[trusted.ci.jenkins.io] RPU Artifactory API token expires on the 2026-08-22

[dduportal]

Service(s)

trusted.ci.jenkins.io

Summary

The Artifactory Admin token used by the RPU in https://github.com/jenkins-infra/repository-permissions-updater/blob/949a4646b3bbe4fa5b6499120ef016cb8cdfe33c/Jenkinsfile#L80 expires the 22 August 2026.

• Disable RPU build on trusted.ci with a comment to this issue
• An Artifactory administrator must renew the token
• Then the credential in trusted.ci.jenkins.io must be updated (value, and also TTL in the description)
• And a new RPU build (in trusted.ci.jenkins.io) must be executed (after re-enabling it) with success
• Revoke the old token in Artifactory
• Update calendar to new TTL

Previous rotation #5068

Reproduction steps

No response

[dduportal]

• Old token removed
• New token created, expiring on 19 Dec. 2026:

[dduportal]

• Credential updated (secret value + TTL in the description) on trusted.ci
• RPU job re-enabled and triggered to verify it's using the new credential with succes

[dduportal]

• Calendar even updated to 19 Dece. 2026 and the link points to the current issue
• RPU build is using the new credential and does not fail: