第 6 章 为通用或 GitHub Webhook 创建 secret

流程

1. 创建编码的 secret 字符串：

   1. 创建名为 的文件，如 secret.txt。

   2. 在 secret.txt 文件中，以纯文本形式输入 secret 字符串。

      例如：

      qwerty

      Copy to Clipboard Toggle word wrap

   3. 要对字符串进行编码，请输入以下命令：

      base64 secret.txt

      Copy to Clipboard Toggle word wrap

      前面的 命令显示编码的字符串。

      例如：

      cXdlcnR5Cg==

      Copy to Clipboard Toggle word wrap

2. 创建定义类型为 Secret 的 secret.yaml 文件。

   例如：

   kind: Secret
   apiVersion: v1
   metadata:
     name: jws-secret
   data:
     WebHookSecretKey: cXdlcnR5Cg==

   Copy to Clipboard Toggle word wrap

   在上例中，jws-secret 是 secret 的名称，cXdlcnR5Cg== 是编码的 secret 字符串。

3. 运行以下命令来创建 secret：

   oc create -f secret.yaml

   Copy to Clipboard Toggle word wrap

   前面的 命令会显示一个消息，以确认创建了该机密。

   例如：

   secret/jws-secret created

   Copy to Clipboard Toggle word wrap

验证

1. 获取 Webhook 的 URL：

   oc describe BuildConfig | grep webhooks

   Copy to Clipboard Toggle word wrap

   前面的命令以以下格式生成 Webhook URL：

   https://<host>:<port>/apis/build.openshift.io/v1/namespaces/<namespace>/buildconfigs/<name>/webhooks/<secret>/generic

   Copy to Clipboard Toggle word wrap

2. 创建一个名为 的最小 JSON 文件，如 payload.json ：

   {}

   Copy to Clipboard Toggle word wrap

3. 要向 Webhook 发送请求，请输入以下 curl 命令：

   curl -H "X-GitHub-Event: push" -H "Content-Type: application/json" -k -X POST --data-binary @payload.json https://<host>:<port>/apis/build.openshift.io/v1/namespaces/<namespace>/buildconfigs/<name>/webhooks/<secret>/generic

   Copy to Clipboard Toggle word wrap

   在上例中，payload.json 是您创建的最小 JSON 文件的名称。

   将 URL 字符串中的 <host &gt ;、<port &gt ;、<namespace > 和 <name > 替换为适合您的环境的值。将 <secret > 替换为您为 Webhook 创建的 secret 的名称。

   前面的命令以 JSON 格式生成以下类型的 Webhook 响应：

   {"kind":"Build","apiVersion":"build.openshift.io/v1","metadata":{"name":"test-2","namespace":"jfc","selfLink":"/apis/build.openshift.io/v1/namespaces/jfc/buildconfigs/test-2/instantiate","uid":"a72dd529-edc6-4e1c-898e-7c0dbbea176e","resourceVersion":"846159","creationTimestamp":"2020-10-30T12:29:30Z","labels":{"application":"test","buildconfig":"test","openshift.io/build-config.name":"test","openshift.io/build.start-policy":"Serial"},"annotations":{"openshift.io/build-config.name":"test","openshift.io/build.number":"2"},"ownerReferences":[{"apiVersion":"build.openshift.io/v1","kind":"BuildConfig","name":"test","uid":"1f78fa3f-2f3b-421b-9f49-192184cc2280","controller":true}],"managedFields":[{"manager":"openshift-apiserver","operation":"Update","apiVersion":"build.openshift.io/v1","time":"2020-10-30T12:29:30Z","fieldsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.number":{}},"f:labels":{".":{},"f:application":{},"f:buildconfig":{},"f:openshift.io/build-config.name":{},"f:openshift.io/build.start-policy":{}},"f:ownerReferences":{".":{},"k:{\"uid\":\"1f78fa3f-2f3b-421b-9f49-192184cc2280\"}":{".":{},"f:apiVersion":{},"f:controller":{},"f:kind":{},"f:name":{},"f:uid":{}}}},"f:spec":{"f:output":{"f:to":{".":{},"f:kind":{},"f:name":{}}},"f:serviceAccount":{},"f:source":{"f:contextDir":{},"f:git":{".":{},"f:ref":{},"f:uri":{}},"f:type":{}},"f:strategy":{"f:sourceStrategy":{".":{},"f:env":{},"f:forcePull":{},"f:from":{".":{},"f:kind":{},"f:name":{}},"f:pullSecret":{".":{},"f:name":{}}},"f:type":{}},"f:triggeredBy":{}},"f:status":{"f:conditions":{".":{},"k:{\"type\":\"New\"}":{".":{},"f:lastTransitionTime":{},"f:lastUpdateTime":{},"f:status":{},"f:type":{}}},"f:config":{".":{},"f:kind":{},"f:name":{},"f:namespace":{}},"f:phase":{}}}}]},"spec":{"serviceAccount":"builder","source":{"type":"Git","git":{"uri":"https://github.com/jfclere/demo-webapp.git","ref":"master"},"contextDir":"/"},"strategy":{"type":"Source","sourceStrategy":{"from":{"kind":"DockerImage","name":"image-registry.openshift-image-registry.svc:5000/jfc/jboss-webserver54-tomcat9-openshift@sha256:75dcdf81011e113b8c8d0a40af32dc705851243baa13b68352706154174319e7"},"pullSecret":{"name":"builder-dockercfg-rvbh8"},"env":[{"name":"MAVEN_MIRROR_URL"},{"name":"ARTIFACT_DIR"}],"forcePull":true}},"output":{"to":{"kind":"ImageStreamTag","name":"test:latest"}},"resources":{},"postCommit":{},"nodeSelector":null,"triggeredBy":[{"message":"Generic WebHook","genericWebHook":{"secret":"\u003csecret\u003e"}}]},"status":{"phase":"New","config":{"kind":"BuildConfig","namespace":"jfc","name":"test"},"output":{},"conditions":[{"type":"New","status":"True","lastUpdateTime":"2020-10-30T12:29:30Z","lastTransitionTime":"2020-10-30T12:29:30Z"}]}}
   {
     "kind": "Status",
     "apiVersion": "v1",
     "metadata": {
   
     },
     "status": "Success",
     "message": "no git information found in payload, ignoring and continuing with build",
     "code": 200
   }

   Copy to Clipboard Toggle word wrap