You are viewing a plain text version of this content. The canonical link for it is here.
Posted to builds@apache.org by Gavin McDonald <gm...@apache.org> on 2020/08/14 07:37:15 UTC
New Credentials for Github jobs
Hi All,
For those of you waiting for the 'asf-ci' credentials - this is still not
resolved yet, and is waiting
for Cloudbees support.
However - I have created some new credentials, based off of a GH App rather
than a role account.
Look for credentials 'ASF Cloudbees Jenkins ci-builds' and give that a try
in your jobs please and see if that works for you. Let me know how it goes
for you.
--
*Gavin McDonald*
Systems Administrator
ASF Infrastructure Team
Fwd: New Credentials for Github jobs
Posted by Zoran Regvart <zo...@regvart.com>.
Hi Cameleers,
FYI, for building from GitHub on ci-builds.apache.org you can now use
credentials provided by INFRA. From what I understand this should now
use a webhook, so builds should trigger immediately; and Jenkins can
now set status via the checks on pull requests.
NOTE: you should not build pull requests from forks, this is not
encouraged by INFRA, and can lead to security issues.
zoran
---------- Forwarded message ---------
From: Gavin McDonald <gm...@apache.org>
Date: Fri, Aug 14, 2020 at 9:37 AM
Subject: New Credentials for Github jobs
To: builds <bu...@apache.org>
Hi All,
For those of you waiting for the 'asf-ci' credentials - this is still not
resolved yet, and is waiting
for Cloudbees support.
However - I have created some new credentials, based off of a GH App rather
than a role account.
Look for credentials 'ASF Cloudbees Jenkins ci-builds' and give that a try
in your jobs please and see if that works for you. Let me know how it goes
for you.
--
*Gavin McDonald*
Systems Administrator
ASF Infrastructure Team
--
Zoran Regvart
Re: New Credentials for Github jobs
Posted by Istvan Toth <st...@apache.org>.
Hi Gavin!
Is there any update on this ?
I have also tried to use the "ASF Cloudbees Jenkins ci-builds" credential
to add a comment to a GitHub PR, but it doesn't work.
A personal access token with *repo:status* and *public_repo* scopes works
with the same job, but I'd rather not use personal tokens for the precommit
job in production.
The repo is https://github.com/apache/phoenix
regards
Istvan
On Fri, Aug 14, 2020 at 6:28 PM Gavin McDonald <gm...@apache.org> wrote:
> Hi Joan,
>
> On Fri, Aug 14, 2020 at 11:30 AM Joan Touzet <wo...@apache.org> wrote:
>
> > Could we get these on the ci-couchdb server for testing? Thanks.
> >
>
> Sure thing, added a new GH App and credentials for it are on ci-couchdb
> Master
>
> HTH
>
>
> >
> > -Joan
> >
> > On 2020-08-14 3:37 a.m., Gavin McDonald wrote:
> > > Hi All,
> > >
> > > For those of you waiting for the 'asf-ci' credentials - this is still
> not
> > > resolved yet, and is waiting
> > > for Cloudbees support.
> > >
> > > However - I have created some new credentials, based off of a GH App
> > rather
> > > than a role account.
> > >
> > > Look for credentials 'ASF Cloudbees Jenkins ci-builds' and give that a
> > try
> > > in your jobs please and see if that works for you. Let me know how it
> > goes
> > > for you.
> > >
> >
>
>
> --
>
> *Gavin McDonald*
> Systems Administrator
> ASF Infrastructure Team
>
Re: New Credentials for Github jobs
Posted by Gavin McDonald <gm...@apache.org>.
Hi Joan,
On Fri, Aug 14, 2020 at 11:30 AM Joan Touzet <wo...@apache.org> wrote:
> Could we get these on the ci-couchdb server for testing? Thanks.
>
Sure thing, added a new GH App and credentials for it are on ci-couchdb
Master
HTH
>
> -Joan
>
> On 2020-08-14 3:37 a.m., Gavin McDonald wrote:
> > Hi All,
> >
> > For those of you waiting for the 'asf-ci' credentials - this is still not
> > resolved yet, and is waiting
> > for Cloudbees support.
> >
> > However - I have created some new credentials, based off of a GH App
> rather
> > than a role account.
> >
> > Look for credentials 'ASF Cloudbees Jenkins ci-builds' and give that a
> try
> > in your jobs please and see if that works for you. Let me know how it
> goes
> > for you.
> >
>
--
*Gavin McDonald*
Systems Administrator
ASF Infrastructure Team
Re: New Credentials for Github jobs
Posted by Joan Touzet <wo...@apache.org>.
Could we get these on the ci-couchdb server for testing? Thanks.
-Joan
On 2020-08-14 3:37 a.m., Gavin McDonald wrote:
> Hi All,
>
> For those of you waiting for the 'asf-ci' credentials - this is still not
> resolved yet, and is waiting
> for Cloudbees support.
>
> However - I have created some new credentials, based off of a GH App rather
> than a role account.
>
> Look for credentials 'ASF Cloudbees Jenkins ci-builds' and give that a try
> in your jobs please and see if that works for you. Let me know how it goes
> for you.
>
Re: New Credentials for Github jobs
Posted by Gavin McDonald <gm...@apache.org>.
Hi Andor
On Fri, Aug 14, 2020 at 2:36 PM Andor Molnar <an...@apache.org> wrote:
> Hi Gavin,
>
> Looks like that the new credentials don’t have rights to update build
> status either:
>
I fixed that now, try again please.
>
>
> https://ci-hadoop.apache.org/view/ZooKeeper/job/ZooKeeper%20PreCommit%20GitHub%20PR/view/change-requests/job/PR-1429/2/console
>
> —————
> Started by user Andor Molnar
> 09:38:53 Connecting to https://api.github.com using 76885/****** (ASF
> Cloudbees Jenkins ci-hadoop)
>
> …
>
> Could not update commit status, please check if your scan credentials
> belong to a member of the organization or a collaborator of the repository
> and repo:status scope is selected
>
>
> GitHub has been notified of this commit’s build result
>
> ERROR: script returned exit code 1
> Finished: FAILURE
> —————
>
> Andor
>
>
>
> > On 2020. Aug 14., at 9:37, Gavin McDonald <gm...@apache.org> wrote:
> >
> > Hi All,
> >
> > For those of you waiting for the 'asf-ci' credentials - this is still not
> > resolved yet, and is waiting
> > for Cloudbees support.
> >
> > However - I have created some new credentials, based off of a GH App
> rather
> > than a role account.
> >
> > Look for credentials 'ASF Cloudbees Jenkins ci-builds' and give that a
> try
> > in your jobs please and see if that works for you. Let me know how it
> goes
> > for you.
> >
> > --
> >
> > *Gavin McDonald*
> > Systems Administrator
> > ASF Infrastructure Team
>
>
--
*Gavin McDonald*
Systems Administrator
ASF Infrastructure Team
Re: New Credentials for Github jobs
Posted by Andor Molnar <an...@apache.org>.
Thanks Robert, that works.
Nice to see my face next to ZooKeeper CI builds. :)
> On 2020. Aug 14., at 15:13, Robert Munteanu <ro...@apache.org> wrote:
>
> On Fri, 2020-08-14 at 14:36 +0200, Andor Molnar wrote:
>> Looks like that the new credentials don’t have rights to update build
>> status either
>
> FWIW for the Sling builds I just created a personal access token with
> 'repo' scope. Kind of surprising to see a personal avatar commenting
> left and right, but that works with very little hassle.
>
> Thanks,
> Robert
>
Re: New Credentials for Github jobs
Posted by Robert Munteanu <ro...@apache.org>.
On Fri, 2020-08-14 at 14:36 +0200, Andor Molnar wrote:
> Looks like that the new credentials don’t have rights to update build
> status either
FWIW for the Sling builds I just created a personal access token with
'repo' scope. Kind of surprising to see a personal avatar commenting
left and right, but that works with very little hassle.
Thanks,
Robert
Re: New Credentials for Github jobs
Posted by Andor Molnar <an...@apache.org>.
Hi Gavin,
Looks like that the new credentials don’t have rights to update build status either:
https://ci-hadoop.apache.org/view/ZooKeeper/job/ZooKeeper%20PreCommit%20GitHub%20PR/view/change-requests/job/PR-1429/2/console
—————
Started by user Andor Molnar
09:38:53 Connecting to https://api.github.com using 76885/****** (ASF Cloudbees Jenkins ci-hadoop)
…
Could not update commit status, please check if your scan credentials belong to a member of the organization or a collaborator of the repository and repo:status scope is selected
GitHub has been notified of this commit’s build result
ERROR: script returned exit code 1
Finished: FAILURE
—————
Andor
> On 2020. Aug 14., at 9:37, Gavin McDonald <gm...@apache.org> wrote:
>
> Hi All,
>
> For those of you waiting for the 'asf-ci' credentials - this is still not
> resolved yet, and is waiting
> for Cloudbees support.
>
> However - I have created some new credentials, based off of a GH App rather
> than a role account.
>
> Look for credentials 'ASF Cloudbees Jenkins ci-builds' and give that a try
> in your jobs please and see if that works for you. Let me know how it goes
> for you.
>
> --
>
> *Gavin McDonald*
> Systems Administrator
> ASF Infrastructure Team