[infra.ci.jenkins.io] NPM token expires the 7 December 2024

[dduportal]

Service(s)

infra.ci.jenkins.io

Summary

The NPM API token used on infra.ci.jenkins.io to publish NPM packages to npmjs.org (Gastbsy layout, Jenkins.io components, etc.) expires the 7 December 2024.

This issue tracks the work required to renew this token.

Task list:

• Renew the token in NPMJS.org (Log-in as the service account jenkins-infra-team with the shared MFA with TOTP in Sops) using the same properties (R/W on the required componenets and Read-Only on the jenkinsci NPM organization) and a 90 days validity
• Insert the new token in our Sops secrets
• Deploy the new token in infra.ci.jenkins.io (a run of kubernetes-management along with a JCasC reload)
• Add a calendar event for the next renewal

NOTE: it's hard to verify this token as we only have deployment jobs using it

Reproduction steps

No response

[github-actions]

Take a look at these similar issues to see if there isn't already a response to your problem:

1. 77% [infra.ci.jenkins.io] Netlify token expires the 09 December 2024 #4446

[dduportal]

Token deleted and re-created in NPMSJS with the name infra.ci.jenkins.io and an expiration date set to the 7 March 2025:

[dduportal]

Token added to our SoPs secrets in (private link): https://github.com/jenkins-infra/charts-secrets/commit/f59d28396097399d6f1c787d9881d8472ea49b7a followed by a kubernetes-management run and a controller rollout restart

[dduportal]

Calendar added!