";
187 | }
188 |
189 | SessionCredentials sessionCredentials = SessionCredentials.builder()
190 | .accessKeyId(accessKeyId)
191 | .secretAccessKey(secretKey)
192 | .sessionToken(sessionToken)
193 | .build();
194 |
195 | return () -> sessionCredentials;
196 | }
197 |
198 | @NonNull
199 | @Override
200 | public URI toURI(@NonNull String container, @NonNull String key) {
201 | try (S3Client s3Client = getConfiguration().getAmazonS3ClientBuilder().build()) {
202 | GetUrlRequest getUrlRequest = GetUrlRequest.builder().key(key).bucket(container).build();
203 | URI uri = s3Client.utilities().getUrl(getUrlRequest).toURI();
204 | LOGGER.fine(() -> container + " / " + key + " → " + uri);
205 | return uri;
206 | } catch (URISyntaxException e) {
207 | throw new IllegalStateException(e);
208 | }
209 | }
210 |
211 | /**
212 | * @see Generate a
213 | * Pre-signed Object URL using AWS SDK for Java
214 | */
215 | @Override
216 | public URL toExternalURL(@NonNull Blob blob, @NonNull HttpMethod httpMethod) throws IOException {
217 |
218 | String customEndpoint = getConfiguration().getResolvedCustomEndpoint();
219 | try (S3Client s3Client = getConfiguration().getAmazonS3ClientBuilderWithCredentials().build()) {
220 | S3Presigner.Builder presignerBuilder = S3Presigner.builder()
221 | .fipsEnabled(FIPS140.useCompliantAlgorithms())
222 | .credentialsProvider(CredentialsAwsGlobalConfiguration.get().getCredentials())
223 | .s3Client(s3Client);
224 | if (StringUtils.isNotBlank(customEndpoint)) {
225 | presignerBuilder.endpointOverride(URI.create(customEndpoint));
226 | }
227 |
228 | String customRegion = getConfiguration().getCustomSigningRegion();
229 | if(StringUtils.isBlank(customRegion)) {
230 | customRegion = CredentialsAwsGlobalConfiguration.get().getRegion();
231 | }
232 | if(StringUtils.isNotBlank(customRegion)) {
233 | presignerBuilder.region(Region.of(customRegion));
234 | }
235 |
236 | S3Configuration s3Configuration = S3Configuration.builder()
237 | .pathStyleAccessEnabled(getConfiguration().getUsePathStyleUrl())
238 | .accelerateModeEnabled(getConfiguration().getUseTransferAcceleration())
239 | .build();
240 | presignerBuilder.serviceConfiguration(s3Configuration);
241 |
242 | try (S3Presigner presigner = presignerBuilder.build()) {
243 | Duration expiration = Duration.ofHours(1);
244 | String container = blob.getMetadata().getContainer();
245 | String name = blob.getMetadata().getName();
246 | LOGGER.log(Level.FINE, "Generating presigned URL for {0} / {1} for method {2}",
247 | new Object[]{container, name, httpMethod});
248 | String contentType;
249 | switch (httpMethod) {
250 | case PUT:
251 | // Only set content type for upload URLs, so that the right S3 metadata gets set
252 | contentType = blob.getMetadata().getContentMetadata().getContentType();
253 | PutObjectRequest putObjectRequest = PutObjectRequest.builder().bucket(container)
254 | .contentType(contentType)
255 | .key(name)
256 | .build();
257 | PutObjectPresignRequest putObjectPresignRequest = PutObjectPresignRequest.builder()
258 | .signatureDuration(expiration)
259 | .putObjectRequest(putObjectRequest).build();
260 | return presigner.presignPutObject(putObjectPresignRequest).url();
261 | case GET:
262 | GetObjectRequest getObjectRequest = GetObjectRequest.builder().bucket(container).key(name).build();
263 | GetObjectPresignRequest getObjectPresignRequest = GetObjectPresignRequest.builder()
264 | .signatureDuration(expiration)
265 | .getObjectRequest(getObjectRequest).build();
266 | return presigner.presignGetObject(getObjectPresignRequest).url();
267 | default:
268 | throw new IOException("HTTP Method " + httpMethod + " not supported for S3");
269 | }
270 |
271 | }
272 | }
273 | }
274 |
275 | @Symbol("s3")
276 | @Extension
277 | public static final class DescriptorImpl extends BlobStoreProviderDescriptor {
278 |
279 | @Override
280 | public String getDisplayName() {
281 | return "Amazon S3";
282 | }
283 |
284 | /**
285 | *
286 | * @return true if a container is configured.
287 | */
288 | public boolean isConfigured(){
289 | return StringUtils.isNotBlank(S3BlobStoreConfig.get().getContainer());
290 | }
291 |
292 | }
293 |
294 | @Override
295 | public String toString() {
296 | final StringBuilder sb = new StringBuilder("S3BlobStore{");
297 | sb.append("container='").append(getContainer()).append('\'');
298 | sb.append(", prefix='").append(getPrefix()).append('\'');
299 | sb.append(", region='").append(getRegion()).append('\'');
300 | sb.append(", deleteArtifacts='").append(isDeleteArtifacts()).append('\'');
301 | sb.append(", deleteStashes='").append(isDeleteStashes()).append('\'');
302 | sb.append('}');
303 | return sb.toString();
304 | }
305 |
306 | }
307 |
--------------------------------------------------------------------------------
/src/main/java/io/jenkins/plugins/artifact_manager_jclouds/s3/S3BlobStoreConfig.java:
--------------------------------------------------------------------------------
1 | /*
2 | * The MIT License
3 | *
4 | * Copyright 2018 CloudBees, Inc.
5 | *
6 | * Permission is hereby granted, free of charge, to any person obtaining a copy
7 | * of this software and associated documentation files (the "Software"), to deal
8 | * in the Software without restriction, including without limitation the rights
9 | * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 | * copies of the Software, and to permit persons to whom the Software is
11 | * furnished to do so, subject to the following conditions:
12 | *
13 | * The above copyright notice and this permission notice shall be included in
14 | * all copies or substantial portions of the Software.
15 | *
16 | * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 | * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 | * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 | * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 | * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 | * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 | * THE SOFTWARE.
23 | */
24 |
25 | package io.jenkins.plugins.artifact_manager_jclouds.s3;
26 |
27 | import java.io.IOException;
28 | import java.net.URI;
29 | import java.net.URISyntaxException;
30 | import java.util.regex.Pattern;
31 |
32 | import org.apache.commons.lang.StringUtils;
33 | import org.kohsuke.stapler.DataBoundSetter;
34 | import org.kohsuke.stapler.QueryParameter;
35 | import org.kohsuke.stapler.interceptor.RequirePOST;
36 |
37 | import com.google.common.annotations.VisibleForTesting;
38 |
39 | import edu.umd.cs.findbugs.annotations.NonNull;
40 | import edu.umd.cs.findbugs.annotations.SuppressFBWarnings;
41 |
42 | import hudson.Extension;
43 | import hudson.ExtensionList;
44 | import hudson.Util;
45 | import hudson.model.Failure;
46 | import hudson.util.FormValidation;
47 |
48 | import io.jenkins.plugins.artifact_manager_jclouds.JCloudsVirtualFile;
49 | import io.jenkins.plugins.aws.global_configuration.AbstractAwsGlobalConfiguration;
50 | import io.jenkins.plugins.aws.global_configuration.CredentialsAwsGlobalConfiguration;
51 |
52 | import jenkins.model.Jenkins;
53 | import jenkins.security.FIPS140;
54 | import org.jenkinsci.Symbol;
55 | import software.amazon.awssdk.auth.credentials.AwsSessionCredentials;
56 | import software.amazon.awssdk.auth.credentials.StaticCredentialsProvider;
57 | import software.amazon.awssdk.regions.Region;
58 | import software.amazon.awssdk.services.s3.S3Client;
59 | import software.amazon.awssdk.services.s3.S3ClientBuilder;
60 | import software.amazon.awssdk.services.s3.model.Bucket;
61 | import software.amazon.awssdk.services.s3.model.CreateBucketRequest;
62 | import software.amazon.awssdk.services.s3.model.CreateBucketResponse;
63 | import software.amazon.awssdk.services.s3.model.GetBucketLocationRequest;
64 |
65 | /**
66 | * Store the S3BlobStore configuration to save it on a separate file. This make that
67 | * the change of container does not affected to the Artifact functionality, you could change the container
68 | * and it would still work if both container contains the same data.
69 | */
70 | @Symbol("s3")
71 | @Extension
72 | public final class S3BlobStoreConfig extends AbstractAwsGlobalConfiguration {
73 |
74 | private static final String BUCKET_REGEXP = "^([a-z]|(\\d(?!\\d{0,2}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3})))([a-z\\d]|(\\.(?!(\\.|-)))|(-(?!\\.))){1,61}[a-z\\d\\.]$";
75 | private static final Pattern bucketPattern = Pattern.compile(BUCKET_REGEXP);
76 |
77 | private static final String ENDPOINT_REGEXP = "^[a-z0-9][a-z0-9-.]{0,}(?::[0-9]{1,5})?$";
78 | private static final Pattern endPointPattern = Pattern.compile(ENDPOINT_REGEXP, Pattern.CASE_INSENSITIVE);
79 |
80 | @SuppressWarnings("FieldMayBeFinal")
81 | private static boolean DELETE_ARTIFACTS = Boolean.getBoolean(S3BlobStoreConfig.class.getName() + ".deleteArtifacts");
82 | @SuppressWarnings("FieldMayBeFinal")
83 | private static boolean DELETE_STASHES = Boolean.getBoolean(S3BlobStoreConfig.class.getName() + ".deleteStashes");
84 |
85 | /**
86 | * Name of the S3 Bucket.
87 | */
88 | private String container;
89 | /**
90 | * Prefix to use for files, use to be a folder.
91 | */
92 | private String prefix;
93 | @Deprecated private transient String region, credentialsId;
94 |
95 | private boolean usePathStyleUrl;
96 |
97 | private boolean useHttp;
98 |
99 | private boolean useTransferAcceleration;
100 |
101 | private boolean disableSessionToken;
102 |
103 | private String customEndpoint;
104 |
105 | private String customSigningRegion;
106 |
107 | private final boolean deleteArtifacts;
108 |
109 | private final boolean deleteStashes;
110 |
111 | /**
112 | * class to test configuration against Amazon S3 Bucket.
113 | */
114 | private static class S3BlobStoreTester extends S3BlobStore {
115 | private static final long serialVersionUID = -3645770416235883487L;
116 |
117 | @SuppressFBWarnings(value = "SE_TRANSIENT_FIELD_NOT_RESTORED", justification = "This transient field is only modified from the class constructor.")
118 | private transient S3BlobStoreConfig config;
119 |
120 | S3BlobStoreTester(String container, String prefix, boolean useHttp,
121 | boolean useTransferAcceleration, boolean usePathStyleUrl,
122 | boolean disableSessionToken, String customEndpoint,
123 | String customSigningRegion) {
124 | config = new S3BlobStoreConfig();
125 | config.setContainer(container);
126 | config.setPrefix(prefix);
127 | config.setCustomEndpoint(customEndpoint);
128 | config.setCustomSigningRegion(customSigningRegion);
129 | config.setUseHttp(useHttp);
130 | config.setUseTransferAcceleration(useTransferAcceleration);
131 | config.setUsePathStyleUrl(usePathStyleUrl);
132 | config.setDisableSessionToken(disableSessionToken);
133 | }
134 |
135 | @Override
136 | public S3BlobStoreConfig getConfiguration() {
137 | return config;
138 | }
139 | }
140 |
141 | public S3BlobStoreConfig() {
142 | load();
143 | if (Util.fixEmpty(region) != null || Util.fixEmpty(credentialsId) != null) {
144 | CredentialsAwsGlobalConfiguration.get().setRegion(region);
145 | CredentialsAwsGlobalConfiguration.get().setCredentialsId(credentialsId);
146 | region = null;
147 | credentialsId = null;
148 | save();
149 | }
150 | deleteArtifacts = DELETE_ARTIFACTS;
151 | deleteStashes = DELETE_STASHES;
152 | }
153 |
154 | public String getContainer() {
155 | return container;
156 | }
157 |
158 | @DataBoundSetter
159 | public void setContainer(String container) {
160 | this.container = container;
161 | checkValue(doCheckContainer(container));
162 | save();
163 | }
164 |
165 | public String getPrefix() {
166 | return prefix;
167 | }
168 |
169 | @DataBoundSetter
170 | public void setPrefix(String prefix){
171 | this.prefix = prefix;
172 | checkValue(doCheckPrefix(prefix));
173 | save();
174 | }
175 |
176 | private void checkValue(@NonNull FormValidation formValidation) {
177 | if (formValidation.kind == FormValidation.Kind.ERROR) {
178 | throw new Failure(formValidation.getMessage());
179 | }
180 | }
181 |
182 | public boolean isDeleteArtifacts() {
183 | return deleteArtifacts;
184 | }
185 |
186 | public boolean isDeleteStashes() {
187 | return deleteStashes;
188 | }
189 |
190 | public boolean getUsePathStyleUrl() {
191 | return usePathStyleUrl;
192 | }
193 |
194 | @DataBoundSetter
195 | public void setUsePathStyleUrl(boolean usePathStyleUrl){
196 | this.usePathStyleUrl = usePathStyleUrl;
197 | save();
198 | }
199 |
200 | public boolean getUseHttp() {
201 | return useHttp;
202 | }
203 |
204 | @DataBoundSetter
205 | public void setUseHttp(boolean useHttp) {
206 | checkValue(doCheckUseHttp(useHttp));
207 | this.useHttp = useHttp;
208 | save();
209 | }
210 |
211 | public boolean getUseTransferAcceleration() {
212 | return useTransferAcceleration;
213 | }
214 |
215 | @DataBoundSetter
216 | public void setUseTransferAcceleration(boolean useTransferAcceleration){
217 | this.useTransferAcceleration = useTransferAcceleration;
218 | save();
219 | }
220 |
221 | public boolean getDisableSessionToken() {
222 | return disableSessionToken;
223 | }
224 |
225 | @DataBoundSetter
226 | public void setDisableSessionToken(boolean disableSessionToken){
227 | this.disableSessionToken = disableSessionToken;
228 | save();
229 | }
230 |
231 | public String getCustomEndpoint() {
232 | return customEndpoint;
233 | }
234 |
235 | @DataBoundSetter
236 | public void setCustomEndpoint(String customEndpoint){
237 | checkValue(doCheckCustomEndpoint(customEndpoint));
238 | this.customEndpoint = customEndpoint;
239 | save();
240 | }
241 |
242 | public String getResolvedCustomEndpoint() {
243 | if(StringUtils.isNotBlank(customEndpoint)) {
244 | String protocol;
245 | if(getUseHttp()) {
246 | protocol = "http";
247 | } else {
248 | protocol = "https";
249 | }
250 | return protocol + "://" + customEndpoint;
251 | }
252 | return null;
253 | }
254 |
255 | public String getCustomSigningRegion() {
256 | return customSigningRegion;
257 | }
258 |
259 | @DataBoundSetter
260 | public void setCustomSigningRegion(String customSigningRegion){
261 | this.customSigningRegion = customSigningRegion;
262 | checkValue(doCheckCustomSigningRegion(this.customSigningRegion));
263 | save();
264 | }
265 |
266 | @NonNull
267 | @Override
268 | public String getDisplayName() {
269 | return "Artifact Manager Amazon S3 Bucket";
270 | }
271 |
272 | @NonNull
273 | public static S3BlobStoreConfig get() {
274 | return ExtensionList.lookupSingleton(S3BlobStoreConfig.class);
275 | }
276 |
277 | /**
278 | *
279 | * @return an AmazonS3ClientBuilder using the region or not, it depends if a region is configured or not.
280 | */
281 | S3ClientBuilder getAmazonS3ClientBuilder() throws URISyntaxException {
282 | S3ClientBuilder ret = S3Client.builder();
283 |
284 | if (StringUtils.isNotBlank(getResolvedCustomEndpoint())) {
285 | String resolvedCustomSigningRegion = customSigningRegion;
286 | if (StringUtils.isBlank(resolvedCustomSigningRegion)) {
287 | resolvedCustomSigningRegion = "us-east-1";
288 | }
289 | ret = ret.endpointOverride(new URI(getResolvedCustomEndpoint())).region(Region.of(resolvedCustomSigningRegion));
290 | } else if (StringUtils.isNotBlank(CredentialsAwsGlobalConfiguration.get().getRegion())) {
291 | ret = ret.region(Region.of(CredentialsAwsGlobalConfiguration.get().getRegion()));
292 | } else {
293 | ret = ret.useArnRegion(true);
294 | }
295 | ret = ret.accelerate(useTransferAcceleration);
296 |
297 | // TODO the client would automatically use path-style URLs under certain conditions; is it really necessary to override?
298 | ret = ret.forcePathStyle(getUsePathStyleUrl());
299 |
300 | return ret;
301 | }
302 |
303 | @VisibleForTesting
304 | public S3ClientBuilder getAmazonS3ClientBuilderWithCredentials() throws IOException {
305 | try {
306 | return getAmazonS3ClientBuilderWithCredentials(getDisableSessionToken());
307 | } catch (URISyntaxException e) {
308 | throw new RuntimeException(e);
309 | }
310 | }
311 |
312 | private S3ClientBuilder getAmazonS3ClientBuilderWithCredentials(boolean disableSessionToken) throws IOException, URISyntaxException {
313 | S3ClientBuilder builder = getAmazonS3ClientBuilder();
314 | if (disableSessionToken) {
315 | builder = builder.credentialsProvider(CredentialsAwsGlobalConfiguration.get().getCredentials());
316 | } else {
317 | AwsSessionCredentials awsSessionCredentials = CredentialsAwsGlobalConfiguration.get()
318 | .sessionCredentials(CredentialsAwsGlobalConfiguration.get().getRegion(),
319 | CredentialsAwsGlobalConfiguration.get().getCredentialsId());
320 | if(awsSessionCredentials != null ) {
321 | builder.credentialsProvider(StaticCredentialsProvider.create(awsSessionCredentials));
322 | } else {
323 | throw new IOException("No session AWS credentials found");
324 | }
325 | }
326 | return builder;
327 | }
328 |
329 | public FormValidation doCheckContainer(@QueryParameter String container){
330 | FormValidation ret = FormValidation.ok();
331 | if (StringUtils.isBlank(container)){
332 | ret = FormValidation.warning("The container name cannot be empty");
333 | } else if (!bucketPattern.matcher(container).matches()){
334 | ret = FormValidation.error("The S3 Bucket name does not match S3 bucket rules");
335 | }
336 | return ret;
337 | }
338 |
339 | public FormValidation doCheckPrefix(@QueryParameter String prefix){
340 | FormValidation ret;
341 | if (StringUtils.isBlank(prefix)) {
342 | ret = FormValidation.ok("Artifacts will be stored in the root folder of the S3 Bucket.");
343 | } else if (prefix.endsWith("/")) {
344 | ret = FormValidation.ok();
345 | } else {
346 | ret = FormValidation.error("A prefix must end with a slash.");
347 | }
348 | return ret;
349 | }
350 |
351 | public FormValidation doCheckCustomSigningRegion(@QueryParameter String customSigningRegion) {
352 | FormValidation ret;
353 | if (StringUtils.isBlank(customSigningRegion) && StringUtils.isNotBlank(customEndpoint)) {
354 | ret = FormValidation.ok("'us-east-1' will be used when a custom endpoint is configured and custom signing region is blank.");
355 | } else {
356 | ret = FormValidation.ok();
357 | }
358 | return ret;
359 | }
360 |
361 | public FormValidation doCheckCustomEndpoint(@QueryParameter String customEndpoint) {
362 | FormValidation ret = FormValidation.ok();
363 | if (!StringUtils.isBlank(customEndpoint) && !endPointPattern.matcher(customEndpoint).matches()) {
364 | ret = FormValidation.error("Custom Endpoint may not be valid.");
365 | }
366 | return ret;
367 | }
368 |
369 | public FormValidation doCheckUseHttp(@QueryParameter boolean useHttp) {
370 | Jenkins.get().checkPermission(Jenkins.ADMINISTER);
371 | if (FIPS140.useCompliantAlgorithms() && useHttp) {
372 | return FormValidation.error("Cannot use HTTP in FIPS mode.");
373 | }
374 | return FormValidation.ok();
375 | }
376 |
377 | /**
378 | * create an S3 Bucket.
379 | * @param name name of the S3 Bucket.
380 | * @return return the Bucket created.
381 | * @throws IOException in case of error obtaining the credentials, in other kind of errors it will throw the
382 | * runtime exceptions are thrown by createBucket method.
383 | */
384 | public Bucket createS3Bucket(String name) throws IOException {
385 | try {
386 | return createS3Bucket(name, getDisableSessionToken());
387 | } catch (URISyntaxException e) {
388 | throw new IOException(e);
389 | }
390 | }
391 |
392 | private Bucket createS3Bucket(String name, boolean disableSessionToken) throws IOException, URISyntaxException {
393 | S3ClientBuilder builder = getAmazonS3ClientBuilderWithCredentials(disableSessionToken);
394 | //Accelerated mode must be off in order to apply it to a bucket
395 | try (S3Client client = builder.accelerate(false).build()) {
396 | CreateBucketResponse response = client.createBucket(CreateBucketRequest.builder().bucket(name).build());
397 | if(response.sdkHttpResponse().isSuccessful()) {
398 | return Bucket.builder().name(name).build();
399 | } else {
400 | throw new IOException("Cannot create bucket with name:" + name
401 | + " response status : " + response.sdkHttpResponse().statusCode());
402 | }
403 | }
404 | }
405 |
406 | @RequirePOST
407 | public FormValidation doCreateS3Bucket(@QueryParameter String container, @QueryParameter boolean disableSessionToken) {
408 | Jenkins.get().checkPermission(Jenkins.ADMINISTER);
409 | FormValidation ret = FormValidation.ok("success");
410 | try {
411 | createS3Bucket(container, disableSessionToken);
412 | } catch (Throwable t){
413 | String msg = processExceptionMessage(t);
414 | ret = FormValidation.error(StringUtils.abbreviate(msg, 200));
415 | }
416 | return ret;
417 | }
418 |
419 | void checkGetBucketLocation(String container, boolean disableSessionToken) throws IOException, URISyntaxException {
420 | S3ClientBuilder builder = getAmazonS3ClientBuilderWithCredentials(disableSessionToken);
421 | try (S3Client client = builder.build()) {
422 | client.getBucketLocation(GetBucketLocationRequest.builder().bucket(container).build());
423 | }
424 | }
425 |
426 | @RequirePOST
427 | public FormValidation doValidateS3BucketConfig(
428 | @QueryParameter String container,
429 | @QueryParameter String prefix,
430 | @QueryParameter boolean useHttp,
431 | @QueryParameter boolean useTransferAcceleration,
432 | @QueryParameter boolean usePathStyleUrl,
433 | @QueryParameter boolean disableSessionToken,
434 | @QueryParameter String customEndpoint,
435 | @QueryParameter String customSigningRegion) {
436 | Jenkins.get().checkPermission(Jenkins.ADMINISTER);
437 |
438 | if (FIPS140.useCompliantAlgorithms() && useHttp) {
439 | return FormValidation.warning("Validation failed as \"use Insecure Http\" flag is enabled while in FIPS mode");
440 | }
441 | FormValidation ret = FormValidation.ok("success");
442 | S3BlobStore provider = new S3BlobStoreTester(container, prefix,
443 | useHttp, useTransferAcceleration,usePathStyleUrl,
444 | disableSessionToken, customEndpoint, customSigningRegion);
445 |
446 | try {
447 | JCloudsVirtualFile jc = new JCloudsVirtualFile(provider, container, prefix.replaceFirst("/$", ""));
448 | jc.list();
449 | } catch (Throwable t){
450 | String msg = processExceptionMessage(t);
451 | ret = FormValidation.error(t, StringUtils.abbreviate(msg, 200));
452 | }
453 | try {
454 | provider.getConfiguration().checkGetBucketLocation(container, disableSessionToken);
455 | } catch (Throwable t){
456 | ret = FormValidation.warning(t, "GetBucketLocation failed");
457 | }
458 | return ret;
459 | }
460 |
461 | }
462 |
--------------------------------------------------------------------------------
/src/main/resources/index.jelly:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | A Jenkins plugin to keep artifacts and Pipeline stashes in Amazon S3.
5 |
6 |
--------------------------------------------------------------------------------
/src/main/resources/io/jenkins/plugins/artifact_manager_jclouds/JCloudsArtifactManagerFactory/config.jelly:
--------------------------------------------------------------------------------
1 |
2 |
25 |
26 |
27 |
28 |
29 |
30 |
--------------------------------------------------------------------------------
/src/main/resources/io/jenkins/plugins/artifact_manager_jclouds/s3/S3BlobStore/config.jelly:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 | ${%configure_first}
8 |
9 |
10 |
11 |
12 |
--------------------------------------------------------------------------------
/src/main/resources/io/jenkins/plugins/artifact_manager_jclouds/s3/S3BlobStore/config.properties:
--------------------------------------------------------------------------------
1 | configure_first=First configure Amazon settings.
2 |
--------------------------------------------------------------------------------
/src/main/resources/io/jenkins/plugins/artifact_manager_jclouds/s3/S3BlobStoreConfig/config.jelly:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
17 |
18 |
19 |
20 |
21 |
22 |
23 |
24 |
25 |
26 |
27 |
28 |
29 |
30 |
31 |
32 |
33 |
34 |
35 |
37 |
39 |
40 |
41 |
--------------------------------------------------------------------------------
/src/main/resources/io/jenkins/plugins/artifact_manager_jclouds/s3/S3BlobStoreConfig/help-container.html:
--------------------------------------------------------------------------------
1 | Name of the S3 Bucket, the S3 Bucket should exists and the AWS account/profile/role used to access should have access to it
--------------------------------------------------------------------------------
/src/main/resources/io/jenkins/plugins/artifact_manager_jclouds/s3/S3BlobStoreConfig/help-customEndpoint.html:
--------------------------------------------------------------------------------
1 | Use this to set a custom S3 service endpoint. This option is used if you're using an S3 compatible service, leave it blank if you're using AWS's S3 (s3.amazonaws.com)
2 |
--------------------------------------------------------------------------------
/src/main/resources/io/jenkins/plugins/artifact_manager_jclouds/s3/S3BlobStoreConfig/help-customSigningRegion.html:
--------------------------------------------------------------------------------
1 | Custom signing region to be used with the custom endpoint if set
2 |
--------------------------------------------------------------------------------
/src/main/resources/io/jenkins/plugins/artifact_manager_jclouds/s3/S3BlobStoreConfig/help-deleteArtifacts.html:
--------------------------------------------------------------------------------
1 | This parameter is set by the property -Dio.jenkins.plugins.artifact_manager_jclouds.s3.S3BlobStoreConfig.deleteArtifacts=true,
2 | if not checked the artifacts will not be deleted from S3 when the corresponding build is deleted.
3 |
4 |
--------------------------------------------------------------------------------
/src/main/resources/io/jenkins/plugins/artifact_manager_jclouds/s3/S3BlobStoreConfig/help-deleteStashes.html:
--------------------------------------------------------------------------------
1 | This parameter is set by the property -Dio.jenkins.plugins.artifact_manager_jclouds.s3.S3BlobStoreConfig.deleteStashes=true,
2 | if not checked the stash will not be deleted from S3 when the corresponding build is deleted.
3 |
4 |
--------------------------------------------------------------------------------
/src/main/resources/io/jenkins/plugins/artifact_manager_jclouds/s3/S3BlobStoreConfig/help-disableSessionToken.html:
--------------------------------------------------------------------------------
1 | Disable session tokens for S3 requests. Session tokens will query AWS and so will not work if you're using an S3 compatible service.
2 |
--------------------------------------------------------------------------------
/src/main/resources/io/jenkins/plugins/artifact_manager_jclouds/s3/S3BlobStoreConfig/help-prefix.html:
--------------------------------------------------------------------------------
1 | This is the string that will be used as prefix for every file path, it must end with an "/" if it is a folder.
--------------------------------------------------------------------------------
/src/main/resources/io/jenkins/plugins/artifact_manager_jclouds/s3/S3BlobStoreConfig/help-useHttp.html:
--------------------------------------------------------------------------------
1 | Use http for S3 requests. This should only ever be used with an internal S3 compatible service.
2 |
--------------------------------------------------------------------------------
/src/main/resources/io/jenkins/plugins/artifact_manager_jclouds/s3/S3BlobStoreConfig/help-usePathStyleUrl.html:
--------------------------------------------------------------------------------
1 | This option modifies the format of the URL used to communicate with S3.
2 |
3 | When this option is disabled URLs will be formatted https://bucketname.s3.amazonaws.com/key/path
4 | When this option is enabled URLs will be formatted https://s3.amazonaws.com/bucketname/key/path
5 | Typically, you would only ever enable this option when using an S3 compatible service (not AWS S3) that only supported path style URLs.
6 | For Amazon S3 itself, path-style URLs are
usually deprecated and may not work at all.
7 |