View all credentials on an instance (global, folders, users, ...)

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

View all credentials on an instance (global, folders, users, ...)

Geoffroy J
Hello

as a global instance admin, is there a way i can view (not decrypt) all credentials stored in it?
<instance_url>/credentials will only show global/system credentials.

If a credential is created within a Folder, the only way to view it is to go to url <instance_url>/job/<folder_name>/credentials/store/folder/

This is quite difficult to track all those credentials provided Folders are used quite extensively on our instance.
The same also apply to user credentials, although it is not on our immediate concerns.

Is there any option to activate on Jenkins to get such "recursive" view on credentials, or shall we go for a script to execute? Any pointer?

Regards

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/5f97f53c-82bb-498c-887d-ac9fce53ffban%40googlegroups.com.
Reply | Threaded
Open this post in threaded view
|

Re: View all credentials on an instance (global, folders, users, ...)

Ivan Fernandez Calvo
I think this groovy script is what you want https://github.com/cloudbees/jenkins-scripts/blob/master/list-credential.groovy

El lunes, 14 de septiembre de 2020 a las 14:57:33 UTC+2, [hidden email] escribió:
Hello

as a global instance admin, is there a way i can view (not decrypt) all credentials stored in it?
<instance_url>/credentials will only show global/system credentials.

If a credential is created within a Folder, the only way to view it is to go to url <instance_url>/job/<folder_name>/credentials/store/folder/

This is quite difficult to track all those credentials provided Folders are used quite extensively on our instance.
The same also apply to user credentials, although it is not on our immediate concerns.

Is there any option to activate on Jenkins to get such "recursive" view on credentials, or shall we go for a script to execute? Any pointer?

Regards

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/31f5dd0f-1069-4cac-81bc-470788914400n%40googlegroups.com.
Reply | Threaded
Open this post in threaded view
|

Re: View all credentials on an instance (global, folders, users, ...)

Geoffroy J
Thanks Ivan, this is a great start and it is properly listing folder-level credentials.
I just need to make the output more user friendly, especially adding the scope of the credential.

On Mon, 14 Sep 2020 at 18:08, Ivan Fernandez Calvo <[hidden email]> wrote:
I think this groovy script is what you want https://github.com/cloudbees/jenkins-scripts/blob/master/list-credential.groovy

El lunes, 14 de septiembre de 2020 a las 14:57:33 UTC+2, [hidden email] escribió:
Hello

as a global instance admin, is there a way i can view (not decrypt) all credentials stored in it?
<instance_url>/credentials will only show global/system credentials.

If a credential is created within a Folder, the only way to view it is to go to url <instance_url>/job/<folder_name>/credentials/store/folder/

This is quite difficult to track all those credentials provided Folders are used quite extensively on our instance.
The same also apply to user credentials, although it is not on our immediate concerns.

Is there any option to activate on Jenkins to get such "recursive" view on credentials, or shall we go for a script to execute? Any pointer?

Regards

--
You received this message because you are subscribed to a topic in the Google Groups "Jenkins Users" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/jenkinsci-users/l-3IuWtaCOs/unsubscribe.
To unsubscribe from this group and all its topics, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/31f5dd0f-1069-4cac-81bc-470788914400n%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CAG_uJ%2BDquA_takO1wUrs-1phj1rNT_UaB-Fzu8NaWtsHCP5UBA%40mail.gmail.com.