openstack plugin not load Credentials to Credential field

[snup67]

Jenkins and plugins versions report

openstack plugin not load Credentials to Credential field

   **openstack plugin:** 1456.v1c7380506a_ed
   **jenkins Release:** 2.504.3 LTS

I configured user and password in Jenkins Global credentials (unrestricted), but when I want to configure it at openstack configuration at Credential field, I don't see all that configured at Global credentials (unrestricted) so I can't choose. The Credential field not upload from Global credentials (unrestricted).

when I'm clicking on Test connection button an error appear No credential found for

What Operating System are you using (both controller, and any agents involved in the problem)?

jmaster is a pod on Kubernetes platform.
the pod is mounted to NFS storage so all Jenkins_home located as folder in NFS path.
all working well except the openstack plugin configuration.

Reproduction steps

--

Expected Results

no results

Actual Results

no results

Anything else?

No response

Are you interested in contributing a fix?

No response

[simonelbaz]

Hi, i suggest you to use JCasc (example found in README). It may unblock you.

[snup67]

Hi @simonelbaz
I'm using Jcasc, but it didn't help.
The configuration below, I deleted the values from security reason (I copied it from the Casc after configure in Console UI)

[simonelbaz]

The credentialsId should have a corresponding paragraph in the credentials section.

Example:

$ grep -i credential casc.yaml
        credentialsId: "openstack_service_credentials"
              credentialsId: "openstack_ssh_key"
credentials:
    domainCredentials:
      - credentials:
              id: "openstack_service_credentials"
              id: "openstack_service_credentialsV2"

[shalom-halevy]

Thanks @simonelbaz
of course I have also credentials in casc.yaml file
the deferent is that I'm using Username and Password and you mention ssh_key.

is it OK? or I need to use ssh_key?

[simonelbaz]

Thanks @simonelbaz of course I have also credentials in casc.yaml file the deferent is that I'm using Username and Password and you mention ssh_key.

is it OK? or I need to use ssh_key?

Here is the casc.yaml I use for test purpose:

jenkins:
  clouds:
    - openstack:
        name: "foo"
        endPointUrl: "http://x.x.x.x/identity/v3"
        credentialsId: "openstack_service_credentials"
        ignoreSsl: true
        zone: RegionOne
        cleanfreq: 30
        slaveOptions:
          bootSource:
            image:
              name: "test-image"
          hardwareId: "test1"
          networkId: "private"
          instanceCap: 2
          instancesMin: 1
          floatingIpPool: "public"
          startTimeout: 960000
          keyPairName: "testkey"
          retentionTime: 42
          userDataId: "user-data-id"
          numExecutors: 2
          jvmOptions: "-Xmx128M"
          fsRoot: "/tmp/foo"
          securityGroups: "test-secgroup"
          launcherFactory:
            ssh:
              credentialsId: "openstack_ssh_key"
              javaPath: "java"
        templates:
          - name: "test-plugin-openstack"
            labels: "linux"

unclassified:
  globalConfigFiles:
    configs:
      - openstackUserData:
          id: user-data-id
          name: "My user data"
          comment: "... with a comment"
          content: |
            #cloud-config
            allow_public_ssh_keys: true
            disable_root: true
            ssh_authorized_keys:
              - ssh-rsa ****
            ssh_keys:
              rsa_private: |
                -----BEGIN RSA PRIVATE KEY-----
                ...
                -----END RSA PRIVATE KEY-----
              rsa_public: ssh-rsa ***
            ssh_pwauth: True
            chpasswd: { expire: False }

            users:
              - name: jenkins
                ssh_authorized_keys:
                  - ssh-rsa ***
                lock-passwd: false
                inactive: false
                system: false
                password: xx
              - name: root
                password: xx
                lock-passwd: false
                inactive: false
                system: false

            packages:
              - openjdk-17-jre

credentials:
  system:
    domainCredentials:
      - credentials:
          - openstackV3:
              scope: SYSTEM
              id: "openstack_service_credentials"
              description: "TestCasc"
              userName: "admin"
              userDomain: "Default"
              projectName: "demo"
              projectDomain: "Default"
              password: "xxxx" # Do not hardcode plaintext secrets for real world declarations!
          - openstackV2:
              scope: SYSTEM
              id: "openstack_service_credentialsV2"
              description: "desc"
              username: "xxx"
              password: "xxx" # Do not hardcode plaintext secrets for real world declarations!
              tenant: "tnt"
          - basicSSHUserPrivateKey:
              scope: SYSTEM
              id: "openstack_ssh_key"
              username: "xxx"
              privateKeySource:
                directEntry:
                  # Do not hardcode plaintext secrets for real world declarations!
                  privateKey: |
                    -----BEGIN RSA PRIVATE KEY-----
                    ....
                    -----END RSA PRIVATE KEY-----

[shalom-halevy]

@simonelbaz
Many thanks for your quick response, this example is very good.
I will update.