You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/basics/secret-parameters.md
+18-23Lines changed: 18 additions & 23 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,37 +8,32 @@ Concourse supports Cloud Foundry Credhub and Hashicorp Vault. They have a common
8
8
9
9
## Redeploy Concourse with Credhub
10
10
11
-
First, delete initial `tutorial` concourse:
11
+
We will now switch from our `docker-compose up` deployment of Concourse to [bucc](https://github.com/starkandwayne/bucc) to deploy a local single VM version of Concourse that has the Credhub credentials manager. As a bonus, `bucc` will allow you to deploy a production-version of Concourse to any public or private cloud. In this tutorial we will deploy `bucc` to your local machine.
12
12
13
-
```
14
-
cd ../../..
15
-
bosh delete-env manifests/concourse-lite.yml --state tmp/state.json
16
-
```
17
-
18
-
Now, switch to [bucc](https://github.com/starkandwayne/bucc) to deploy a local single VM version of Concourse that has the Credhub credentials manager.
13
+
First, you need to install [VirtualBox](https://www.virtualbox.org/wiki/Downloads) (for the local deployment of `bucc`).
Now run the following to deploy `bucc` to your local machine using VirtualBox:
28
23
29
-
```
24
+
```plain
30
25
bucc up --lite
31
26
```
32
27
33
28
If this fails with `command not found: bucc`, then perhaps you do not have [`direnv`](https://direnv.net/) installed. Never fear. Run to update your `$PATH` to add the `bin/bucc` command.
34
29
35
-
```
30
+
```plain
36
31
source .envrc
37
32
```
38
33
39
34
Now run:
40
35
41
-
```
36
+
```plain
42
37
bucc up --lite
43
38
```
44
39
@@ -48,7 +43,7 @@ The `bucc up --lite` command is similar to `bosh create-env` but adds Credhub to
48
43
49
44
To target and login to your new Concourse:
50
45
51
-
```
46
+
```plain
52
47
bucc fly
53
48
```
54
49
@@ -58,15 +53,15 @@ The Concourse dashboard UI is now at https://192.168.50.6/
58
53
59
54
To target and login to Credhub, the credentials manager included in `bucc`:
60
55
61
-
```
56
+
```plain
62
57
bucc credhub
63
58
```
64
59
65
60
## Reauthentication
66
61
67
62
Credhub will enthusiastically and frequently drop your login session:
68
63
69
-
```
64
+
```plain
70
65
You are not currently authenticated. Please log in to continue.
71
66
```
72
67
@@ -78,22 +73,22 @@ Similarly, `fly -t bucc` sessions will timeout. To re-authenticate, return to `~
78
73
79
74
Back in your main `concourse-tutorial` terminal window, return to the `tutorials/basic/parameters` folder, and install the pipeline from the preceding section to our new `bucc` concourse environment. Do not provide any explicit values for the parameters as these will come from the Credhub credentials manager:
80
75
81
-
```
76
+
```plain
82
77
cd ../parameters
83
78
fly -t bucc sp -p parameters -c pipeline.yml
84
79
fly -t bucc up -p parameters
85
80
```
86
81
87
82
## Insert values into Credentials Manager
88
83
89
-
```
84
+
```plain
90
85
credhub set -n /concourse/main/parameters/cat-name --type value --value garfield
91
86
credhub set -n /concourse/main/parameters/dog-name --type value --value oddie
92
87
```
93
88
94
89
Run the pipeline job to confirm that it dynamically fetched the secrets from Credhub:
A great feature of Concourse Credentials Manager - regardless if backed by Cloud Foundry Credhub or Hashicorp Vault - is that you can now update secrets/parameters and the new values will automatically be used the next time a job is run.
125
120
126
-
```
121
+
```plain
127
122
credhub set -n /concourse/main/cat-name --type value --value milo
128
123
credhub set -n /concourse/main/dog-name --type value --value otis
0 commit comments