Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[trusted.ci.jenkins.io] RPU Artifactory API token expires the 2025-02-06 #4516

Closed
5 of 6 tasks
dduportal opened this issue Jan 28, 2025 · 7 comments
Closed
5 of 6 tasks

[trusted.ci.jenkins.io] RPU Artifactory API token expires the 2025-02-06 #4516

dduportal opened this issue Jan 28, 2025 · 7 comments
Assignees
@dduportal
Labels
artifactory trusted.ci.jenkins.io
Milestone
infra-team-sync-2...

Comments

@dduportal
Copy link
Contributor

dduportal commented Jan 28, 2025 •
edited
Loading

Service(s)

Artifactory, trusted.ci.jenkins.io

Summary

The Artifactory Admin token used by the RPU in https://github.com/jenkins-infra/repository-permissions-updater/blob/949a4646b3bbe4fa5b6499120ef016cb8cdfe33c/Jenkinsfile#L80 expires the 06 February 2025.

  • Disable RPU build on trusted.ci with a comment to this issue
  • An Artifactory administrator must renew the token
  • Then the credential in trusted.ci.jenkins.io must be updated (value, TTL and ID)
  • And a new RPU build (in trusted.ci.jenkins.io) must be executed (after re-enabling it) with success
  • Revoke the old token in Artifactory
  • Update calendar to new TTL

Previous rotations:

Reproduction steps

No response
@dduportal dduportal added this to the infra-team-sync-2025-02-11 milestone Jan 28, 2025
@dduportal dduportal self-assigned this Jan 30, 2025
@dduportal
Copy link
Contributor Author

RPU build disabled with a comment

@dduportal
Copy link
Contributor Author

New admin token created in Artifactory:

Image

@dduportal
Copy link
Contributor Author

Credential updated in trusted.ci: value and the following description:

Artifactory Identity Token of permissions-updater user for use by RPU (TTL: 2025-04-30, tokenID: 0490399f-b357-4846-a93b-ad647fb851d5, username: admin)

@dduportal
Copy link
Contributor Author

RPU build 39503 in progress

@dduportal
Copy link
Contributor Author

RPU build 39503 in progress

Build successful 👍

@dduportal
Copy link
Contributor Author

Old token removed

@dduportal
Copy link
Contributor Author

Calendar updated

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@dduportal dduportal

Labels
artifactory trusted.ci.jenkins.io
Projects
None yet
Milestone
infra-team-sync-2025-02-11
Development

No branches or pull requests
1 participant
@dduportal