[
https://issues.apache.org/jira/browse/BEAM-14169?focusedWorklogId=759442&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-759442
]
ASF GitHub Bot logged work on BEAM-14169:
-----------------------------------------
Author: ASF GitHub Bot
Created on: 20/Apr/22 17:27
Start Date: 20/Apr/22 17:27
Worklog Time Spent: 10m
Work Description: kennknowles commented on code in PR #17383:
URL: https://github.com/apache/beam/pull/17383#discussion_r854384489
##########
.test-infra/jenkins/job_ClusterCredentialsRotation.groovy:
##########
@@ -0,0 +1,63 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import CommonJobProperties as commonJobProperties
+
+job('Rotate Cluster Credentials') {
+ description('Rotates Certificates and performs an IP rotation for metrics
and io-datastores')
+
+ // Set common parameters.
+ commonJobProperties.setTopLevelMainJobProperties(delegate)
+
+ // Sets that this is a cron job.
+ commonJobProperties.setCronJob(delegate, 'H 2 1 */2 *')// At 00:02am every
second month.
+
+ steps {
+
+ //Credentials rotation for metrics and io-datastores
+
+ //Set a maintenance window
+ shell('''printf 'yes'| gcloud container clusters update metrics \
Review Comment:
From `gcloud container clusters update --help` I see there is a gcloud
global flag so I checked `gcloud --help` and this might simplify the commands
here:
```
--quiet, -q
Disable all interactive prompts when running gcloud commands. If
input
is required, defaults will be used, or an error will be raised.
Overrides the default core/disable_prompts property value for this
command invocation. This is equivalent to setting the environment
variable CLOUDSDK_CORE_DISABLE_PROMPTS to 1.
```
Would this work?
Issue Time Tracking
-------------------
Worklog Id: (was: 759442)
Time Spent: 40m (was: 0.5h)
> Automatically rotate credentials for Kubernetes cluster
> -------------------------------------------------------
>
> Key: BEAM-14169
> URL: https://issues.apache.org/jira/browse/BEAM-14169
> Project: Beam
> Issue Type: Improvement
> Components: testing
> Reporter: Kiley Sok
> Assignee: Elias Edgardo Segundo Antonio
> Priority: P2
> Time Spent: 40m
> Remaining Estimate: 0h
>
> We had to manually rotate the credentials. Set up cron job to rotate every x
> months.
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
