-
Sub-task
-
Resolution: Done
-
Undefined
-
None
-
None
-
False
-
-
False
-
-
-
CoreOS East - Sprint 284
Build Details
| Field | Value |
|---|---|
| Job | build |
| Build Numbers | #3461, #3462 |
| Streams | 4.18-9.4, 4.17-9.4 |
| Arch | x86_64 |
| Timestamp | 2026-02-25T08:12 |
| Duration | ~2 hours (builds completed, upload failed) |
| Jenkins URLs | https://jenkins-rhcos--prod-pipeline.apps.int.prod-stable-spoke1-dc-iad2.itup.redhat.com/job/build/3461/ https://jenkins-rhcos--prod-pipeline.apps.int.prod-stable-spoke1-dc-iad2.itup.redhat.com/job/build/3462/ |
Root Cause Analysis
The builds completed successfully but failed during the Azure image upload stage because the Azure service principal client secret has expired.
Error Message
2026\-02\-25T08:59:56Z ore/azure: Fetching storage service keys failed: DefaultAzureCredential authentication failed
{
"error": "invalid\_client",
"error\_description": "AADSTS7000222: The provided client secret keys for app '23f4f29a\-6e00\-4ebe\-bceb\-9cdbd03a53fb' are expired. Visit the Azure portal to create new keys for your app: [https://aka.ms/NewClientSecret|https://aka.ms/NewClientSecret], or consider using certificate credentials for added security: [https://aka.ms/certCreds."|https://aka.ms/certCreds."]
}
Analysis
The Azure service principal used for uploading RHCOS images to Azure has an expired client secret. This affects all builds that attempt to upload Azure images.
App ID: 23f4f29a-6e00-4ebe-bceb-9cdbd03a53fb
Resolution
- Generate a new client secret in the Azure portal for the service principal
- Update the Jenkins credentials with the new secret
- Retry the failed builds
This is blocking all Azure image uploads until resolved.