Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-43802

Shared Library using folder-scoped credential fails to authenticate

      In my GitHub Org job (using GitHub Enterprise), I added a pipeline lib source that is in GitHub.  If the scan credential is scoped to the job (created in the job, vs created in the global credential store), there are two problems:

      1) The config page under branch shows an error instead of "Currently maps to revision: $SHA".

      2) If using a job-scoped credential, the "git fetch" in the job execution does not contain a line saying "Setting GIT_ASKPASS ..."

      If I switch to the identical credential stored in the global scope, both the config page and the git fetch (GIT_ASKPASS) works.

      I can give more details or try to isolate the problem if needed (standalone, minimal sets of plugins).

          [JENKINS-43802] Shared Library using folder-scoped credential fails to authenticate

          Justin Vallon created issue -

          Jesse Glick added a comment -

          Offhand sounds like a configuration error, though I am not sure. May depend on the particular retrieval method in use.

          Jesse Glick added a comment - Offhand sounds like a configuration error, though I am not sure. May depend on the particular retrieval method in use.

          Justin Vallon added a comment -

          So, you believe this should work?  I'll try to reproduce from a clean config, if that is the case.

          Justin Vallon added a comment - So, you believe this should work?  I'll try to reproduce from a clean config, if that is the case.

          Jesse Glick added a comment -

          If you mean defining credentials in the organization folder’s configuration screen, then yes it ought to work.

          Jesse Glick added a comment - If you mean defining credentials in the organization folder’s configuration screen, then yes it ought to work.

          I have the same problem. It's possible to select ssh folder-scoped credentials in the job configuration for the Shared Library, but they didn't work. It only works with global credentials for me. I tested the ssh key and it's correct.

          Wilm Schomburg added a comment - I have the same problem. It's possible to select ssh folder-scoped credentials in the job configuration for the Shared Library, but they didn't work. It only works with global credentials for me. I tested the ssh key and it's correct.
          Sonny Garcia made changes -

          Sonny Garcia added a comment -

          I can confirm the same behavior that wilm is seeing. I created two separate credentials for github access (same content), one inside the global Jenkins store and the other scoped to a folder. When attempting to configure access to a shared library inside the aforementioned folder, the global credential works and the folder credential does not.

           

          I've included an attachment with the error message that shows up in the UI in the latter case.

           

          Here's my current environment:

          • Jenkins – 2.60.2
          • Pipeline: Shared Groovy Libraries – 2.8
          • Credentials Plugin – 2.1.14
          • GitHub Branch Source Plugin – 2.2.3

          Sonny Garcia added a comment - I can confirm the same behavior that wilm is seeing. I created two separate credentials for github access (same content), one inside the global Jenkins store and the other scoped to a folder. When attempting to configure access to a shared library inside the aforementioned folder, the global credential works and the folder credential does not.   I've included an attachment with the error message that shows up in the UI in the latter case.   Here's my current environment: Jenkins – 2.60.2 Pipeline: Shared Groovy Libraries – 2.8 Credentials Plugin – 2.1.14 GitHub Branch Source Plugin – 2.2.3

          Jesse Glick added a comment -

          I suspect the problem is that SCMSource.owner is not being set in this context. If so, would probably require API changes coördinated across multiple plugins to fix. TBD.

          Jesse Glick added a comment - I suspect the problem is that SCMSource.owner is not being set in this context. If so, would probably require API changes coördinated across multiple plugins to fix. TBD.
          James Nord made changes -
          Labels New: cloudbees-internal-steel
          James Nord made changes -
          Priority Original: Minor [ 4 ] New: Major [ 3 ]

            Unassigned Unassigned
            vallon Justin Vallon
            Votes:
            24 Vote for this issue
            Watchers:
            30 Start watching this issue

              Created:
              Updated:
              Resolved: