openSUSE admin

Hi,

there is already a VM jenkins.infra.opensuse.org. Any suggestions for an alternative name?

Hi there,

Yes, jenkins-agent.infra.opensuse.org would be just fine, please.

Very well, I shall do it.

Very well, thanks for the work. I hope the oidc stuff won't give you - or someone else - too much trouble.

It's no problem. Once your MR is through and I apply the highstate, I will put the credentials on the machine.

Okey dokey. Just to clarify, the openID Connect stuff is for jenkins-i-o-o, the controller, OK?

What are the client ID and callback/redirect URL?

Uhm, I'm gonna need a hand here. AFAICT the client ID is suppose to be given to me, according to the Jenkins plugin, and I'm not sure what's the callback/redirect URL.

I guess it's /securityRealm/finishLogin according to https://github.com/jenkinsci/oic-auth-plugin/blob/master/src/main/resources/org/jenkinsci/plugins/oic/OicSecurityRealm/help.html, I can add that and we can always change it later.

There are some failing Salt states, I suppose you will solve them along with the Jenkins profiles.

Aaah! Now I get it what's the callback/redirect URL. Indeed /securityRealm/finishLogin is my guess too.

crameleon wrote:

There are some failing Salt states, I suppose you will solve them along with the Jenkins profiles.

Gonna have a look at them.

crameleon wrote:

OpenID data is in my home directory on the machine. Just delete the file after you stored the data in the respective configuration / Salt. I assumed https://jenkins-agent.opensuse.org as a URL for now, let me know if you want to change it later.

Actually, the URL should be http://jenkins.infra.opensuse.org:8080/ instead, I don't think we're ready to expose it outside infra.opensuse.org just yet. I should've been more explicit in my request, though, that's my bad.

Thanks for you're time Georg! I appreciate it.

For clarity's sake and historical reasons, I'd like to say I probably should've opened two tickets instead of one (or, at the very least, I should've gave more details).

1. One for the openID Connect client ID and secret are for jenkins-i-o-o, not for the new VM that I asked for, jenkins-agent-i-o-o.

2. And another for jenkins-agent-i-o-o, a Jenkins "worker" that the community won't have to interact with directly.

But I learned my lesson :^)

I cannot change the URL to what you have requested:

Redirect URI incorrect: non-https or localhost with web"

Seems it needs to be secure.

I'm planing to get back to jenkins-i-o-o this weekend, so I'll see to get HTTPS going.