jenkins: use token for pushing to openpilot-releases (#32146)

use token

Co-authored-by: tester <tester@comma.ai>
old-commit-hash: 91713bed26

Jenkinsfile

@@ -26,6 +26,7 @@ export SOURCE_DIR=${env.SOURCE_DIR}
 export GIT_BRANCH=${env.GIT_BRANCH}
 export GIT_COMMIT=${env.GIT_COMMIT}
 export AZURE_TOKEN='${env.AZURE_TOKEN}'
+export AZURE_TOKEN_OPENPILOT_RELEASES='${env.AZURE_TOKEN_OPENPILOT_RELEASES}'
 export MAPBOX_TOKEN='${env.MAPBOX_TOKEN}'
 # only use 1 thread for tici tests since most require HIL
 export PYTEST_ADDOPTS="-n 0"
@@ -134,9 +135,11 @@ def pcStage(String stageName, Closure body) {
 def setupCredentials() {
   withCredentials([
     string(credentialsId: 'azure_token', variable: 'AZURE_TOKEN'),
+    string(credentialsId: 'azure_token_openpilot_releases', variable: 'AZURE_TOKEN_OPENPILOT_RELEASES'),
     string(credentialsId: 'mapbox_token', variable: 'MAPBOX_TOKEN')
   ]) {
     env.AZURE_TOKEN = "${AZURE_TOKEN}"
+    env.AZURE_TOKEN_OPENPILOT_RELEASES = "${AZURE_TOKEN_OPENPILOT_RELEASES}"
     env.MAPBOX_TOKEN = "${MAPBOX_TOKEN}"
   }
 }

release/upload_casync_release.py

@@ -7,7 +7,8 @@ from openpilot.tools.lib.azure_container import AzureContainer
 
 
 if __name__ == "__main__":
-  del os.environ["AZURE_TOKEN"] # regerenate token for this bucket
+  if "AZURE_TOKEN_OPENPILOT_RELEASES" in os.environ:
+    os.environ["AZURE_TOKEN"] = os.environ["AZURE_TOKEN_OPENPILOT_RELEASES"]
 
   OPENPILOT_RELEASES_CONTAINER = AzureContainer("commadist", "openpilot-releases")