Dynamic External Account Configuration in Spinnaker

Introduction Can we keep the cloud provider account details in a remote repository? If so, what if an account change happens in that remote configuration while Spinnaker service is running? Will it take effect without service restart? What are the steps involved? What other use cases are possible with remote configuration? This blog provides answers to the above questions. In…

Continue Reading

Managing Secrets in Spinnaker – Encryption using Symmetric Key

Spinnaker provides a way to encrypt secrets used by some of its services like clouddriver and igor (till this blog is published, only clouddriver, igor and echo services support this feature) through the Spring Config Server implementation. This document guides through the process of configuring encrypted secrets in Git repository and using them in two of the Spinnaker services –…

Continue Reading

Managing Secrets in Spinnaker – Loading Jenkins Credentials through Environment Variables

After adding a Jenkins master to Spinnaker through hal command, the ci part of the hal config looks like the following: ci: jenkins: enabled: true masters: – name: opsmx-jenkins-master permissions: {} address: http://opsmx-jenkins.com/jenkins username: opsmx_username password: password_in_plain_text Can we pass the Jenkins credentials as environment variables to Spinnaker? Yes. This blog explains how it can be achieved in two different…

Continue Reading