Hacker News new | past | comments | ask | show | jobs | submit login

I wish we could get encrypted credentials a lá travis in a Jenkinsfile. I’ve found most configuration for a job can be in a git repo but you have to manage some things through the web interface, and it’s not that easy securely managing credentials for a Jenkins installation, even with Folders and Roles



BTW we use the kubernetes credentials provider plugin in Jenkins X which exposes Kubernetes Secrets as Jenkins Credentials; then the `credentials` step in the `Jenkinsfile` encrypts them from any build logs


you can fetch the credentials from Kubernetes secrets using this plugin https://jenkinsci.github.io/kubernetes-credentials-provider-... and manage both your Ops and Jenkins credentials the same way


Travis recommends storing secrets that dont change between branches via the project settings. Also, secure envars in the Travis config appears to interfere with deep merging on triggered builds.. Hopefully they can do better :)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: