[JIRA] (JENKINS-59087) Credentials get stale when using Kubeconfig file rotating periodically

0 views
Skip to first unread message

jsmilani@mac.com (JIRA)

unread,
Aug 26, 2019, 11:05:02 AM8/26/19
to jenkinsc...@googlegroups.com
John Smilanick created an issue
 
Jenkins / Bug JENKINS-59087
Credentials get stale when using Kubeconfig file rotating periodically
Issue Type: Bug Bug
Assignee: Unassigned
Components: kubernetes-plugin
Created: 2019-08-26 15:04
Labels: credentials config
Priority: Minor Minor
Reporter: John Smilanick

This is related to using kubernetes slaves via the Jenkins Cloud configuration. We use kubeconfig files to authenticate with the API server and we regenerate them daily using a cron job. We successfully update the credentials using groovy code, but the kubernetes-plugin doesn't detect the change and continues to use the old file until it eventually expires. It is behaving like it cached the credential somewhere. Our manual workaround is to go to Manage Jenkins -> Configure System and set the credential to 'none', save, return to Configure system and set it again. If we don't set it to none and just click save or use groovy to do a Jenkins save(), it doesn't reload the credential. This confirms that the credential is correct, but the kubernetes plugin needed some coercion to reload the credential. We would expect the credential change to be detected or the kubernetes plugin should read the file fresh each time it is used.

Add Comment Add Comment
 
This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)
Reply all
Reply to author
Forward
0 new messages