Does shipwright support access to Github with token?

[wanjunlei]

I am using shipwright v0.7.0 to build Github's private repository. I created a secret containing username and password, and then the step-source-default reported the following error:

remote: Support for password authentication was removed on August 13, 2021. Please use a personal access token instead.

 remote: Please see https://github.blog/2020-12-15-token-authentication-requirements-for-git-operations/ for more information.

 fatal: Authentication failed for 'https://github.com/kubesphere/kube-auditing.git/' (exit code 128)

Then I create a secret include token, the step-source-default reported the following error:

Unsupported type of credentials provided, either SSH private key or username/password is supported (exit code 110)

Does shipwright support access to Github with tokens? How should I configure the secret?

[SaschaSchwarze0]

Hi @wanjunlei, thank you for the feedback. I think you would create a basic-auth kubernetes secret like you did before with username and password, and you now take the personal access token as password. But, something we have not yet tested. But, also something that we should get into our documentation given this is a common scenario.

If you can try with the personal access token as password and give us feedback if it works, that would be nice.

[adambkaplan]

I think you would create a basic-auth kubernetes secret like you did before with username and password, and you now take the personal access token as password.

I believe this is the correct answer - we have documentation in the build repository on how to do this: https://github.com/shipwright-io/build/blob/main/docs/development/authentication.md#basic-authentication

[adambkaplan]

/assign @adambkaplan

[wanjunlei]

Thanks for your replies, I will try this.

[SaschaSchwarze0]

From grooming: we will enhance the documentation to mention that repositories move away from password support towards token support instead, and link to the token documentation of the popular providers (GitHub, GitLab).