Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ci.jenkins.io] Service Principal used by ci.jenkins.io to spawn Azure agents expires on 2024-10-19 #4358

Closed
dduportal opened this issue Oct 15, 2024 · 3 comments

Comments

@dduportal
Copy link
Contributor

Service(s)

ci.jenkins.io

Summary

The Azure client credentials used by ci.jenkins.io to start Azure VM/Container agents expires onthe 19 October July 2024.

We have to rotate this credential using jenkins-infra/azure#854.

⚠️ Once this PR is merged, the deployment of Azure agents on ci.jenkins.io will fail until the Jenkins credential azure-jenkins-sponsorship-credentials (managed manually) is updated - ref. https://github.com/jenkins-infra/jenkins-infra/blob/fe76a91bf8a421add3020e9d1517f73efa0eae9c/hieradata/clients/controller.sponsorship.ci.jenkins.io.yaml#L365 and https://github.com/jenkins-infra/jenkins-infra/blob/fe76a91bf8a421add3020e9d1517f73efa0eae9c/hieradata/clients/controller.sponsorship.ci.jenkins.io.yaml#L496

Reproduction steps

No response

@dduportal dduportal added the triage Incoming issues that need review label Oct 15, 2024
@dduportal dduportal added this to the infra-team-sync-2024-10-22 milestone Oct 15, 2024
@dduportal dduportal removed the triage Incoming issues that need review label Oct 15, 2024
Copy link

@dduportal dduportal self-assigned this Oct 15, 2024
@dduportal
Copy link
Contributor Author

  • Terraform Azure PR merged and deployed with success
  • New credential value retrieved and set up on ci.jenkins.io top level credential
  • Verified the new credential: agents are starting

@dduportal
Copy link
Contributor Author

Note for next time: controller restart is mandatory.

Not restarting caused #4359

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant