You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: user/enterprise/support-admin-tool.md
+10-6Lines changed: 10 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,38 +6,42 @@ layout: en_enterprise
6
6
7
7
> The tool is only visible to Platform maintainers from TCIE 3.x as **Admin-v2**. The tool must be configured with a list of GitHub handles that allow **admin** access.
8
8
9
-
> The tool is only accessible via web browser.
9
+
> The tool is only accessible via a web browser.
10
10
11
-
## Forcefully logging out users from Travis
11
+
## Log out users Forcefully from Travis
12
12
To increase security and prevent unauthorized access, Travis CI introduces the new **“Log out user and revoke all tokens”** option, which allows admin users to manually log out of any unwanted user.
13
13
14
14
### Log out Users
15
15
Travis CI admin users can now click the **“Logout”** button next to the **“Log out user and revoke all tokens”** option in the User view to log out specific users manually.
16
16
17
-
By clicking the **“Logout”** button, Travis CI invalidates all Travis authentication tokens and logs out the selected user from all Travis CI platforms. This prevents access via web browser, public API, and travis cli.
17
+
By clicking the **“Logout”** button, Travis CI invalidates all Travis authentication tokens and logs out the selected user from all Travis CI platforms. This prevents access via web browser, public API, and Travis Cli.
18
18
19
19
Logged-out users cannot access Travis CI via the web browser or travis-cli tool without re-accessing the system. Any build automation based on an API token associated with such a user will cease to work.
20
20
21
21
### Why must I log out of my user and revoke all tokens?
22
22
23
23
Consider the following: The user gets suspended, e.g., in the GHE server (3rd-party app), and Travis CI is not notified of the action; therefore, no action is taken on Travis CI's side. At the same time, such users may still have a valid Travis Web UI browser, travis-cli access tokens, and a working Travis API authentication token.
24
24
25
-
Such a situation may be valid and desired. However, there are cases, like a person leaving a company or team, when it is simply a security matter to revoke all accesses for such users. Travis CI cannot react automatically since no automated notification has been sent out, e.g., the GHE server account is suspended. If you are considering a less drastic approach, you may consider manually [suspending a user](/user/enterprise/user-management/) instead of logging out and revoking all tokens.
25
+
Such a situation may be valid and desired. However, there are cases, like a person leaving a company or team, when it is simply a security matter to revoke all accesses for such users. Travis CI cannot react automatically since no automated notification has been sent out, e.g., the GHE server account is suspended. If you are considering a less drastic approach, consider manually [suspending a user](/user/enterprise/user-management/) instead of logging out and revoking all tokens.
26
26
27
27
Suspended users still have access to Travis CI via browser or travis-cli (assuming they have valid Travis access tokens present in these tools) but cannot trigger builds.
28
28
29
29
### Auth tokens
30
30
31
-
Following environment variables are used to manage the life of token.
31
+
The following environment variables are used to manage the token's life.
32
32
33
33
-`WEB_TOKEN_EXPIRES_IN_HOURS`
34
34
-`AUTH_TOKEN_EXPIRES_IN_DAYS`
35
35
-`AUTH_CLI_TOKEN_EXPIRES_IN_DAYS`
36
36
37
37
These tokens can be set using the admin console `kubectl kots admin-console -n tci-enterprise-kots` under the "Advanced Setting" menu.
38
38
39
-
## Re-accessing Travis CI
39
+
## Re-access Travis CI
40
+
40
41
To re-access Travis CI, users must log in using a 3rd-party authenticator such as GitHub (browser, travis-cli), GitLab, or BitBucket (browser). Only with access can users see the private repositories, build history, build job logs, and obtain new Travis API tokens.
41
42
42
43
Please note: if such users (logged out and tokens revoked) are, e.g., suspended in the GHE server, they will be unable to successfully use their GHE server account to log into Travis CI UI or travis-cli.
0 commit comments