使用Bosh和Github身份验证设置Concourse 2.6

时间:2017-01-19 00:46:28

标签: authentication github oauth concourse cf-bosh

我尝试使用Github身份验证设置Concourse(之前我使用的是1.4.1,但那不起作用,所以我尝试使用最新版本2.6)。我完全按照说明进行了波什部署,除了Github身份验证外,一切似乎都有效。

当我登录时,它会尝试重定向到Github oauth成功回调的内容:

https://concourse.example.com/auth/github/callback?code=XXXXXXXXXX&state=XXXXXXXX

但是广场服务器只是坐在那里,最终超时。尝试使用fly -t concourse login登录时,它会将我重定向到https://concourse.example.com/auth/github?team_name=main&fly_local_port=52713,但该地址最终也会超时。

我做错了什么?为什么这些地址都不起作用?

我的波什清单(我知道波什工作正常,我有很多服务器部署):

name: concourse

director_uuid: XXXX-XXXX-XXXX-XXXX-XXXX

releases:
- name: concourse
  version: latest
- name: garden-runc
  version: latest
- name: slack-notification-resource
  version: latest

stemcells:
- alias: trusty
  os: ubuntu-trusty
  version: latest

instance_groups:
- name: web
  instances: 1
  vm_type: concourse_web
  stemcell: trusty
  azs: [z1]
  networks: [{name: concourse}]
  jobs:
  - name: atc
    release: concourse
    properties:
      # replace with your CI's externally reachable URL e.g https://blah
      external_url: https://concourse.example.com
      # configure GitHub auth
      github_auth:
        client_id: XXXXXXXXX
        client_secret: XXXXXXXXXXXXXXXXXX
        authorize:
          - organization: example
            teams: all
      postgresql_database: &atc_db atc
  - name: tsa
    release: concourse
    properties: {}

- name: db
  instances: 1
  vm_type: concourse_db
  stemcell: trusty
  persistent_disk_type: default
  azs: [z1]
  networks: [{name: concourse}]
  jobs:
  - name: postgresql
    release: concourse
    properties:
      databases:
      - name: *atc_db
        # make up a role and password
        role: xxxxx
        password: xxxxxxxxxxx

- name: worker
  instances: 1
  vm_type: concourse_worker
  stemcell: trusty
  azs: [z1]
  networks: [{name: concourse}]
  jobs:
  - name: groundcrew
    release: concourse
    properties:
      additional_resource_types:
      - type: slack-notification
        image: /var/vcap/packages/slack-notification-resource
  - name: baggageclaim
    release: concourse
    properties: {}
  - name: garden
    release: garden-runc
    properties:
      garden:
        listen_network: tcp
        listen_address: 0.0.0.0:7777
  - name: slack-notification-resource
    release: slack-notification-resource
    properties: {}

update:
  canaries: 1
  max_in_flight: 1
  serial: false
  canary_watch_time: 1000-60000
  update_watch_time: 1000-60000

我没有Github企业,所以基本的应该有用 - 尽管我已经尝试过设置它,以及手动oauth。没什么 - 广场服务器只是没有回应请求。

有什么想法吗?我已经在这两天了,我感到很困惑。摧毁并重新部署大厅数十次,没有变化。

0 个答案:

没有答案