Authenticate Against Jenkins
Introduction
If you have are trying to authenticate Spinnaker against a Jenkins master that has some third party authentication set up, you have to create an API token for Spinnaker to authenticate against Jenkins.
Prerequisites
Access to Jenkins Administration
Instructions
- Log into Jenkins* Click on your username (in the top right)* Click on “Configure” (on the left)* Under the “API Token” section, click on “Add new Token”, and “Generate” and record the generated token* Record your username (should be in the URL for the current page - if you’re at https://jenkins.domain.com/user/justinrlee/configure, then the username is, as an example,
janesmith
)Add the Jenkins master to Spinnaker with this:
hal config ci jenkins enable
echo | hal config ci jenkins master add \
--address https://jenkins.domain.com \
--username \
--password
# Password will be read from stdin
For example, if the generated token is 1234567890abcdefghijklmnopqrstuvwx
, and your username is janesmith
and you want to identify the Jenkins master as jenkins-prod
, then you’d run something like this:
echo 1234567890abcdefghijklmnopqrstuvwx | hal config ci jenkins master add jenkins-prod \
--address https://jenkins.domain.com \
--username janesmith \
--password
- Also, don’t forget to configure the CSRF stuff: https://www.spinnaker.io/setup/ci/jenkins/#configure-jenkins-and-spinnaker-for-csrf-protection