Ephemeral agent : configure access to kubectl

[Antoine Ameline]

Hi, I use bamboo server and with the last 9.4, I'd like to use the ephemeral agent concept.

My bamboo test server is running on a VM Debian 10 (only terminal)

Following documentation (cf. https://confluence.atlassian.com/bamboo/enabling-ephemeral-agent-support-1236444140.html), I tried to configure access to my k8s cluster : 

* adding kubectl on my bamboo server (VM debian) => ok

* adding my config file under [my install]/server/shared => ok

* configuring access to the config file in bamboo administration screen => not ok

Our cluster access is manager with OIDC (keycloack) and Iv'e got this error message : 

---

error: unknown command "oidc-login" for "kubectl" Unable to connect to the server: getting credentials: exec: executable kubectl failed with exit code 1

---

How can I configure bamboo to pass oidc authentication ? 

[Eduardo Alvarenga · Accepted solution]

Hello @Antoine Ameline

Based on your description, it appears that your Kubernetes configuration requires the oidc-login command to be available. Copy that file to the Bamboo Server and try again.

Sincerely,

Eduardo Alvarenga
Atlassian Support APAC

--please don't forget to Accept the answer if the reply is helpful-- 

[Antoine Ameline]

Hello @Eduardo Alvarenga ,

Sorry for my late answer, I was on other subjects.

So, for me, installing the oidc-login was not a solution. Problem with this tool, is that it's requiring the browser to authenticate against keycloack. 

In my case, my bamboo server is indstalled on debian terminal server.

After some tests, I finally choose a solution with a service account with a long life token. As my bamboo server is not exposed, it's not a security problem

Thanks for your help

I set the post as resolved