Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document git ssh symlink requirement #2663

Merged
merged 1 commit into from May 21, 2020
Merged

Document git ssh symlink requirement #2663

merged 1 commit into from May 21, 2020

Conversation

ghost
Copy link

@ghost ghost commented May 21, 2020

Changes

Adds documentation around #2638

When relying on creds-init to generate git ssh credentials
a user will need to symlink from /tekton/home/.ssh to /root/.ssh
if they're issuing git commands in a Step's script or image.

This commit documents the need to symlink in auth.md.

Submitter Checklist

These are the criteria that every PR should meet, please check them off as you
review them:

See the contribution guide for more details.

Double check this list of stuff that's easy to miss:

Reviewer Notes

If API changes are included, additive changes must be approved by at least two OWNERS and backwards incompatible changes must be approved by more than 50% of the OWNERS, and they must first be added in a backwards compatible way.

@ghost ghost added the kind/documentation Categorizes issue or PR as related to documentation. label May 21, 2020
@tekton-robot tekton-robot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label May 21, 2020
docs/auth.md Outdated
@@ -108,6 +108,12 @@ When the `Run` executes, before steps execute, a `~/.ssh/config` will be
generated containing the key configured in the `Secret`. This key is then used
to authenticate when retrieving any `PipelineResources`.

Note: SSH credentials can also be used when invoking vanilla `git` commands
in your Task's Steps. However, you will first need to symlink `/tekton/home/.ssh`
to `/root/.ssh` because `ssh` ignores the `$HOME` environment variable, which by
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

NIT: Perhaps instead of just /root/.ssh we could say to your user .ssh folder - e.g. /root/.ssh when using root.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good call, I've updated to include that, and added a little more detail about why this is necessary. Also turned this change into its own section because the content spans multiple paragraphs.

Copy link
Member

@afrittoli afrittoli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for this!
/approve

@tekton-robot
Copy link
Collaborator

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: afrittoli

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added approved Indicates a PR has been approved by an approver from all required OWNERS files. size/S Denotes a PR that changes 10-29 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels May 21, 2020
When relying on creds-init to generate git ssh credentials
a user will need to symlink from /tekton/home/.ssh to /root/.ssh
if they're issuing `git` commands in a Step's script or image.

This commit documents the need to symlink in auth.md.
Copy link
Member

@afrittoli afrittoli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the updates!
/lgtm

@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label May 21, 2020
@tekton-robot tekton-robot merged commit 69088aa into tektoncd:master May 21, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. kind/documentation Categorizes issue or PR as related to documentation. lgtm Indicates that a PR is ready to be merged. size/S Denotes a PR that changes 10-29 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants