[쿠버네티스] 젠킨스 플러그인 설치 & 깃랩연동

1. 젠킨스 플러그인 설치

shell

닫기 줄바꿈

1. Bitbucket Pipeline for Blue Ocean
2. Dashboard for Blue Ocean
3. Personalization for Blue Ocean
4. Display URL for Blue Ocean
5. Server Sent Events (SSE) Gateway
6. Events API for Blue Ocean
7. Blue Ocean Pipeline Editor
8. i18n for Blue Ocean
9. Autofavorite for Blue Ocean
10. Blue Ocean
11. NodeJS
12. GitLab
13. Generic Webhook Trigger
14. Gitlab Authentication
15. Gitlab API
16. GitLab Branch Source
17. Gitlab Merge Request Builder
18. Config File Provider
19. Docker
20. Docker Pipeline
21. docker-build-step
22. SSH Agent
23. Post build task

2. 깃랩 연결

  1) 깃랩 액세스 토큰 발행

2) 젠킨스 토큰 등록

 

3. 자바 인증서 오류 처리

mkdir -p /var/jenkins_home/cert

cd /var/jenkins_home/cert

curl -O https://gist.githubusercontent.com/lesstif/cd26f57b7cfd2cd55241b20e05b5cd93/raw/InstallCert.java

javac InstallCert.java

shell

닫기 줄바꿈

root@jenkins:/var/jenkins_home/cert# java -cp ./ InstallCert invako.kro.kr:8090
Loading KeyStore /opt/java/openjdk/lib/security/cacerts...
Opening connection to invako.kro.kr:8090...
Starting SSL handshake...

javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
‌at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
‌at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:360)
‌at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:303)
‌at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:298)
‌at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1357)
‌at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1232)
‌at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1175)
‌at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)
‌at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:443)
‌at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:421)
‌at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:183)
‌at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
‌at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1511)
‌at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1421)
‌at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:456)
‌at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:427)
‌at InstallCert.main(InstallCert.java:116)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
‌at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)
‌at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)
‌at java.base/sun.security.validator.Validator.validate(Validator.java:264)
‌at java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:313)
‌at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:233)
‌at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:110)
‌at InstallCert$SavingTrustManager.checkServerTrusted(InstallCert.java:199)
‌at java.base/sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSLContextImpl.java:1492)
‌at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1341)
‌... 12 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
‌at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148)
‌at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129)
‌at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
‌at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)
‌... 20 more

Server sent 1 certificate(s):

​1 Subject CN=invako.kro.kr, OU=Personal, O=invako, L=Osong, ST=South, C=CN
​​​Issuer  CN=invako.kro.kr, OU=Personal, O=invako, L=Osong, ST=Osong, C=CN
​​​sha1    50 e0 9d 5d d1 e0 98 18 bb e8 3c 82 7d 82 7e b8 af 8a 30 86 
​​​md5     3f 8a 70 cf d3 6a 36 1d b1 ca 23 7a 8e dd 0d 60 

Enter certificate to add to trusted keystore or 'q' to quit: [1]

1번 선택

shell

닫기 줄바꿈

​​Algorithm: [SHA512withRSA]
​​Signature:
0000: B1 58 36 ED 91 98 A8 0D   1D 01 5E E9 A3 0F 86 41  .X6.......^....A
0010: A3 21 78 39 15 E1 68 3B   8C F2 0B B6 D4 53 74 3B  .!x9..h;.....St;
0020: 51 AC E3 41 8B 2E 5D 7D   4A B7 78 EC A7 CA 88 05  Q..A..].J.x.....
0030: 36 25 96 CA 54 1F A6 B4   6F F1 58 07 1F EC C7 2C  6%..T...o.X....,
0040: 11 C6 2A 96 73 0F 99 70   AA D7 B9 51 77 57 31 95  ..*.s..p...QwW1.
0050: 8E B7 AC 24 72 89 AE BD   A1 85 DF 97 F8 E7 E5 88  ...$r...........
0060: F1 1E 01 C2 E2 02 8E DA   34 66 B7 87 8E 05 98 DF  ........4f......
0070: F7 54 94 21 ED AF 27 86   8B C3 4C ED 58 29 11 C8  .T.!..'...L.X)..
0080: 66 0C 29 24 1B 36 CD 9E   4E 20 BE D7 30 A7 D9 9B  f.)$.6..N ..0...
0090: 17 A3 23 F3 30 CC 52 0B   86 D5 0B B4 2A 05 B3 01  ..#.0.R.....*...
00A0: 65 F1 AA D7 46 39 68 E6   53 C6 FB EA 75 02 F8 2D  e...F9h.S...u..-
00B0: AB 0D 1A F8 4D 11 2A 86   71 F3 53 AD CE FB 70 5E  ....M.*.q.S...p^
00C0: 26 5B 09 0D 6F E4 B2 CB   61 49 C6 C9 87 41 40 5E  &[..o...aI...A@^
00D0: 30 93 41 9C F0 38 E0 D2   93 83 67 46 40 82 BA A6  0.A..8....gF@...
00E0: 09 AE 0E 0A C7 48 16 1B   AE 3A 66 29 0A F0 4E DE  .....H...:f)..N.
00F0: 49 83 BD 01 C0 83 70 5B   F4 12 EC CF E1 8B F6 AE  I.....p[........
0100: DE 4B 35 BF 3B D6 DC 79   0C 1B FE 68 CF 27 35 00  .K5.;..y...h.'5.
0110: 70 A9 91 CB E7 F2 53 3C   32 37 D1 AE 2A 21 17 D6  p.....S<27..*!..
0120: F3 CF 45 D1 A3 53 98 53   7C 36 BB 57 24 8B 8E 5C  ..E..S.S.6.W$..\
0130: 08 46 20 6A 52 D1 17 B8   2F 1D 8A 5C 3C B3 21 A8  .F jR.../..\<.!.
0140: 38 A3 0B DE BB 9F 6E 3A   7B A7 61 DE 32 80 B3 A0  8.....n:..a.2...
0150: 87 AF 4C 5B F8 C7 13 B3   1F 02 3B 3E 46 C4 EB 94  ..L[......;>F...
0160: 6C B2 E2 F3 2E 7C 21 91   75 4A B6 19 B2 D1 FA B1  l.....!.uJ......
0170: D2 4F B4 27 17 7E FE 86   DF 77 E5 A9 1C EA 3A A9  .O.'.....w....:.
0180: C8 97 B5 E4 27 27 1C F3   7A 63 91 8A C1 CA 3B BC  ....''..zc....;.
0190: A4 98 1F FB 99 F4 D9 43   A0 E2 C0 78 47 29 78 6C  .......C...xG)xl
01A0: FF 11 8C 13 90 0D FF 7C   4D 7C 17 47 3B 2E F0 1A  ........M..G;...
01B0: 2A 21 A7 44 D6 32 28 B9   16 08 1E 4E 33 32 B5 64  *!.D.2(....N32.d
01C0: DD C9 CB 6A 86 EC 16 41   DE 16 78 A9 53 74 69 E8  ...j...A..x.Sti.
01D0: 2F 20 80 F6 3F 53 46 49   D4 34 B1 35 A8 43 25 85  / ..?SFI.4.5.C%.
01E0: 9F 6C 38 B2 C7 25 F0 41   EA 4A 9B E2 C8 7A 2A 47  .l8..%.A.J...z*G
01F0: C9 F9 5C 15 14 27 C6 C7   80 F5 6F 18 6F 53 61 85  ..\..'....o.oSa.

]

Added certificate to keystore 'jssecacerts' using alias 'invako.kro.kr-1'

 

$ keytool -exportcert -keystore jssecacerts -storepass changeit -file output.cert -alias invako.kro.kr-1
   Certificate stored in file <output.cert>
    root@jenkins:/var/jenkins_home/cert# 

 

$ keytool -importcert -keystore ${JAVA_HOME}/lib/security/cacerts -storepass changeit -file output.cert -alias letsencrypt

shell

닫기 줄바꿈

Warning: use -cacerts option to access cacerts keystore
Owner: CN=invako.kro.kr, OU=Personal, O=invako, L=Osong, ST=South, C=CN
Issuer: CN=invako.kro.kr, OU=Personal, O=invako, L=Osong, ST=Osong, C=CN
Serial number: 61365f30bf5c20760ddb9544bb5719d7e7dde459
Valid from: Thu Jan 11 23:53:50 UTC 2024 until: Sun Jan 08 23:53:50 UTC 2034
Certificate fingerprints:
‌​SHA1: 50:E0:9D:5D:D1:E0:98:18:BB:E8:3C:82:7D:82:7E:B8:AF:8A:30:86
‌​SHA256: 22:90:D9:9A:26:44:9B:9D:44:C9:61:90:6A:BF:F2:8C:C0:33:EB:5C:EC:4D:02:74:4A:9C:ED:EB:72:48:87:B4
Signature algorithm name: SHA512withRSA
Subject Public Key Algorithm: 4096-bit RSA key
Version: 3

Extensions: 

#1: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 9D 39 8F 17 58 A9 81 00   9B A5 9C F1 01 44 60 09  .9..X........D`.
0010: A0 96 71 11                                        ..q.
]
]

#2: ObjectId: 2.5.29.19 Criticality=false
BasicConstraints:[
​​CA:false
​​PathLen: undefined
]

#3: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
​​serverAuth
]

#4: ObjectId: 2.5.29.15 Criticality=false
KeyUsage [
​​DigitalSignature
​​Non_repudiation
​​Key_Encipherment
​​Data_Encipherment
]

#5: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
​​DNSName: invako.kro.kr
]

#6: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 3C 64 12 AF C6 67 0B 58   C0 1D 10 E7 60 67 E1 1D  <d...g.X....`g..
0010: 80 13 55 B7                                        ..U.
]
]

Trust this certificate? [no]:  yes
Certificate was added to keystore