Feat: Add get-secrets to lftools.jenkins

Get-credentials only produces username/password credentials, which does not include "secret text" stores. This feature will add the command "get-secrets" in order to print these as well. Change-Id: Iac1911b486be1dc125a42b23595431c7065adfce Signed-off-by: Eric Ball <[email protected]>
lfit · Feb 3, 2022 · a9eec3a · a9eec3a
1 parent a74bfda
commit a9eec3a
Show file tree

Hide file tree

Showing 2 changed files with 34 additions and 0 deletions.
diff --git a/lftools/cli/jenkins/__init__.py b/lftools/cli/jenkins/__init__.py
@@ -73,6 +73,32 @@ def creds = com.cloudbees.plugins.credentials.CredentialsProvider.lookupCredenti
     log.info(result)
 
 
+@click.command()
+@click.pass_context
+def get_secrets(ctx):
+    """Print all available secrets."""
+    jenkins = ctx.obj["jenkins"]
+    groovy_script = """
+import com.cloudbees.plugins.credentials.*
+
+println "Printing all secrets..."
+def creds = com.cloudbees.plugins.credentials.CredentialsProvider.lookupCredentials(
+    com.cloudbees.plugins.credentials.common.StandardCredentials.class,
+    Jenkins.instance,
+    null,
+    null
+);
+
+for (c in creds) {
+    try {
+        println(c.id + " : " + c.secret )
+    } catch (MissingPropertyException) {}
+}
+"""
+    result = jenkins.server.run_script(groovy_script)
+    log.info(result)
+
+
 @click.command()
 @click.argument("groovy_file")
 @click.pass_context
@@ -179,6 +205,7 @@ def node = slave.computer
 jenkins_cli.add_command(nodes)
 jenkins_cli.add_command(builds)
 jenkins_cli.add_command(get_credentials, name="get-credentials")
+jenkins_cli.add_command(get_secrets, name="get-secrets")
 jenkins_cli.add_command(groovy)
 jenkins_cli.add_command(jobs)
 jenkins_cli.add_command(quiet_down, name="quiet-down")

diff --git a/releasenotes/notes/add-get-secrets-402d7e2452994baa.yaml b/releasenotes/notes/add-get-secrets-402d7e2452994baa.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - |
+    Add ``get-secrets`` to lftools.jenkins. ``get-credentials`` only produces
+    username/password credentials, which does not include "secret text" stores.
+    This feature will add the command ``get-secrets`` in order to print these as
+    well.