a/stable/jenkins/templates/_helpers.tpl
+++ b/stable/jenkins/templates/_helpers.tpl
@@ -73,6 +73,8 @@ Returns configuration as code default config
 {{- define "jenkins.casc.defaults" -}}
 jenkins:
   disableRememberMe: false
+  remotingSecurity:
+    enabled: true
   mode: NORMAL
   numExecutors: {{ .Values.master.numExecutors }}
   projectNamingStrategy: "standard"