Page MenuHomePhabricator

Get Jenkins to rekey its secret
Closed, ResolvedPublic

Description

Since we upgraded Jenkins (bug 41973) the Manage Jenkins page ask us to rekey various secret.

This can potentially change the users API keys and thus cause Zuul to no more be able to write back to Jenkins causing major havoc.

Antoine must schedule with ops to get Jenkins rekeyed and have someone able to update the secret puppet repository with the new API key for Zuul.


Version: unspecified
Severity: minor

Details

Reference
bz44592

Event Timeline

bzimport raised the priority of this task from to High.Nov 22 2014, 1:29 AM
bzimport set Reference to bz44592.

I will deal with it tomorrow with Ariel as an op to update the Zuul API key if it ever change :-]

I have started the rekeying process.

The rekeying log is in /var/lib/jenkins/jenkins.security.RekeySecretAdminMonitor/rekey.log

Started re-keying Wed Feb 13 08:25:31 UTC 2013
..
Completed re-keying 70 files on Wed Feb 13 10:09:46 UTC 2013

Zuul is still able to communicate with Jenkins :-]