chore(updatecli): more information to retrieve credential within terr…

…aform (#717) following #712 more informations --------- Co-authored-by: Hervé Le Meur <[email protected]>
jenkins-infra · Jun 5, 2024 · ca0ecc3 · ca0ecc3
1 parent 4948098
commit ca0ecc3
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/updatecli/updatecli.d/trusted.ci.sp.endate.yaml b/updatecli/updatecli.d/trusted.ci.sp.endate.yaml
@@ -55,7 +55,7 @@ actions:
       title: Generate a new Azure AD Application password with expiration date {{ source "nextExpiry" }} on `trusted.ci.jenkins.io`
       description: |
         This PR generates a new Azure AD application password with a new end date for the `trusted.ci.jenkins.io` controller (to allow spawning Azure VM agents).
-        Once this PR is merged and deployed with success by Terraform (on infra.ci.jenkins.io), you can retrieve the new password's value in Terraform state (do NOT save it anywhere!) and update (manually) the trusted.ci.jenkins.io credential named `azure-jenkins-sponsorship-credentials` through the Jenkins UI.
-        Finally, verify both the Azure Credential and Azure VM clouds by clicking on the "Verify <...>" buttons with success.
+        Once this PR is merged and deployed with success by Terraform (on infra.ci.jenkins.io), you can retrieve the new password value from the Terraform state with `terraform show -json` then searching for the new password in `values.value` of the `module.trusted_ci_jenkins_io.azuread_application_password.controller` section (do NOT save it anywhere!) and (manually) update the trusted.ci.jenkins.io credential named `azure-jenkins-sponsorship-credentials` through the Jenkins UI.
+        Finally, verify both Azure Credential and Azure VM clouds by checking that a click on the "Verify <...>" buttons returns a success, then restart the controller to ensure that the old credential is not kept in cache.
       labels:
         - terraform