Comments on: How to use credentials in Jenkins projects?

By: Santosh

Santosh — Tue, 17 Dec 2019 13:51:19 +0000

I am pulling the db password from the server using Jenkins job and storing in environment variable in one of the stage in Jenkins pipeline and in another stage I can able to connect the app server with the stored environment variable as password successfully but the password is displayed as plain text on Jenkins console,I want to mask the password on Jenkins console(I don’t want to manually update password as CredentialsId, passwords are dynamically pull from remote server) .Can someone please let me know how i can achieve it. Thanks

By: Emil

Emil — Sun, 17 Feb 2019 18:34:07 +0000

In reply to Slavisa Popravak.

Hi,

I’m not sure whether I understand you well. Do you mean that you have credentials stored somewhere on disk or something similar? Or do you have an external script which you want to run in Jenkins, previously downloading it from the repository?

You should be able to use “credential binding” functionality for almost every idea you will find. If you run an external PowerShell script, you should pass a variable with a credential as an argument and it should work (but I have not made any tests).

By: Slavisa Popravak

Slavisa Popravak — Fri, 15 Feb 2019 13:44:43 +0000

Hi,
How to use $credential = get-credential in powershell script, and than run thad script with Jenkins.

And pass that $credential parameter into Jenkins

By: Karthi

Karthi — Mon, 19 Nov 2018 03:41:00 +0000

In reply to Emil. Got it. Thanks for the response. :)

By: Emil

Emil — Fri, 16 Nov 2018 11:20:07 +0000

In reply to Karthi.

Hi, Karthi!

Thanks for your reply. As far as I know, there is no just only one specific format for “secret file” – it depends on what you need. The secret file is represented by the path to this file in a Jenkins filesystem. So if there is an application which needs a secret file (in theory it can be an SSL/SSH certificate or something like that), you can use “secret file” credential and deliver that in a secure way. 🙂

By: Karthi

Karthi — Fri, 16 Nov 2018 09:33:42 +0000

Hi Emil,
Thanks for posting detailed explanation. Is there any specific format for “Secret File” to store credentials?
Please share if you have thoughts on secret file.

By: Emil

Emil — Mon, 16 Apr 2018 17:23:08 +0000

In reply to Jeff.

Thank you very much Jeff! I let myself add a part of your comment to post, of course with a notice that it’s your comment. 🙂 Thanks to this more people can read your clarification. But if you mind, I will remove that part – just let me know!

By: Jeff

Jeff — Mon, 16 Apr 2018 13:53:48 +0000

A clarification on the environment variables – Jenkins exports environment variables consistently, but you access them according to the scripting language in use. So in your shell script smtp example, an environment variable “foo” can be directly accessed with “$foo”. But in PowerShell, environment variables are accessed by using the expression parser, syntax “$env:foo”. This is why you see different ways of accessing the environment variable after Jenkins exports it.