[infra.ci.jenkins.io] Azure Service Principal Credential used to deployplugins.jenkins.io expires the 2025-01-08

[dduportal]

Service(s)

infra.ci.jenkins.io, plugins.jenkins.io

Summary

Previous rotation: #4323

The Azure Service Principal Credential used to deploy plugins.jenkins.io to production from infra.ci.jenkins.io expires the 08 January 2025.

Task list:

• Merge the PR in jenkins-infra/azure to extend the credential expiry date (and dismiss the former credential) - New end date for plugins.jenkins.io File Share service principal writer on infra.ci.jenkins.io (current: 2025-01-08T00:00:00Z) azure#903
• Update the credential in SOPS. Note: once pushed to the repository chart-secrets, run one time the kubernetes-management job to apply the credential change + JCasc reload (or controller restart)
• Run a deployment of stats.jenkins.io principal branch and check it is successful

Reproduction steps

No response

[github-actions]

Take a look at these similar issues to see if there isn't already a response to your problem:

1. 77% [infra.ci.jenkins.io] Azure Service Principal Credential used to deploy contributors.jenkins.io expires the 2024-12-18 #4456
2. 77% [infra.ci.jenkins.io] Azure Service Principal Credential used to deploy stats.jenkins.io expires the 2024-12-18 #4455

[dduportal]

Update:

• Announced
• Merged the terraform PR: applied with success
• Pushed the new credential in https://github.com/jenkins-infra/charts-secrets/commit/ab23b1705ed65b2c68a249f13c15d9f27f61ccd8 (private link)

[dduportal]

Last deployment was successful!