Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Ephemeral agent : configure access to kubectl

Antoine Ameline November 29, 2023

Hi, I use bamboo server and with the last 9.4, I'd like to use the ephemeral agent concept.

 

My bamboo test server is running on a VM Debian 10 (only terminal)

 

Following documentation (cf. https://confluence.atlassian.com/bamboo/enabling-ephemeral-agent-support-1236444140.html), I tried to configure access to my k8s cluster : 

* adding kubectl on my bamboo server (VM debian) => ok

* adding my config file under [my install]/server/shared => ok

* configuring access to the config file in bamboo administration screen => not ok

Our cluster access is manager with OIDC (keycloack) and Iv'e got this error message : 


error: unknown command "oidc-login" for "kubectl" Unable to connect to the server: getting credentials: exec: executable kubectl failed with exit code 1


 

How can I configure bamboo to pass oidc authentication ? 

 

2 answers

1 accepted

1 vote
Answer accepted
Eduardo Alvarenga
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
November 30, 2023

Hello @Antoine Ameline

Based on your description, it appears that your Kubernetes configuration requires the oidc-login command to be available. Copy that file to the Bamboo Server and try again.

Sincerely,

Eduardo Alvarenga
Atlassian Support APAC

--please don't forget to Accept the answer if the reply is helpful-- 

0 votes
Antoine Ameline January 12, 2024

Hello @Eduardo Alvarenga ,

 

Sorry for my late answer, I was on other subjects.

 

So, for me, installing the oidc-login was not a solution. Problem with this tool, is that it's requiring the browser to authenticate against keycloack. 

In my case, my bamboo server is indstalled on debian terminal server.

 

After some tests, I finally choose a solution with a service account with a long life token. As my bamboo server is not exposed, it's not a security problem

 

Thanks for your help

I set the post as resolved

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events