integrate Jenkins with AWS CodeCommit

Question

I'm trying to integrate Jenkins with AWS CodeCommit. My jenkins is running on an ec2 instance with ubuntu 14.04. 

The problem is, that sudo -u jenkins aws configure isn't executed because the jenkins user has no permissions.

What would you do?

Answer 1

Hey @Vishal, Follow these steps:

1. Create an ssh key on the Jenkins EC2 instance (/var/lib/jenkins/.ssh/id_rsa)

   ssh-keygen -b 2048 -t rsa -f /var/lib/jenkins/.ssh/id-rsa -a -N
   

2. Upload the public key to an IAM user (IAM user must have CodeCommit access)

   aws iam upload-ssh-public-key --user-name <username> --ssh-public-key-body file:///var/lib/jenkins/.ssh/id_rsa.pub
   

3. Collect the SSHPublicKeyID when you upload the key

   {
    "SSHPublicKey": {
    "UserName": "jenkins",
    "Status": "Active",
    "SSHPublicKeyBody": "ssh-rsa <rsa-key> <host>\n",
    "UploadDate": "2015-09-02T19:18:24.309Z",
    "Fingerprint": "xxx",
    "SSHPublicKeyId": "******"
    }
   }
   

4. Create/modify SSH config file

   Host git-codecommit.*.amazonaws.com
     User APK*******
     IdentityFile /var/lib/jenkins/.ssh/id_rsa
     StrictHostKeyChecking no
   

5. Where the ****** is the value of the Key ID retrieved in step 3

6. Copy or move this file to /var/lib/jenkins/.ssh/config (or wherever Jenkins is installed on your EC2 instance)
7. Ensure jenkins' user has 0600 permissions to /var/lib/jenkins/.ssh directory
8. Create a Jenkins job as described in the blog post you first used. For the repository URL, however, enter the SSH url instead.

Answer 2

jenkins user add in visudo or /etc/sudoers

Comments

Is that all?

---

Yea this answer makes sense...Giving root priviliges to the user...