[Jenkins-infra] So that was a funny ci.jenkins.io outage

R. Tyler Croy tyler at monkeypox.org
Thu Dec 7 22:17:23 UTC 2017


abayer gets a golden rubber chicken for today

    03:58 @<abayer> rtyler: something is awry with creds on ci.jenkins.io for Azure - see https://gist.github.com/abayer/88b3d5344ed95ad64bb5e83eb6b48cb1 e.g.
    03:58 @<abayer> So instances aren't getting deleted. Not sure what else is borked by that, but I'm guessing it's probably causing other errors.
    04:00 @<abayer> Yup, errors validating VM images, timeouts creating instances...


As a bunch of smashing around on my part, I discovered the real issue (in the
last place I looked!) was that Azure AD Application credentials are created
with a 365 day expiry.

As it turns out, I originally provisioned our Azure integration in
ci.jenkins.io on December 7th 2016.


I have created a key without an expiry for the AAD service principal for now. I
need to discuss with olblak how we should handle some of these grants we have
running around for Terrorform.



Cheers
- R. Tyler Croy

------------------------------------------------------
     Code: <https://github.com/rtyler>
  Chatter: <https://twitter.com/agentdero>
     xmpp: rtyler at jabber.org

  % gpg --keyserver keys.gnupg.net --recv-key 1426C7DC3F51E16F
------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://lists.jenkins-ci.org/pipermail/jenkins-infra/attachments/20171207/f540c9d3/attachment.asc>


More information about the Jenkins-infra mailing list