(March 2023) Update VPN CRL

[smerle33]

Service(s)

VPN

Summary

The Jenkins Infra calendar reminds us that the VPN CRL expires the 3rd of April 2023.

Todo list for the team member who will take this action:

• Read https://github.com/jenkins-infra/docker-openvpn#howto-review-certificate-revocation-list and check that you have all the pre-requisites
• Open a PR to jenkins-infra/docker-openvpn that updates the CRL as in fix(CRL update): Renew revocation list certificate docker-openvpn#194
• Once the PR is merged, ensures that there is a new version of the container automatically built and released
• Run manually the updatecli build on https://infra.ci.jenkins.io/job/updatecli/job/jenkins-infra/job/production/ to open a PR for deploying the new Docker image to production
• Once deployed, connect to the ALL VPN VMs and ensure that the new CRL is present and updated on each of them (vpn.jenkins.io, private.vpn.jenkins.io)
• Create a new team calendar event to the date of the next expiration, with alerts 3 weeks before and 2 weeks before

Reproduction steps

No response

[github-actions]

Take a look at these similar issues to see if there isn't already a response to your problem:

1. 83% (April 2022) Update VPN CRL #2885
2. 78% (October 2022) Update VPN CRL #3162

[smerle33]

the docker image is published : https://hub.docker.com/layers/jenkinsciinfra/openvpn/latest/images/sha256-e208cd1b8c8b1da6706e6c54dcbc8eb1371c7a1d35017ce97d8e6c524878d131?context=explore