[JIRA] [mask-passwords-plugin] (JENKINS-34264) Mask Passwords does not enable variables in workflow/pipeline

[nels4...@me.com (JIRA)]

Title: Message Title

Jeffrey Nelson created an issue   Jenkins / JENKINS-34264 Mask Passwords does not enable variables in workflow/pipeline Issue Type: Bug Assignee: Oleg Nenashev Components: mask-passwords-plugin, workflow-plugin Created: 2016/Apr/14 10:13 PM Priority: Critical Reporter: Jeffrey Nelson The mask-passwords-plugin does not enable global or even locally defined variables within the block when used in a pipeline/workflow job. I have configured a global password variable "MARATHON_PASSWORD". You'll see that I've tried referencing variables in two ways (echo and sh) Example job config: node { stage 'Test Mask Passwords in Pipeline' wrap([$class: 'MaskPasswordsBuildWrapper', varPasswordPairs: [[password: 'thePassword', var: 'MY_PASSWORD']]]) { echo "retrive MY_PASSWORD by var = ${env.MY_PASSWORD}" sh 'echo retrieve MY_PASSWORD by var = $MY_PASSWORD' echo "retrieve MARATHON_PASSWORD by var = ${env.MARATHON_PASSWORD}" sh 'echo retrieve MARATHON_PASSWORD by var = $MARATHON_PASSWORD' echo "masking MY_PASSWORD value works = thePassword" sh 'echo masking MY_PASSWORD value works = thePassword' } } Output from running job: [Pipeline] Allocate node : Start Running on jenlxs7 in /apps/jenkins/slave1/workspace/CWL/AAA-TestPipeline [Pipeline] node { [Pipeline] stage (Test Mask Passwords in Pipeline) Entering stage Test Mask Passwords in Pipeline Proceeding [Pipeline] General Build Wrapper : Start [Pipeline] wrap { retrive MY_PASSWORD by var = null [Pipeline] echo [Pipeline] sh [AAA-TestPipeline] Running shell script + echo retrieve MY_PASSWORD by var = retrieve MY_PASSWORD by var = [Pipeline] echo retrieve MARATHON_PASSWORD by var = null [Pipeline] sh [AAA-TestPipeline] Running shell script + echo retrieve MARATHON_PASSWORD by var = retrieve MARATHON_PASSWORD by var = [Pipeline] echo masking MY_PASSWORD value works = ******** [Pipeline] sh [AAA-TestPipeline] Running shell script + echo masking MY_PASSWORD value works = ******** masking MY_PASSWORD value works = ******** [Pipeline] } //wrap [Pipeline] General Build Wrapper : End [Pipeline] } //node [Pipeline] Allocate node : End [Pipeline] End of Pipeline Finished: SUCCESS As you can see, the plugin does effectively mask the value of given passwords when you use the value directly within the block. However, you should be able to use the password via it's variable name. Add Comment   This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.