[OpenStack-Infra] [Zuul] can not get zuul env variables, such as 'ZUUL_URL'

li.yuanzhen at zte.com.cn li.yuanzhen at zte.com.cn
Tue Sep 6 03:19:55 UTC 2016


Hi Mikhail,

Very glad to receive your response. 
In my env, the version of Jenkins is 2.7.2. 


Now my Jenkins jobs can get environment variables after I modify my
Jenkins env with your suggestion. 
Thank you very much.


>
>Hi Li,
>
>On Sun, Sep 4, 2016 at 10:18 AM,  <li.yuanzhen?zte.com.cn> wrote:
>> Hi all,
>>         For deploy CI env, I need a help for Zuul.
>>
>>         In the slave node, I can not get the "zuul"
>>         environments variables using 'env' shell command,
>>         such as 'ZUUL_URL'.
>>
>>         The following is the config and log info
>>         *) /etc/zuul/layout/zuul.conf:
>>                 http://paste.ubuntu.com/23132730/
>>         *) /etc/jenkins_jobs/config/citest.yaml
>>                 http://paste.ubuntu.com/23132723/
>>         *) jenkins job result:
>>                 http://paste.ubuntu.com/23132737/
>>         *) /var/log/zuul/zuul.log
>>                 http://paste.ubuntu.com/23132745/
>>         *) /var/log/zuul/merger-debug.log
>>                 http://paste.ubuntu.com/23132748/
>>         *) /var/log/zuul/debug.log
>>                 http://paste.ubuntu.com/23132762/
>>
>>        I check the zuul code and it has been got the
>>         'zuul_url' variables in zuul-mergerr, but in slave nodes,
>>          these        variables can not be passed by zuul-scheduler.
>>
>>         Is there any wrong in my zuul config or jenkins jobs?
>
>You might be affected by the fix to SECURITY-170 [1] in new Jenkins
>you installed. It prevents Zuul from passing paramters that are not
>white listed. Which version of Jenkins are you using? Last version
>without the security fix is 1.651.1.
>
>If you have later version, you would need to either white list all
>zuul variables (
>-Dhudson.model.ParametersAction.safeParameters=ZUUL_URL,ZUUL_COMMIT ),
>or disable that security feature (
>-Dhudson.model.ParametersAction.keepUndefinedParameters=true ).
>
>[1] 
https://wiki.jenkins-ci.org/display/JENKINS/Plugins+affected+by+fix+for+SECURITY-170
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-infra/attachments/20160906/4f6209d6/attachment.html>


More information about the OpenStack-Infra mailing list