(In reply to Aki Sasaki [:aki] (he/him) (UTC-7) from comment #21) > We appear to be missing the `secrets:get:project/releng/gecko/build/level-3/*` scope. How did we create the test task? it's a real task rather than a test task. i modified the ami id in worker manager manually (for a few availability zones rather than all of them) so that i could see workers claiming tasks in production (after verifying that they do so in testing). if the word `sccache` appeared in the log, the build always and consistently failed without exception. many dozens of tasks succeeded but none of the successful tasks contained the word `sccache` in the build log.
Bug 1715749 Comment 23 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
(In reply to Aki Sasaki [:aki] (he/him) (UTC-7) from comment #21) > We appear to be missing the `secrets:get:project/releng/gecko/build/level-3/*` scope. How did we create the test task? it's a real task rather than a test task. i modified the ami id in worker manager manually (for a few availability zones rather than all of them) so that i could see workers claiming tasks in production (after verifying that they do so in testing). if the word `sccache` appeared in the log, the build always and consistently failed without exception. many dozens of tasks succeeded but none of the successful tasks contained the word `sccache` in the build log. note that the major difference between the ami's containing the new cot key and those containing the old cot key is that new uses taskcluster 43.2.0 whereas old uses 16.5.1. it would not surprise me if scope requirements have changed between these versions.