从在EC2(Ubuntu)上运行的Jenkins访问AWS CodeCommit

Question

我正在尝试将Jenkins与AWS CodeCommit集成.Jenkins使用Ubuntu 14.04在AWS EC2实例上运行.

我关注了这篇博文:http://blogs.aws.amazon.com/application-management/post/Tx1C8B​​98XN0AF2E/Integrating-AWS-CodeCommit-with-Jenkins

问题是,没有执行sudo -u jenkins aws configure,因为jenkins用户没有权限.

你会怎么做？

以下命令也不起作用:

sudo -u jenkins git config --global credential.helper '!aws codecommit credential-helper $@'
sudo -u jenkins git config --global credential.useHttpPath true
sudo -u jenkins git config --global user.email "me@mycompany.com"
sudo -u jenkins git config --global user.name "MyJenkinsServer"

jenkins用户需要什么权利？

提前致谢.

Answer 1

我能够使用SSH实现这种集成.在某种程度上,我遵循了以下指示: 设置CodeCommit

假设Jenkins Home是/ var/lib/jenkins /

1. 在Jenkins EC2实例上创建一个ssh密钥(/var/lib/jenkins/.ssh/id_rsa)

   ssh-keygen -b 2048 -t rsa -f /var/lib/jenkins/.ssh/id-rsa -a -N
   

2. 将公钥上传到IAM用户(IAM用户必须具有CodeCommit访问权限)

   aws iam upload-ssh-public-key --user-name <username> --ssh-public-key-body file:///var/lib/jenkins/.ssh/id_rsa.pub
   

3. 上传密钥时收集SSHPublicKeyID

   {
    "SSHPublicKey": {
    "UserName": "jenkins",
    "Status": "Active",
    "SSHPublicKeyBody": "ssh-rsa <rsa-key> <host>\n",
    "UploadDate": "2015-09-02T19:18:24.309Z",
    "Fingerprint": "xxx",
    "SSHPublicKeyId": "APK***"
    }
   }
   

4. 创建/修改SSH配置文件

   Host git-codecommit.*.amazonaws.com
     User APK*******
     IdentityFile /var/lib/jenkins/.ssh/id_rsa
     StrictHostKeyChecking no
   

5. 其中APK***是在步骤3中检索到的密钥ID的值

6. 将此文件复制或移动到/var/lib/jenkins/.ssh/config(或者在EC2实例上安装Jenkins的任何位置)
7. 确保'jenkins'用户对/var/lib/jenkins/.ssh目录具有0600权限
8. 按照您最初使用的博客文章中的描述创建Jenkins作业.但是,对于存储库URL,请输入SSH URL.(无需凭据)