[release.ci.jenkins.io] 2024-11-20 Azure Credentials for Core Release (Vault access) expires

[dduportal]

Service(s)

release.ci.jenkins.io

Summary

Previous expiration issue: #4252

The Azure credential used by release.ci.jenkins.io to access the Azure Vault when releasing Jenkins (to obtain signing certificates) expires the 20 November 2024.
We have to renew this credential for 3 months.
Credential is defined in (private link): https://github.com/jenkins-infra/terraform-states/blob/main/azure/release.ci-sp.tf

• Automated PR (with instructions): (private link): https://github.com/jenkins-infra/terraform-states/pull/36
• release.ci.jenkins.io has the credential defined in JCasc: https://github.com/jenkins-infra/kubernetes-management/blob/3655de349a526edfbea563d99ea229961b741ac2/config/jenkins_release.ci.jenkins.io.yaml#L90-L104 (and sops for the sensitive value injected in JCasc)
• Create a new calendar event with the expiration date to be sure we do not forget or miss the PR

Note: using Azure Instance identity would help to avoid renewing this without compromising security in this case.

Reproduction steps

No response

[github-actions]

Take a look at these similar issues to see if there isn't already a response to your problem:

1. 83% [release.ci.jenkins.io] Azure Credentials for Core Release (Vault access) are expired #4084

[dduportal]

PR https://github.com/jenkins-infra/terraform-states/pull/36 merged and change is applied manually as per the instructions

[dduportal]

Secrets updated in SOPS and applied with a run of the kubernetes-management job on infra.ci

[dduportal]

Calendar event added for the 16 Feb. 2025

[dduportal]

release.ci.jenkins.io configuration reloaded. Confirmed the new credential value is updated using https://gist.github.com/timja/04afb12c8ad909e400317a2ad9c88445