<p><br>
I have updated Jenkins version with k8s pod, I download jenkins war and exec to pod then I replace war file. The last I restart pod (kubectl delete pod ....). In this process, I have disabled Jenkins login by change tab useSecurity in config.xml file to <B>false</B>.<br>
I access Jenkins GUI => Manage Jenkins > Configure Global Security and Enabled login <B>Logged-in users can do anything</B> and then I re-login. I got this error. <br></p>

<p>[The error:]
  [1]: <a href="https://i.stack.imgur.com/zFqPu.png" rel="nofollow noreferrer">https://i.stack.imgur.com/zFqPu.png</a> <br></p>

<p>Old Jenkins version : 2.121.3<br></p>

<p>New Jenkins version : 2.235 <br></p>

<p>Any suggestions?</p>

Nightt
<p>The Crumb is Jenkins way of CSRF protection. As of <a href="https://www.jenkins.io/doc/upgrade-guide/2.222/" rel="nofollow noreferrer">version 2.222</a> this protection has been enabled by default. The proper way of working with the CSRF crumbs is documented in <a href="https://support.cloudbees.com/hc/en-us/articles/219257077-CSRF-Protection-Explained" rel="nofollow noreferrer">CSRF protection explained</a>.</p>

<p>But since you are running without any security at all, you probably want to just disable CSRF protection at all:</p>

<blockquote>
  <p>Set the system property <code>hudson.security.csrf.GlobalCrumbIssuerConfiguration.DISABLE_CSRF_PROTECTION</code> to true on startup to disable CSRF protection as well as the configuration UI for it. This is an unsupported option and may be removed in the future.</p>
</blockquote>
