> Jenkins shouldn’t be near production All of which sounds completely reasonable to me, in many situations. Jenkins is the Wordpress of software development.

> Jenkins shouldn’t be near production All of which sounds completely reasonable to me, in many situations. Jenkins is the Wordpress of software development. It's gigantic state loop that runs plugins with no privilege separation. Giving your jenkins instance administrative credentials in production might very well be equivalent to giving root keys to that lone guy in Romania who authored that plugin you never audited. I can understand perfectly why that might not be desirable to everyone. .. which neatly leads on to > we can’t possibly put things live without QA being involved If you deploy stuff in production that never passes QA, why do you even have QA? To fix stuff later? If they are not empowered they will never have the chance to do a good job or have any pride in their work.