APIPythonOpen-Source Solutions

 View Only
  • 1.  Delphix Jenkins plugin - delphix engine credentials at root level or project level?

    Posted 11-29-2018 01:25:00 AM

    If the entered credentials is at root level - then I believe we have an potential issues of anyone can execute SelfService operation.

    Maybe am missing something here - how do I setup credentials at project level.

    Thanks.
    #Self-Service
    #Virtualization


  • 2.  RE: Delphix Jenkins plugin - delphix engine credentials at root level or project level?

    Posted 12-03-2018 05:33:00 PM
    Hi, 
    For my own clarity, is this a Jenkins-specific question or does this revolve around how to configure the virtualization engine permissions? If you are looking for permission info on the engine objects, please take a look at https://docs.delphix.com/docs/delphix-administration/users-permissions-and-policies/users-and-groups...">https://docs.delphix.com/docs/delphix-administration/users-permissions-and-policies/users-and-groups/user-privileges-for-delphix-objects">https://docs.delphix.com/docs/delphix-administration/users-permissions-and-policies/users-and-groups...
    Let me know if that helps.

    Thank you,
    Michael


  • 3.  RE: Delphix Jenkins plugin - delphix engine credentials at root level or project level?

    Posted 12-03-2018 05:42:00 PM

    Michael, this is Jenkins specific question. engine Name and engine log-in details are available on global level.

    So anyone who have access to Jenkins will have access to SelfService Operations as well - that is what we observed so far.

    We are looking at engine credentials once entered should be available on project level - so only jenkin users who have access to that project will have access to perform jetstream operations - hope this is clear.




  • 4.  RE: Delphix Jenkins plugin - delphix engine credentials at root level or project level?
    Best Answer

    Posted 12-03-2018 06:39:00 PM
    I discussed this internally with the Jenkins team, and they recognize and understand what you are referring to. That is, you'd like to have specific engine credentials on the project scope and not the system settings.

    At this time, the plugin only allows configuration from the system level. Since the plugin is open source, you could customize the plugin as you need. Due to the scope of the change, if you do make the change, you will probably want to branch the plugin and install it manually.

    Apologies that we don't have a more immediate answer to this request, but I do hope you consider making the change in the open source project and posting back your results. It would be a great addition.

    This is a link to the source code: https://github.com/jenkinsci/delphix-plugin">https://github.com/jenkinsci/delphix-plugin">https://github.com/jenkinsci/delphix-plugin

    Thank you,
    Michael