These instructions are for using a self-hosted installation of GitHub Enterprise for HCP Terraform's VCS features. GitHub.com has separate instructions, as do the other supported VCS providers.
Configuring a new VCS provider requires permission to manage VCS settings for the organization. (More about permissions.)
Connecting HCP Terraform to your VCS involves four steps:
On your VCS On HCP Terraform Create a new connection in HCP Terraform. Get callback URL. Register your HCP Terraform organization as a new app. Provide callback URL. Get ID and key. Provide HCP Terraform with ID and key. Request VCS access. Approve access request.The rest of this page explains the GitHub Enterprise versions of these steps.
Important: HCP Terraform needs to contact your GitHub Enterprise instance during setup and during normal operation. For the SaaS version of HCP Terraform, this means GitHub Enterprise must be internet-accessible; for Terraform Enterprise, you must have network connectivity between your Terraform Enterprise and GitHub Enterprise instances.
Note: Alternately, you can skip the OAuth configuration process and authenticate with a personal access token. This requires using HCP Terraform's API. For details, see the OAuth Clients API page.
Sign in to HCP Terraform or Terraform Enterprise and navigate to the organization where you want to add the VCS provider.
Choose Settings from the sidebar, then click Providers.
Click Add a VCS provider. The Add VCS Provider page appears.
Select GitHub and then select GitHub Enterprise from the menu. The page moves to the next step.
In the "Set up provider" step, fill in the HTTP URL and API URL of your GitHub Enterprise instance, as well as an optional Name for this VCS connection.
Field Value HTTP URLhttps://<GITHUB INSTANCE HOSTNAME>
API URL https://<GITHUB INSTANCE HOSTNAME>/api/v3
Leave the page open in a browser tab. In the next step you will copy values from this page, and in later steps you will continue configuring HCP Terraform.
In a new browser tab, open your GitHub Enterprise instance and log in as whichever account you want HCP Terraform to act as. For most organizations this should be a dedicated service user, but a personal account will also work.
Important: The account you use for connecting HCP Terraform must have admin access to any shared repositories of Terraform configurations, since creating webhooks requires admin permissions.
Navigate to GitHub's Register a New OAuth Application page.
This page is located at https://<GITHUB INSTANCE HOSTNAME>/settings/applications/new
. You can also reach it through GitHub's menus:
This page has a form with four text fields.
Fill out the fields with the corresponding values currently displayed in your HCP Terraform browser tab. HCP Terraform lists the values in the order they appear, and includes controls for copying values to your clipboard.
Fill out the text fields as follows:
Field name Value Application Name HCP Terraform (<YOUR ORGANIZATION NAME>
) Homepage URL https://app.terraform.io
(or the URL of your Terraform Enterprise instance) Application Description Any description of your choice. Authorization callback URL https://app.terraform.io/<YOUR CALLBACK URL>
Click the "Register application" button, which creates the application and takes you to its page.
Click the "Generate a new client secret" button. You will need this secret in the next step.
Leave this page open in a browser tab. In the next step, you will copy and paste the unique Client ID and Client Secret.
Enter the Client ID and Client Secret from the previous step.
Click "Connect and continue." This takes you to a page on your GitHub Enterprise instance, asking whether you want to authorize the app.
The authorization page lists any GitHub organizations this account belongs to. If there is a Request button next to the organization that owns your Terraform code repositories, click it now. Note that you need to do this even if you are only connecting workspaces to private forks of repositories in those organizations since those forks are subject to the organization's access restrictions. See About OAuth App access restrictions.
If it results in a 500 error, it usually means HCP Terraform was unable to reach your GitHub Enterprise instance.
Click the green "Authorize <GITHUB USER>
" button at the bottom of the authorization page. GitHub might request your password or multi-factor token to confirm the operation.
The settings in this section are optional. The Advanced Settings you can configure are:
Select the Selected Projects option and use the text field that appears to search for and select projects to enable. All current and future workspaces for any selected projects can use repositories from this VCS Provider.
Click the Update VCS Provider button to save your selections.
On a secure workstation, create an SSH keypair that HCP Terraform can use to connect to Github Enterprise. The exact command depends on your OS, but is usually something like: ssh-keygen -t rsa -m PEM -f "/Users/<NAME>/.ssh/service_terraform" -C "service_terraform_enterprise"
This creates a service_terraform
file with the private key, and a service_terraform.pub
file with the public key. This SSH key must have an empty passphrase. HCP Terraform cannot use SSH keys that require a passphrase.
While logged into the GitHub Enterprise account you want HCP Terraform to act as, navigate to the SSH Keys settings page, add a new SSH key and paste the value of the SSH public key you just created.
In HCP Terraform's Add VCS Provider page, paste the text of the SSH private key you just created, and click the Add SSH Key button.
If your organization uses OAuth app access restrictions, you had to click a Request button when authorizing HCP Terraform, which sent an automated email to the administrators of your GitHub organization. An administrator must approve the request before HCP Terraform can access your organization's shared repositories.
If you're a GitHub administrator, check your email now and respond to the request; otherwise, contact whoever is responsible for GitHub accounts in your organization, and wait for confirmation that they've approved your request.
At this point, GitHub access for HCP Terraform is fully configured, and you can create Terraform workspaces based on your organization's shared GitHub Enterprise repositories.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4