[infra.ci.jenkins.io] Azure Credential used by Packer Image builds expires the 05 November 2025 #4850
Description
Service(s)
infra.ci.jenkins.io
Summary
The Azure Service Principal credential used by infra.ci.jenkins.io to build Packer Azure VMs expires the 05 November 2025.
For info, previous credential rotation: #4761
Todo list:
- Review, approve and merge the Azure Terraform PR Extend Azure AD Application password validity for packer-resources (current end date: 2025-11-05T00:00:00Z) azure#1230
- Once applied with success, retrieve the password value (read the PR body for information) and update the secret value in the IaC setup:
- Update the SOPS encrypted secrets in https://github.com/jenkins-infra/charts-secrets - (link to the commit in https://github.com/jenkins-infra/charts-secrets to insert once done)
- Run a build of jenkins-infra/kubernetes-management on its main branch to deploy new secrets - (link to build to insert)
- Reload JCasc on infra.ci to ensure credentials are updated from new secret
- Ensure packer builds are working again (link to a build of https://infra.ci.jenkins.io/job/infra-tools/job/packer-images to insert)
- Update calendar for an event
Reproduction steps
No response