[release.ci.jenkins.io] 2025-02-16 Azure Credentials for Core Release (Vault access) expires

[dduportal]

Service(s)

release.ci.jenkins.io

Summary

Previous expiration issue: #4397

The Azure credential used by release.ci.jenkins.io to access the Azure Vault when releasing Jenkins (to obtain signing certificates) expires on the 16 February 2025.

We have to renew this credential for 3 months.

Credential is defined in (private link): https://github.com/jenkins-infra/terraform-states/blob/main/azure/release.ci-sp.tf

• Automated PR (with instructions): (private link): https://github.com/jenkins-infra/terraform-states/pull/46
• release.ci.jenkins.io has the credential defined in JCasc: https://github.com/jenkins-infra/kubernetes-management/blob/3655de349a526edfbea563d99ea229961b741ac2/config/jenkins_release.ci.jenkins.io.yaml#L90-L104 (and sops for the sensitive value injected in JCasc)
• Update the calendar event with the expiration date to be sure we do not forget or miss the PR

Note: using Azure Instance identity would help to avoid renewing this without compromising security in this case.

Reproduction steps

No response

[github-actions]

Take a look at these similar issues to see if there isn't already a response to your problem:

1. 96% [release.ci.jenkins.io] 2024-08-31 Azure Credentials for Core Release (Vault access) expires #4252
2. 83% [release.ci.jenkins.io] Azure Credentials for Core Release (Vault access) are expired #4084