[private.vpn.jenkins.io] 2025-02-23 (February 2025) VPN CRL expires

[smerle33]

Service(s)

VPN

Summary

The Jenkins Infra calendar reminds us that the VPN CRL expires the 23 February 2025.

Todo list for the team member who will take this action:

• Read https://github.com/jenkins-infra/docker-openvpn#howto-review-certificate-revocation-list and check that you have all the pre-requisites
• Open a PR to jenkins-infra/docker-openvpn that updates the CRL -
• Once the PR is merged, ensures that there is a new version of the container automatically built and released
• Run manually the updatecli build for jenkins-infra/jenkins-infra to have an automated PR to bump the VPN image version
• Once deployed, connect to the private.vpn.jenkins.io VM with SSH (requires your public Ip allowed to do that) and ensure that the new CRL is present and updated
• Create a new team calendar event to the date of the next expiration, with alerts 3 weeks before and 2 weeks before

Previous issues: #4266

Nice to have: is there a way to have automated PR with updatecli in the docker-openvpn repository?

Reproduction steps

No response

[smerle33]

next event: https://calendar.google.com/calendar/u/0/r/eventedit/N3FlMGZqbm52YTBnYmI5dXFkOGhtYmxjMG4gODhvNnQzdTAyZWQ0NWs0YjZjYWdwcGs0M3NAZw

[smerle33]

Nice to have: is there a way to have automated PR with updatecli in the docker-openvpn repository?

this is implemented but not working:

[2025-02-08T08:58:00.862Z] ++ gh issue list --repo jenkins-infra/helpdesk --state open --search 'label:crl label:updatecli'
[2025-02-08T08:58:00.862Z] ++ wc -l
[2025-02-08T08:58:00.862Z] + alreadyOpened=0
[2025-02-08T08:58:00.862Z] + test 0 -eq 0
[2025-02-08T08:58:00.862Z] + '    gh issue create --title "[private.vpn.jenkins.io] Feb 23 15:25:09 2025 GMT VPN CRL expires"                     --body "follow https://github.com/jenkins-infra/docker-openvpn?tab=readme-ov-file#howto-renew-certificate-revocation-list                             See https://github.com/jenkins-infra/helpdesk/issues/4266 for details."                     --label crl                     --label updatecli                     --repo jenkins-infra/helpdesk'
[2025-02-08T08:58:00.862Z] ./updatecli/scripts/createIssue.sh: line 23:     gh issue create --title "[private.vpn.jenkins.io] Feb 23 15:25:09 2025 GMT VPN CRL expires"                     --body "follow https://github.com/jenkins-infra/docker-openvpn?tab=readme-ov-file#howto-renew-certificate-revocation-list                             See https://github.com/jenkins-infra/helpdesk/issues/4266 for details."                     --label crl                     --label updatecli                     --repo jenkins-infra/helpdesk: No such file or directory
[2025-02-08T08:58:00.863Z]