使用groovy脚本更新jenkins文件中的aws凭据

时间:2017-09-29 18:39:18

标签: amazon-web-services jenkins groovy jenkins-pipeline credentials

在我的流程中,我会获得临时的AWS信誉,在我的Jenkins文件中,我需要更新特定的Jenkins Aws信誉。 我该如何更新? 我需要的原因是Jenkins docker方法 withRegistry 需要凭证ID,每当我获得新的AWS密钥以便能够使用它时我都必须更新此凭证。

1 个答案:

答案 0 :(得分:3)

经过几次尝试和错误后,我发现了这个:

import jenkins.model.*
import com.cloudbees.plugins.credentials.*
import com.cloudbees.plugins.credentials.impl.*
import com.cloudbees.plugins.credentials.domains.*
import com.cloudbees.jenkins.plugins.sshcredentials.impl.BasicSSHUserPrivateKey
import com.cloudbees.jenkins.plugins.awscredentials.AWSCredentialsImpl
import org.jenkinsci.plugins.plaincredentials.StringCredentials
   def changePassword = { id,accessKey, secKey ->
def creds = com.cloudbees.plugins.credentials.CredentialsProvider.lookupCredentials(
    com.cloudbees.jenkins.plugins.awscredentials.AWSCredentialsImpl.class,
    Jenkins.instance
)
def c = creds.findResult { it.id == id ? it : null }
if ( c ) {
    println "found credential ${c.id} for accessKey ${c.accessKey}"

    def credentials_store = Jenkins.instance.getExtensionList(
        \'com.cloudbees.plugins.credentials.SystemCredentialsProvider\'
        )[0].getStore()

    def result = credentials_store.updateCredentials(
        com.cloudbees.plugins.credentials.domains.Domain.global(), 
        c, 
        new AWSCredentialsImpl(c.scope, id, accessKey, secKey,c.description)
        )

    if (result) {
        println "password changed for ${accessKey}" 
    } else {
        println "failed to change password for ${accessKey}"
    }
} else {
  println "could not find credential for ${accessKey}"
}
}