Define some auth related env vars for Jenkins

WorldCereal · Jun 24, 2024 · 135e2b0 · 135e2b0
1 parent 3b70eee
commit 135e2b0
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/Jenkinsfile b/Jenkinsfile
@@ -13,4 +13,16 @@ pythonPipeline {
   upload_dev_wheels = false
   pipeline_triggers = [cron('H H(0-6) * * *')]
   pep440 = true
+  extra_env_variables = [
+    "OPENEO_AUTH_METHOD=client_credentials",
+    "OPENEO_OIDC_DEVICE_CODE_MAX_POLL_TIME=5",
+    "OPENEO_AUTH_PROVIDER_ID_TERRASCOPE=terrascope",
+    "OPENEO_AUTH_CLIENT_ID_TERRASCOPE=openeo-worldcereal-service-account",
+    "OPENEO_AUTH_PROVIDER_ID_CDSE=CDSE",
+    "OPENEO_AUTH_CLIENT_ID_CDSE=openeo-worldcereal-service-account",
+  ]
+  extra_env_secrets = [
+    'OPENEO_AUTH_CLIENT_SECRET_TERRASCOPE': 'TAP/big_data_services/devops/terraform/keycloak_mgmt/oidc_clients_prod openeo-worldcereal-service-account',
+    'OPENEO_AUTH_CLIENT_SECRET_CDSE': 'TAP/big_data_services/openeo/cdse-service-accounts/openeo-worldcereal-service-account client_secret',
+  ]
 }