Remove migrated all-orgs artifact-feed PAT - #17245
Conversation
There was a problem hiding this comment.
Pull request overview
This PR updates Arcade’s EngKeyVault secret-manager manifest to remove the managed Azure DevOps PAT dn-bot-all-orgs-artifact-feeds-rw now that known active consumers have migrated away from it.
Changes:
- Removes the
dn-bot-all-orgs-artifact-feeds-rwazure-devops-access-tokensecret entry from the EngKeyVault manifest. - Eliminates the associated
#AzureDevOps-Artifact-Feeds-Patssection header in that manifest.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
Validation build 1540241 passed every build and local test leg. The only failure was the Helix monitor timing out after 85 minutes with two jobs still waiting on �windows.11.amd64.client.open�; submission warned that the queue's estimated wait was 45-46 minutes over the 30-minute SLA. This is unrelated to the vault-manifest change. I requeued the PR validation as build 1540415: https://dev.azure.com/dnceng-public/public/_build/results?buildId=1540415 |
Summary
Removes the managed
dn-bot-all-orgs-artifact-feeds-rwPAT from the EngKeyVault secret-manager manifest now that all confirmed active consumers have migrated.Validation
main; real post-merge publishing succeeded in both dnceng and DevDiv.npmAuthenticate@0; post-merge build 3038004 published successfully.NuGetAuthenticate@1andPublish Build Assets, pushing BAR build 325726.After this merges, remove the secret from the Key Vault-backed
AzureDevOps-Artifact-Feeds-Patsvariable-group sync list, then retire the Key Vault secret.Related: https://dnceng.visualstudio.com/internal/_workitems/edit/10145