There are two types of authentication supported:

• Basic Authentication (Username and Password)
• DC/OS Service Account (String)

Basic Authentication

To authenticate with HTTP basic authentication, select a credential of type username with password. DC/OS does not support this authentication type.

DC/OS Service Account

DC/OS Service Accounts use JSON Web Tokens (JWTs) to authenticate with DC/OS and retrieve an access token for use in subsequent requests. This plugin generates the JWT from the content of the selected credential and handles the creation and management of the necessary access token.

The content of the selected credential is a JSON object with the following fields (extra fields are ignored):

• uid
  DC/OS service account ID (example: "jenkins-sa")
• login_endpoint
  URL for the login end point of the target DC/OS cluster (example: "https://leader.mesos/acs/api/v1/auth/login")
• scheme
  This must be "RS256". Algorithm to use with private_key.
• private_key
  Private key to use for signing JWTs, which is verified by the corresponding public key registered with DC/OS. Note the inclusion of "\n" to make the content JSON friendly.
  (example: "-----BEGIN RSA PRIVATE KEY-----\nMIIEpAI...")

Example JSON Secret

    {"uid":"jenkins","login_endpoint":"https://leader.mesos/acs/api/v1/auth/login","scheme":"RS256","private_key":"-----BEGIN RSA PRIVATE KEY-----\nMIIEpAI..."}