无法从链中的任何提供者加载AWS凭据-Jenkins

Question

目前我正试图让Jenkins与AWS codepipeline合作。我在EC2实例上运行Jenkins。然而，由于某些原因，Jenkins无法加载AWS的默认凭据。我尝试了以下选项：

< li >使用“aws configure”命令初始化aws凭据 < li >使用Jenkins中的aws-credentials插件 < li >执行导出AWS_ACCESS_KEY_ID=....和AWS_SECRET_ACCESS_KEY=....在Jenkins cli中 < li >检查了~/。aws/credentials文件，如果凭据存在(就是这种情况) < li >遵循AWS文档中的所有步骤，使Jenkins和codepipeline协同工作(http://docs . AWS . Amazon . com/code pipeline/latest/user guide/getting-started-4 . html) < li >确保用户通过AWS上的IAM界面拥有凭据 < li >通过所有步骤，多次重新启动Jenkins服务器

我的作业中的轮询日志给出以下输出：

ERROR: Failed to record SCM polling for hudson.model.FreeStyleProject@75b77936[job-name]
com.amazonaws.AmazonClientException: Unable to load AWS credentials from any provider in the chain
at com.amazonaws.auth.AWSCredentialsProviderChain.getCredentials(AWSCredentialsProviderChain.java:131)
at com.amazonaws.http.AmazonHttpClient$RequestExecutor.getCredentialsFromContext(AmazonHttpClient.java:1028)
at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeOneRequest(AmazonHttpClient.java:1048)
at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeHelper(AmazonHttpClient.java:948)
at com.amazonaws.http.AmazonHttpClient$RequestExecutor.doExecute(AmazonHttpClient.java:661)
at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeWithTimer(AmazonHttpClient.java:635)
at com.amazonaws.http.AmazonHttpClient$RequestExecutor.execute(AmazonHttpClient.java:618)
at com.amazonaws.http.AmazonHttpClient$RequestExecutor.access$300(AmazonHttpClient.java:586)
at com.amazonaws.http.AmazonHttpClient$RequestExecutionBuilderImpl.execute(AmazonHttpClient.java:573)
at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:445)
at com.amazonaws.services.codepipeline.AWSCodePipelineClient.doInvoke(AWSCodePipelineClient.java:1785)
at com.amazonaws.services.codepipeline.AWSCodePipelineClient.invoke(AWSCodePipelineClient.java:1761)
at com.amazonaws.services.codepipeline.AWSCodePipelineClient.pollForJobs(AWSCodePipelineClient.java:1228)
at com.amazonaws.codepipeline.jenkinsplugin.AWSCodePipelineSCM.pollForJobs(AWSCodePipelineSCM.java:240)
at com.amazonaws.codepipeline.jenkinsplugin.AWSCodePipelineSCM.compareRemoteRevisionWith(AWSCodePipelineSCM.java:176)
at hudson.scm.SCM.poll(SCM.java:408)
at hudson.model.AbstractProject._poll(AbstractProject.java:1460)
at hudson.model.AbstractProject.poll(AbstractProject.java:1363)
at hudson.triggers.SCMTrigger$Runner.runPolling(SCMTrigger.java:563)
at hudson.triggers.SCMTrigger$Runner.run(SCMTrigger.java:609)
at hudson.util.SequentialExecutionQueue$QueueEntry.run(SequentialExecutionQueue.java:119)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)

对进一步的方向有什么建议吗？我想防止将凭据直接传递到配置页面中的作业，因为我不使用HTTPS。

Answer 1

根据您的描述，您使用IAM角色为jenkins工作正常。由于您的问题，jenkins用户可能无法使用您的凭据。

因此，首先检查您使用的是亚马逊Linux用户还是詹金斯用户。如果是亚马逊linux用户，那就改变它。

第二件事是，您必须在服务器或Amazon EC2实例上配置代理和防火墙设置，以允许到Jenkins项目使用的端口的入站连接

参考链接：http://docs.aws.amazon.com/codepipeline/latest/userguide/getting-started-4.html