[infra.ci.jenkins.io] Netlify token expires the 09 December 2024

[dduportal]

Service(s)

infra.ci.jenkins.io

Summary

The Netlify API token used on infra.ci.jenkins.io by the website (contributors, www.jenkins.io, docs, etc.) jobs to deploy PR previews and production websites (when in Netlify) expires the 09 December 2024.

This issue tracks the work required to renew this token.
Preview token renewal happened in #4284.

Task list:

• Renew the token (log-in in Netlify as the jenkins-infra-team service user with its shared MFA TOTP in Sops) by deleting and then re-create it with the name infra.ci.jenkins.io, same properties as before and 90 days validity
• Insert the token in our SOPS secrets
• Apply the new token to infra.ci (a kubernetes-management run onits main branch along with a controller JCasC reload is sufficient)
• Check that the new token works by triggering a website job PR build which should deploy a preview
• Add a calendar event for the next renewal

Reproduction steps

No response

[dduportal]

New token created, will expires the 7 March 2025:

[dduportal]

New token inserted in (private link): https://github.com/jenkins-infra/charts-secrets/commit/2547263d82e798a7b42fd0040c75841fec600df5, followed by a controller rollout restart

[dduportal]

tested a PR build on the contributors website: new token works very well

[dduportal]

Calendar event added for the 7 March 2025