Last modified: 2013-02-13 11:23:25 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T46592, the corresponding Phabricator task for complete and up-to-date bug report information.
First Last Prev Next    This bug is not in your last search results.
Bug 44592 - Get Jenkins to rekey its secret
Get Jenkins to rekey its secret
Status: RESOLVED FIXED
Product: Wikimedia
Classification: Unclassified
Continuous integration (Other open bugs)
unspecified
All All
: High minor (vote)
: ---
Assigned To: Antoine "hashar" Musso (WMF)
:
Depends on:
Blocks:
  Show dependency tree / graph
 
Reported: 2013-02-01 20:30 UTC by Antoine "hashar" Musso (WMF)
Modified: 2013-02-13 11:23 UTC (History)
3 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Antoine "hashar" Musso (WMF) 2013-02-01 20:30:37 UTC 
Since we upgraded Jenkins (bug 41973) the Manage Jenkins page ask us to rekey various secret.

This can potentially change the users API keys  and thus cause Zuul to no more be able to write back to Jenkins causing major havoc.

Antoine must schedule with ops to get Jenkins rekeyed and have someone able to update the secret puppet repository with the new API key for Zuul.
Comment 1 Antoine "hashar" Musso (WMF) 2013-02-12 15:45:03 UTC 
I will deal with it tomorrow with Ariel as an op to update the Zuul API key if it ever change :-]
Comment 2 Antoine "hashar" Musso (WMF) 2013-02-13 08:30:11 UTC 
I have started the rekeying process.
Comment 3 Antoine "hashar" Musso (WMF) 2013-02-13 11:23:25 UTC 
The rekeying log is in  /var/lib/jenkins/jenkins.security.RekeySecretAdminMonitor/rekey.log


Started re-keying Wed Feb 13 08:25:31 UTC 2013
..
Completed re-keying 70 files on Wed Feb 13 10:09:46 UTC 2013


Zuul is still able to communicate with Jenkins :-]
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.

Navigation
Links