[JIRA] (JENKINS-56508) Service account secret not visible when using folders plugin

15 views
Skip to first unread message

kamilzegier@gmail.com (JIRA)

unread,
Mar 11, 2019, 4:09:02 PM3/11/19
to jenkinsc...@googlegroups.com
Kamil Zegier created an issue
 
Jenkins / Bug JENKINS-56508
Service account secret not visible when using folders plugin
Issue Type: Bug Bug
Assignee: Christopher Orr
Components: google-play-android-publisher-plugin
Created: 2019-03-11 20:08
Environment: Jenkins version: 2.155
Google Play Android Publisher Plugin: 1.8
Google OAuth Credentials plugin: 0.7
Folders Plugin 6.5.1
Labels: plugin
Priority: Major Major
Reporter: Kamil Zegier

When I create secret of type "Google Service account from private key" under folder namespace (folders plugin), and then try to use this secret for Google Play Android Publisher Plugin it is not recognized.

 

When I create job inside this folder, and try to choose Google Play Account from dropdown list of Upload Android APK to Google Play post action, there is nothing to choose from. When I add Google Service account from private key secret in global namespace (not inside folder) then account is visible and I can use plugin.

The same situation happen when trying to use it from pipeline script. 

androidApkUpload googleCredentialsId: 'mysecret', ...

 Plugin cannot find credentials when they are located inside folder.

Add Comment Add Comment
 
This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

chris@orr.me.uk (JIRA)

unread,
Jul 17, 2019, 3:55:01 PM7/17/19
to jenkinsc...@googlegroups.com
Christopher Orr commented on Bug JENKINS-56508
 
Re: Service account secret not visible when using folders plugin

Are you able to see the credentials if you're an admin user?

From a very quick look at the code, it seems like we're just delegating to the Google OAuth Plugin, calling getCredentialsListBox:
https://github.com/jenkinsci/google-play-android-publisher-plugin/blob/google-play-android-publisher-1.8/src/main/java/org/jenkinsci/plugins/googleplayandroidpublisher/GooglePlayBuildStepDescriptor.java#L37-L40

That plugin just appears to be fetching all available credentials in the system, rather than anything scoped by folder:
https://github.com/jenkinsci/google-oauth-plugin/blob/google-oauth-plugin-0.8/src/main/java/com/google/jenkins/plugins/credentials/oauth/GoogleRobotCredentials.java#L133-L155

So I'm not sure where the problem lies, at the moment…

shen3lu4@gmail.com (JIRA)

unread,
Jul 17, 2019, 8:20:02 PM7/17/19
to jenkinsc...@googlegroups.com
Lu Shen commented on Bug JENKINS-56508

No even if I log in as a Jenkins admin, I don't see the credential in the drop down. It is simply not available.

jonesbusy@gmail.com (JIRA)

unread,
Mar 31, 2020, 10:07:18 AM3/31/20
to jenkinsc...@googlegroups.com

Hi,

Same issue here... I have my credential stored on a folder but unable to use it... Is there any plan to work on this ? It's blocking us using the plugin (we have specific authorization and credential per user, so having this on SYSTEM is not a solution).

Thanks!

This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)
Atlassian logo

chris@orr.me.uk (JIRA)

unread,
May 10, 2020, 6:34:03 PM5/10/20
to jenkinsc...@googlegroups.com
Christopher Orr started work on Bug JENKINS-56508
 
Change By: Christopher Orr
Status: Open In Progress
Reply all
Reply to author
Forward
0 new messages