![]() |
|
|
Change By:
|
Vijendra Patil
(09/Jul/13 11:16 AM)
|
Description:
|
Hi,
I need to execute few of the Jenkins jobs such as "Release to Production" through Jenkins UI using logged on user
or using another user
credential. The reason is,
we have one instance of Jenkins CI on which all the Jenkins Jobs such as "Build MyApp", "Release MyAp To QA" etc. are configured. Both the Developers as well as Support team members are admin on this Jenkins application Instance as well as on the Jenkins server. Right now, these Jobs gets executed using the credential of service account which the Tomcat Service is running with, on which Jenkins is hosted. Now, the problem is, we cant use the same instance to release deployable items to Production as the service account doesn't have permission to access Production Web Severs to copy code on it. And moreover,
its the Support Team Members who have access to the production boxes
, so
. So
in order to deploy any code base to production, all the Windows Deploy Commands (ex, create, update files, folder etc.) needs to be run with specific user credential who has access to the Production Box.
I tried using parameterized plugin but couldn't able to pass the Password successfully to the batch file which contains MSDeploy instructions.
I checked Role based security plugin, project matrix , active directory etc, but that doesn't help me much. I just need a plugin which should ask for user to provide their credential before start building the Job and should use the user credential to get the job executed, so that my MSDeploy command will be able to deploy the code on Production boxes, when the Support team member build that Job using their credential. I wish there was support for impersonation.
Right now all the Jenkins Jobs are getting executed using the service account which the Tomcat service is configured to run with on which Jenkins is hosted.
Both Developers and Support team members are ADMIN on both Jenkins web server as well as on Jenkins web application. I am looking forward to the following.
============================================================= Each job can have a checkbox say "Execute using another user credential"
or "Execute using logged on user credential"
. Now when we start the job by clicking on Build button, which is having "Execute using another user credential" checkbox checked, the application should ask to provide credential that needs to be used for Building that Job. That job should get executed then with that particular credential. So even if I can be able to run the job "Release To Production" using my credential then it will not succeed as I don't have access to Production web servers for creating files, folders etc. But when the same job gets executed by Support team, it should succeed as they have access to Production servers for creating files, folders, executing any MSDeploy commands.
==================================================================
Any help would be appreciated.
|
|
|
|
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira
|
--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit
https://groups.google.com/groups/opt_out.