Expiration of the Digital Oceans PATs [8 March 2024]

[smerle33]

Service(s)

infra.ci.jenkins.io, DigitalOcean

Summary

The Digital Ocean PATs (Personnal Access Tokens) expired 8th of Mars 2024.

For info, previous token rotation: https://github.com/jenkins-infra/helpdesk/issues/3853

Todo list:

• [x] Generate a new pair of tokens:
  • Connect to DigitalOcean as the "Jenkins Infrastructure Technical User" (email: jenkins-infra-team@googlegroups.com)
  • use https://github.com/jenkins-infra/runbooks/blob/main/shared-totp/README.adoc for 2FA
  • Browse to the "API"section -> "Applications & API" title -> "Tokens/key" tab
  • Regenerate the 2 tokens (or create new ones if they disappear) with 90 days of TTL:
  • infra.ci-production => Read + Write
  • infra.ci-staging => Read-Only
• [x] Update tokens in the IaC setup:
  • [x] Update the SOPS encrypted secrets in https://github.com/jenkins-infra/charts-secrets - https://github.com/jenkins-infra/charts-secrets/pull/29
  • [x] Run a build of jenkins-infra/kubernetes-management on its main branch to deploy new secrets
  • [x] Reload JCasc on infra.ci to ensure credentials are updated from new secret
• [x] Verify that the jenkins-infra/digitalocean is back to successful state
• [x] Add a calendar event in 90 days with 2 weeks alert

Reproduction steps

No response

[github-actions[bot]]

Take a look at these similar issues to see if there isn't already a response to your problem:

1. 71% #3616