Я пытаюсь использовать поставщика Terraform Kubernetes через задание Jenkins для bootstrap кластера с набором ресурсов k8s.
Первое применение terraform выполнено успешно, создается кластер и применяются различные карты конфигурации и роли с помощью поставщика Kubernetes. Любые дальнейшие запуски задания завершаются сбоем на этапе планирования терраформирования, что выглядит как ошибка разрешения Jenkins:
Authentication required
<!--
You are authenticated as: anonymous
Groups that you are in:
Permission you need to have (but didn't): hudson.model.Hudson.Read
... which is implied by: hudson.security.Permission.GenericRead
... which is implied by: hudson.model.Hudson.Administer
-->
Это более подробный вывод отладки Terraform:
2020-06-15T19:13:07.349Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: 2020/06/15 19:13:07 [INFO] Checking ClusterRoleBinding <myclusterolebinding>
2020-06-15T19:13:07.349Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: 2020/06/15 19:13:07 [DEBUG] Kubernetes API Request Details:
2020-06-15T19:13:07.349Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: ---[ REQUEST ]---------------------------------------
2020-06-15T19:13:07.349Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: GET /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/<myclusterolebinding> HTTP/1.1
2020-06-15T19:13:07.349Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: Host: localhost
2020-06-15T19:13:07.349Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: User-Agent: HashiCorp/1.0 Terraform/0.12.25
2020-06-15T19:13:07.349Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: Accept: application/json, */*
2020-06-15T19:13:07.349Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: Accept-Encoding: gzip
2020-06-15T19:13:07.349Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4:
2020-06-15T19:13:07.349Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4:
2020-06-15T19:13:07.349Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: -----------------------------------------------------
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: 2020/06/15 19:13:07 [DEBUG] Kubernetes API Response Details:
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: ---[ RESPONSE ]--------------------------------------
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: HTTP/1.1 403 Forbidden
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: Content-Length: 1019
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: Connection: keep-alive
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: Content-Type: text/html;charset=utf-8
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: Date: Mon, 15 Jun 2020 19:13:07 GMT
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: Expires: Thu, 01 Jan 1970 00:00:00 GMT
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: Server: nginx/1.16.1
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: Set-Cookie: JSESSIONID.29d14cb2=node0qdjx8mlyyzevkaelw9qvzf7m29539.node0;Path=/;HttpOnly
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: X-Content-Type-Options: nosniff
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: X-Hudson: 1.395
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: X-Hudson-Cli-Port: 50000
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: X-Jenkins: 2.190.1
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: X-Jenkins-Cli-Port: 50000
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: X-Jenkins-Cli2-Port: 50000
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: X-Jenkins-Session: cf243b23
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: X-Permission-Implied-By: hudson.security.Permission.GenericRead
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: X-Permission-Implied-By: hudson.model.Hudson.Administer
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: X-Required-Permission: hudson.model.Hudson.Read
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: X-You-Are-Authenticated-As: anonymous
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: X-You-Are-In-Group-Disabled: JENKINS-39402: use -Dhudson.security.AccessDeniedException2.REPORT_GROUP_HEADERS=true or use /whoAmI to diagnose
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4:
2020-06-15T19:13:07.350Z [DEBUG] plugin.terraform-provider-kubernetes_v1.11.3_x4: <html><head><meta http-equiv='refresh' content='1;url=/securityRealm/commenceLogin?from=%2Fapis%2Frbac.authorization.k8s.io%2Fv1%2Fclusterrolebindings%2F<myclusterolebinding>'/><script>
Изучив конфигурацию матрицы аутентификации Jenkins, анонимный пользователь не имеет никаких разрешений (ie чтение) на сервере Jenkins, и я не особо заинтересован в изменении этого.
Я новичок в Jenkins, и исследование подобных проблем либо не было очень продуктивным, либо оказалось несвязанным.
Любая помощь по этому поводу приветствуется!