Buildkite

Overview

The Buildkite integration connects your Buildkite organization to Oneleet, syncing organization members as user account assets and your organization as an asset. This lets Oneleet monitor who has access to your CI/CD pipelines and whether they’re protected by two-factor authentication.

What does Oneleet monitor?

• Buildkite organization members (user accounts), including each member’s role and whether they have two-factor authentication enabled
• Your Buildkite organization, including whether it enforces two-factor authentication and whether SSO is enabled and required for every member

Setup

To set up the Buildkite integration, navigate to Integrations > Add integration > Buildkite.

Oneleet connects with a Buildkite API access token that has Read-only GraphQL API access. Create it with an account that is an administrator of the organization, since the token can only see what its user can see.

1. In Buildkite, open your avatar menu, select Personal Settings, and then API Access Tokens.
2. Click New API Access Token and enter a description.
3. Under Organization Access, select only the organization you want Oneleet to monitor.
4. Leave all REST API Scopes unchecked. Under GraphQL API Access, select Read-only.
5. Choose a Token Expiry and click Create New API Access Token.
6. Copy the token, paste it into the form in Oneleet, enter your organization slug (the part after buildkite.com/ in your organization’s URL), and click Connect.