Jenkins overhaul

• Jenkins master and executor fleet are reproducible
• Everything is based on Ubuntu Bionic (or another LTS option?)
• Executors are disposable
• Windows executors are available, with documentation around how to utilize them
• Jenkins is reconfigured from scratch with seed-based pipelines only
• A mechanism is in place to ensure we're current on patches for core and plugins
• Measures are taken to broadly isolate Jenkins from the wider internet (cloudflare?)
• All reasonable attempts are made to follow best practices (config as code, reproducible/disposable, secure etc)
• Windows containers?
• Better protection from the broader internet (Cloudflare Access via Github?)
• Discover repos instead of hardcoding the list (org folder)
• Enable agent-master security subsystem
• Alternative swarm client configurations
• Enable full plugin and script security?

Ref:

• https://github.com/jenkinsci/jenkinsfile-runner