Jenkins setup:
Version 2.401.1
Team, I have a jenkins configuration with controller and 20 jenkins agent nodes. Jenkins configuration files reside on an AWS EFS mount.
recently we faced an outage since Jenkins root config file and all job’s configuration file got changed automatically; which caused our SAML plugin failing the authentication and job configuration to pick old commits and deploy outdated code.
we aren’t able to find who changed the config.xml file, we have checked all system level logs and audit logs. can someone help - how else config.xml can be updated? can some agent change the config files on controller node, or any other possibility we should think of?