Expiration of the Digital Oceans PATs [December 2023]

[dduportal]

Service(s)

infra.ci.jenkins.io, DigitalOcean

Summary

The Digital Ocean PATs (Personnal Access Tokens) expire this Sunday 10th of Decembr 2023.

For info, previous token rotation: #3749

Todo list:

• Generate a new pair of tokens:
  • Connect to DigitalOcean as the "Jenkins Infrastructure Technical User" (email: jenkins-infra-team@googlegroups.com)
  • Browse to the "API"section -> "Applications & API" title -> "Tokens/key" tab
  • Regenerate the 2 tokens (or create new ones if they disappear) with 90 days of TTL:
    • infra.ci-production => Read + Write
    • infra.ci-staging => Read-Only
• Update tokens in the IaC setup:
  • Update the SOPS encrypted secrets in https://github.com/jenkins-infra/charts-secrets
  • Run a build of jenkins-infra/kubernetes-management on its main branch to deploy new secrets
  • Reload JCasc on infra.ci to ensure credentials are updated from new secret
• Verify that the jenkins-infra/digitalocean is back to successful state
• Add a calendar event in 90 days with 2 weeks alert

Reproduction steps

No response

[github-actions]

Take a look at these similar issues to see if there isn't already a response to your problem:

1. 89% Expiration of the Digital Oceans PATs [June 2023] #3616

[dduportal]

https://infra.ci.jenkins.io/job/terraform-jobs/job/digitalocean/job/main/577/flowGraphTable/ shows new credential works 👍

[dduportal]

Calendar event updated 👍