Cloudsmith

Overview

The Cloudsmith integration connects your Cloudsmith workspace to Oneleet, syncing workspace members as user account assets and the workspace itself. This lets Oneleet monitor who has access to your Cloudsmith workspace and how they sign in.

What does Oneleet monitor?

• Cloudsmith workspace members (user accounts), including each member’s role and whether they have two-factor authentication (2FA) enabled
• Whether your Cloudsmith workspace enforces SAML single sign-on

Setup

To set up the Cloudsmith integration, navigate to Integrations > Add integration > Cloudsmith.

Oneleet connects with the API key of a Cloudsmith service account. Creating a service account requires the Owner or Manager role in your workspace.

1. Sign in to Cloudsmith and copy your workspace identifier from the address bar: it’s the part after app.cloudsmith.com/, e.g. acme.
2. Open your workspace’s Accounts → Services tab and click Create service.
3. Enter a service name and description, set Service role to Manager, and click Create service.
4. Copy the API key Cloudsmith shows (it’s only shown once) and paste the workspace and API key into the form in Oneleet, then click Connect.

Cloudsmith API keys can’t be scoped to read-only access. The Manager role is the lowest role that can read the workspace’s SAML settings and members’ email addresses, and it has no access to your repositories’ packages by default.

Cloudsmith’s API doesn’t report whether a workspace requires 2FA, so Oneleet checks 2FA for each member instead.