Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Repo info
Activity
Joseph Petersen
@jetersen
@timja @oleg-nenashev let it :ship:? :laughing:
Suryatej Yaramada
@yrsurya
A quick question who are using JCAC plugin to build their Jenkins , how youguys are deploying jenkins initially ? I had a helm chart for Jenkins and want to deploy on EKS clusters. for application helm charts using jenkins we are going to deploy but for deploying jenkins helm chart how I can achieve this any thoughts ?
Tim Jacomb
@timja
do you mean the initial jenkins deployment?
we use fluxcd
https://github.com/hmcts/cnp-flux-config/blob/master/k8s/mgmt-sandbox/cluster-00/jenkins/jenkins.yaml
@yrsurya
Suryatej Yaramada
@yrsurya
yeah initial deployment for Jenkins, right now I deployed dev env of Jenkins from my local but like to have a gitops jenkins , I think spinnaker which we can achieve this , will go through fluxcd docs. Thanks @timja
Joseph Petersen
@jetersen
:sob: @oleg-nenashev making it more difficult to automate Jenkins. With the changes to the CrumbIssuer we can no longer generate a API token on the fly when we spin up our test setup :sob:
Time to explore other options for generating an API token for a user.
Tim Jacomb
@timja
what do you need the api token for?
which changes?
Joseph Petersen
@jetersen
Figured out we needed some changes to our code. It needs to retrieve the session id due to: https://jenkins.io/doc/upgrade-guide/2.176/#SECURITY-626
Oleg Nenashev
@oleg-nenashev
CC @Wadeck for the crumb token
do we have a meeting today? If so, I will prepare Zoom
Jon Brohauge
@jonbrohauge
was just going to ask...
Tim Jacomb
@timja
Yes
Meeting notes:
https://docs.google.com/document/d/1Hm07Q1egWL6VVAqNgu27bcMnqNZhYJmXKRvknVw4Y84/edit#heading=h.n3ci9cllkdvd
Joseph Petersen
@jetersen
It would be nice to generate a API token from JCasC in some way either for internal local user or any user :)
Tim Jacomb
@timja
some sort of local system account when you're logged in via ldap / saml etc would be nice :D
make automating a lot easier
Joseph Petersen
@jetersen
exactly my point :)
Tim Jacomb
@timja
what're you using the API for?
Jon Brohauge
@jonbrohauge
meeting link?
Oleg Nenashev
@oleg-nenashev
I am wrapping up the current meeting, need few mins
Jon Brohauge
@jonbrohauge
:thumbsup:
Tim Jacomb
@timja
it's here: https://zoom.us/j/286266977
needs starting from Oleg though
Jon Brohauge
@jonbrohauge
Same link every time? Maybe it should be put in an obvious spot in the docs... Or maybe I just couldn't find it :wink:
Tim Jacomb
@timja
Yeah, it's a recurring invite, it's on the meeting invitation
added
Jon Brohauge
@jonbrohauge
gotcha... thx
Oleg Nenashev
@oleg-nenashev
oops
Tim Jacomb
@timja
or not :p
that's a different one to the invite
which one @oleg-nenashev
Oleg Nenashev
@oleg-nenashev
@/all https://zoom.us/j/286266977
sorry for confusion
Tim Jacomb
@timja
image.png
@jonbrohauge joining?
ah there you are :)
Jon Brohauge
@jonbrohauge
sry had to run for a charger... 1% power isn't much for a video conference
Wadeck Follonier
@Wadeck
Hey there, perhaps you could be interested in the Jenkins PR about API Token: jenkinsci/jenkins#4027
that could potentially help you with the crumbIssuer problem
Joseph Petersen
@jetersen
@Wadeck perhaps a downstream test in JCasC would be nice :)
KreativeKrise
@KreativeKrise

Hi there :) I need some help with the file credentials. My configuration looks like this:

credentials:
  system:
    domainCredentials:
      - credentials:
          - file:
                  description: "google-service-account"
                  fileName: "jenkins_google-service-account.json"
                  id: "google-service-account"
                  secretBytes: ${GOOGLE-SERVICE-ACCOUNT_JSON}
                  scope: GLOBAL

After I startet Jenkins, the credential was created successfully. But it seems, that the value of the secret isn't correct, because my build fails. If I upload the json file through the web interface of Jenkins, the build works. ${GOOGLE-SERVICE-ACCOUNT_JSON} is a base64 encoded json file. Anyone has an idea how I can fix it?

Joseph Petersen
@jetersen
@KreativeKrise what does the log say? JCasC will log a warning if secret is not resolved ⚠️
KreativeKrise
@KreativeKrise
@casz which log exactly?
Tim Jacomb
@timja
system log
KreativeKrise
@KreativeKrise
Sep 11, 2019 1:26:08 PM WARNING io.jenkins.plugins.casc.BaseConfigurator createAttribute

Can't handle class org.jenkinsci.plugins.plaincredentials.impl.FileCredentialsImpl#file: type is abstract but not Describable.

Sep 11, 2019 1:26:08 PM WARNING io.jenkins.plugins.casc.Attribute describe

Failed to export
java.lang.NullPointerException
    at io.jenkins.plugins.casc.impl.configurators.DataBoundConfigurator.describe(DataBoundConfigurator.java:283)
    at io.jenkins.plugins.casc.impl.configurators.HeteroDescribableConfigurator.lambda$convertToNode$de0cd4f8$1(HeteroDescribableConfigurator.java:283)
    at io.vavr.CheckedFunction0.lambda$unchecked$52349c75$1(CheckedFunction0.java:247)
    at io.jenkins.plugins.casc.impl.configurators.HeteroDescribableConfigurator.convertToNode(HeteroDescribableConfigurator.java:283)
    at io.jenkins.plugins.casc.impl.configurators.HeteroDescribableConfigurator.lambda$describe$5(HeteroDescribableConfigurator.java:107)
    at io.vavr.control.Option.map(Option.java:392)
    at io.jenkins.plugins.casc.impl.configurators.HeteroDescribableConfigurator.describe(HeteroDescribableConfigurator.java:107)
    at io.jenkins.plugins.casc.impl.configurators.HeteroDescribableConfigurator.describe(HeteroDescribableConfigurator.java:55)
    at io.jenkins.plugins.casc.Attribute._describe(Attribute.java:264)
    at io.jenkins.plugins.casc.Attribute.describe(Attribute.java:239)
    at io.jenkins.plugins.casc.impl.configurators.DataBoundConfigurator.describe(DataBoundConfigurator.java:308)
    at io.jenkins.plugins.casc.Attribute._describe(Attribute.java:264)
    at io.jenkins.plugins.casc.Attribute.describe(Attribute.java:239)
    at com.cloudbees.plugins.credentials.casc.SystemCredentialsProviderConfigurator.describe(SystemCredentialsProviderConfigurator.java:76)
    at com.cloudbees.plugins.credentials.casc.SystemCredentialsProviderConfigurator.describe(SystemCredentialsProviderConfigurator.java:48)
    at io.jenkins.plugins.casc.Attribute._describe(Attribute.java:264)
    at io.jenkins.plugins.casc.Attribute.describe(Attribute.java:243)
    at com.cloudbees.plugins.credentials.casc.CredentialsRootConfigurator.describe(CredentialsRootConfigurator.java:90)
    at com.cloudbees.plugins.credentials.casc.CredentialsRootConfigurator.describe(CredentialsRootConfigurator.java:52)
    at io.jenkins.plugins.casc.ConfigurationAsCode.export(ConfigurationAsCode.java:442)
    at io.jenkins.plugins.casc.ConfigurationAsCode.doViewExport(ConfigurationAsCode.java:411)
    at java.lang.invoke.MethodHandle.invokeWithArguments(MethodHandle.java:627)
    at org.kohsuke.stapler.Function$MethodFunction.invoke(Function.java:396)
    at org.kohsuke.stapler.Function$InstanceFunction.invoke(Function.java:408)
    at org.kohsuke.stapler.interceptor.RequirePOST$Processor.invoke(RequirePOST.java:77)
    at org.kohsuke.stapler.PreInvokeInterceptedFunction.invoke(PreInvokeInterceptedFunction.java:26)
    at org.kohsuke.stapler.Function.bindAndInvoke(Function.java:212)
    at org.kohsuke.stapler.Function.bindAndInvokeAndServeResponse(Function.java:145)
    at org.kohsuke.stapler.MetaClass$11.doDispatch(MetaClass.java:535)
    at org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:58)
    at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:747)
    at org.kohsuke.stapler.Stapler.invoke(Stapler.java:878)
    at org.kohsuke.stapler.MetaClass$9.dispatch(MetaClass.java:456)
    at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:747)
    at org.kohsuke.stapler.Stapler.invoke(Stapler.java:878)
    at org.kohsuke.stapler.Stapler.invoke(Stapler.java:676)
    at org.kohsuke.stapler.Stapler.service(Stapler.java:238)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
    at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:873)
    at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1623)
    at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:154)
    at org.jenkinsci.plugins.ssegateway.Endpoint$SSEListenChannelFilter.doFilter(Endpoint.java:246)
    at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:151)
    at io.jenkins.blueocean.Resource
KreativeKrise
@KreativeKrise

I started a new installation of Jenkins and now I just get this warning:

Sep 12, 2019 8:00:10 AM WARNING io.jenkins.plugins.casc.BaseConfigurator createAttribute

Can't handle class org.jenkinsci.plugins.plaincredentials.impl.FileCredentialsImpl#file: type is abstract but not Describable.

But the credential is still not working.

Mark Waite
@MarkEWaite
There had been suggestions that the configuration as code plugin efforts might want to move from working within the Cloud Native special interest group to working within the platform special interest group. The platform special interest group meets every two weeks for platform related projects and topics.
Meeting starts in about 20 minutes at https://zoom.us/j/848212302
Meeting agenda is at https://docs.google.com/document/d/1bDfUdtjpwoX0HO2PRnfqns_TROBOK8tmP6SgVhubr2Y/edit?usp=sharing
I'm not aware of any hot topics that configuration as code would need to discuss, just sharing notice...
Oleg Nenashev
@oleg-nenashev
@casz starting without you