Darwin Information Typing Architecture
Navigate to Administration | <Your Project> to access project settings.
Open the tab-name settings tab.
Navigate to Administration | <Your Configuration> to access build configuration settings.
Open the configuration-tab-name settings tab.
Open the tab-name settings tab and click the button-name button.
Switch to the Connections tab and click Add Connection. Note that connections can be used only in their parent projects and their subprojects. If you want a connection to be available globally, add it to the Root project.
Select "connection-type" in the Connection Type drop-down menu. Ensure the Enable unique callback URL setting is enabled to generate a unique ID added to your callback URL. This setting bolsters the security of your setup by mitigating the risk of mix-up attacks: attacks utilizing malicious authorization servers that impersonate real auth servers to trick a victim client into leaking an authorization code (token). Using the unique-url-sample URL format ensures an attacker cannot hand-craft an address acknowledged by TeamCity.
note
Whenever you toggle this setting on or off, the callback URL changes. Update OAuth settings on the VCS side accordingly.
IDs are unique for every connection, including copies of existing connections. If you clone a connection with this setting enabled, remember to update your VCS OAuth settings.
Click Test connection to verify TeamCity can access your resources, and save your new connection.
Refreshable access tokens are short-lived tokens acquired by TeamCity from a required VCS provider via existing OAuth connections (as opposed to static PAT tokens issued manually by users on a VCS hosting side). See the following article for more information on generating and using refreshable tokens: Manage Refreshable Access Tokens.
Specify the URL of the Kubernetes API server.
Enter the content of the CA certificate for your cluster.
Specify a required Kubernetes namespace. Leave empty to use the default namespace.
Select the required authentication strategy. Depending on the selected strategy, the set of additional options will vary. Refer to the Kubernetes documentation for details on available options.
note
The Token strategy accepts any token types supported by Kubernetes.