Jenkins Kubernetes plugin credentials for Google Kubernetes Engine cluster

samt88

unread,

Jun 18, 2019, 5:50:46 PM6/18/19

to Jenkins Users

I need to setup the Jenkins Kubernetes plugin to fire off slaves on demand. The top portion of the plugin requires us to provide two important values to the plugin. One is the value for the "Kubernetes URL" field and the other is the value for the "Credentials" field. By providing these two values and clicking on the "Test Connection" button we should be able to verify that Jenkins can successfully connect to the cluster.

The Google Kubernetes Engine does not provide a username/password for cluster by default anymore. The GKE page where we see the cluster credentials specifically says "Basic authentication for this cluster is disabled". I only see the value for "Cluster CA certificate" on this page. Does anyone have the step by step instructions on how I can use this certificate to configure the "Credentials" field of the Jenkins Kubernetes plugin to connect to the cluster? I have tried a few combinations but I have not been successful so far. Thanks.

Carlos Sanchez

unread,

Jun 19, 2019, 7:55:54 AM6/19/19

to Jenkins Users

you can create certificate credentials too, but the best way is to use a service account token (secret string)

On Tue, Jun 18, 2019 at 11:51 PM samt88 <sam...@gmail.com> wrote:

I need to setup the Jenkins Kubernetes plugin to fire off slaves on demand. The top portion of the plugin requires us to provide two important values to the plugin. One is the value for the "Kubernetes URL" field and the other is the value for the "Credentials" field. By providing these two values and clicking on the "Test Connection" button we should be able to verify that Jenkins can successfully connect to the cluster.

The Google Kubernetes Engine does not provide a username/password for cluster by default anymore. The GKE page where we see the cluster credentials specifically says "Basic authentication for this cluster is disabled". I only see the value for "Cluster CA certificate" on this page. Does anyone have the step by step instructions on how I can use this certificate to configure the "Credentials" field of the Jenkins Kubernetes plugin to connect to the cluster? I have tried a few combinations but I have not been successful so far. Thanks.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/1149bb3a-0063-4b0f-8376-8f5a0071a6f7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

samt88

unread,

Jun 21, 2019, 2:05:57 PM6/21/19

to Jenkins Users

Thanks Carlos. I have searched the google for "google cloud service account token secret string" and I get some hits such as this page:

https://cloud.google.com/iam/docs/creating-managing-service-account-keys

Is this the right place to start? Do you happen to know if there is a page that explains the step by step procedure?

I am not familiar with issues surrounding tokens and secret strings. I am sure my question also helps others who would like to setup Jenkins on Google cloud without using helm or other utilities. Thanks.

On Wednesday, June 19, 2019 at 4:55:54 AM UTC-7, Carlos Sanchez wrote:

you can create certificate credentials too, but the best way is to use a service account token (secret string)

On Tue, Jun 18, 2019 at 11:51 PM samt88 <sam...@gmail.com> wrote:

I need to setup the Jenkins Kubernetes plugin to fire off slaves on demand. The top portion of the plugin requires us to provide two important values to the plugin. One is the value for the "Kubernetes URL" field and the other is the value for the "Credentials" field. By providing these two values and clicking on the "Test Connection" button we should be able to verify that Jenkins can successfully connect to the cluster.

The Google Kubernetes Engine does not provide a username/password for cluster by default anymore. The GKE page where we see the cluster credentials specifically says "Basic authentication for this cluster is disabled". I only see the value for "Cluster CA certificate" on this page. Does anyone have the step by step instructions on how I can use this certificate to configure the "Credentials" field of the Jenkins Kubernetes plugin to connect to the cluster? I have tried a few combinations but I have not been successful so far. Thanks.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to jenkins...@googlegroups.com.

Carlos Sanchez

unread,

Jun 21, 2019, 2:26:22 PM6/21/19

to Jenkins Users

No, that's google service accounts. You want to check Kubernetes service accounts

For instance https://devopscube.com/kubernetes-api-access-service-account/

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/bbf1590d-2cd7-469f-99f1-56f6c87e478c%40googlegroups.com.

Reply all

Reply to author

Forward