xetamus/bosh-creds-resource

BOSH凭证的Concourse资源

该资源用于连接Ops Manager并获取BOSH凭证，支持在Concourse pipeline中集成BOSH部署相关的凭证管理。

核心功能

• 从Ops Manager获取BOSH凭证文件（CA证书、用户名、密码等）
• 提供BOSH CLI v2可用的凭证，可直接source使用（无需手动登录）
• 生成与https://github.com/cloudfoundry/bosh-deployment-resource%E5%85%BC%E5%AE%B9%E7%9A%84%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6
• 支持切换OpsManager Director和任意BOSH Director的凭证获取

使用场景

• 在Concourse CI/CD pipeline中自动获取BOSH凭证，用于部署或管理BOSH资源
• 兼容BOSH CLI v2的快速凭证使用场景
• 灵活切换不同BOSH Director的凭证配置

配置说明

1. 定义资源类型

在pipeline中添加资源类型：

yaml
resource_types:
- name: bosh-creds
  type: docker-image
  source:
    repository: mkuratczyk/bosh-creds-resource
    tag: latest

2. 配置资源

添加资源到pipeline：

yaml
resources:
- name: om-bosh-creds
  type: bosh-creds
  source:
    pcf_opsman_admin_username: {{pcf_opsman_admin_username}}  
    pcf_opsman_admin_password: {{pcf_opsman_admin_password}}
    opsman_url: {{opsman_url}}

3. 在任务中使用资源

将资源添加到任务计划：

yaml
- name: job-name
  plan:
  - aggregate:
    # ... 其他资源
    - get: om-bosh-creds
      params:
        deployment: my_deployment  # 可选参数，用于bosh-deployment资源

获取的文件列表

获取资源后会生成以下文件：

- om-bosh-creds/bosh-ca.pem
- om-bosh-creds/director_ip
- om-bosh-creds/bosh-username
- om-bosh-creds/bosh-pass
- om-bosh-creds/bosh-deployment
- om-bosh-creds/bosh2_commandline_credentials
- om-bosh-creds/opsman_bosh.json

BOSH CLI v2使用说明

bosh2_commandline_credentials文件包含BOSH CLI v2的凭证，可直接在任务脚本中source使用：

bash
source om-bosh-creds/bosh2_commandline_credentials
# 之后可直接执行BOSH命令，无需登录
bosh deploy ...

切换BOSH Director

若需切换到外部BOSH Director，可在资源配置中添加外部凭证：

yaml
- name: pcf-bosh-creds
  type: bosh-creds
  source:
    pcf_opsman_admin_username: ((pcf_opsman_admin_username))
    pcf_opsman_admin_password: ((pcf_opsman_admin_password))
    opsman_url: ((opsman_url))
    external_bosh_address: ((external_bosh_address))
    external_bosh_client: ((external_bosh_client))
    external_bosh_client_secret: ((external_bosh_client_secret))
    external_bosh_ca_cert: ((external_bosh_ca_cert))

在任务中通过参数选择使用的Director：

yaml
- put: bosh-deployment  
  params:
    source_file: pcf-bosh-creds/((director_for_deployment)).json

参数文件示例（选择外部Director）：

yaml
director_for_deployment: external_bosh
external_bosh_address: 35.189.216.223
external_bosh_client: admin
external_bosh_client_secret: 96jkwllh7mq8mdnfg25w
external_bosh_ca_cert: |
  -----BEGIN CERTIFICATE-----
  ...
  -----END CERTIFICATE-----

已知问题

当前资源仅获取一次凭证，若凭证变更不会自动更新。