search

jenkins-infra / crawler

tools crawler
26 stars 65 forks source link

chore: use short-lived SAS token to sync updates-jenkins-io File Share #144

Closed lemeurherve closed 8 months ago

lemeurherve commented 8 months ago

This PR replaces the use of a long-lived SAS token by a short-lived one generated from a service principal via the get-fileshare-signed-url script from https://github.com/jenkins-infra/pipeline-library/blob/master/resources/get-fileshare-signed-url.sh

Needs:

Ref:

lemeurherve commented 8 months ago

In draft as I need to get this script on ephemeral agents.

lemeurherve commented 8 months ago

Ephemeral agents of trusted.ci.jenkins.io include the script since https://github.com/jenkins-infra/packer-images/pull/1084

PR tested with a replay: https://trusted.ci.jenkins.io:1443/job/crawler/14133/