amazon-web-services - 使用 groovy 脚本更新 jenkins 文件中的 aws 凭证

Question

在我的流程中，我会定期获得临时 AWS 凭证，并且在我的 Jenkins 文件中，我需要更新特定的 Jenkins Aws 凭证。我该如何更新它？我需要的原因是 Jenkins docker 方法 withRegistry 需要凭据 ID，每当我获得新的 AWS key 才能使用它时，我必须更新此凭据。

Answer 1

经过多次尝试和错误，我发现了这个:

import jenkins.model.*
import com.cloudbees.plugins.credentials.*
import com.cloudbees.plugins.credentials.impl.*
import com.cloudbees.plugins.credentials.domains.*
import com.cloudbees.jenkins.plugins.sshcredentials.impl.BasicSSHUserPrivateKey
import com.cloudbees.jenkins.plugins.awscredentials.AWSCredentialsImpl
import org.jenkinsci.plugins.plaincredentials.StringCredentials
   def changePassword = { id,accessKey, secKey ->
def creds = com.cloudbees.plugins.credentials.CredentialsProvider.lookupCredentials(
    com.cloudbees.jenkins.plugins.awscredentials.AWSCredentialsImpl.class,
    Jenkins.instance
)
def c = creds.findResult { it.id == id ? it : null }
if ( c ) {
    println "found credential ${c.id} for accessKey ${c.accessKey}"

    def credentials_store = Jenkins.instance.getExtensionList(
        \'com.cloudbees.plugins.credentials.SystemCredentialsProvider\'
        )[0].getStore()

    def result = credentials_store.updateCredentials(
        com.cloudbees.plugins.credentials.domains.Domain.global(), 
        c, 
        new AWSCredentialsImpl(c.scope, id, accessKey, secKey,c.description)
        )

    if (result) {
        println "password changed for ${accessKey}" 
    } else {
        println "failed to change password for ${accessKey}"
    }
} else {
  println "could not find credential for ${accessKey}"
}
}