Closed Bug 1337104 Opened 7 years ago Closed 7 years ago

grant access to opencloudconfig secrets to relops/releng

Categories

(Taskcluster :: Operations and Service Requests, task)

Product:
Taskcluster
Component:
Operations and Service Requests
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WORKSFORME

People

(Reporter: grenade, Assigned: dustin)

References

Details

please add mcornmesser@mozilla.com & q@mozilla.com to mozilla-group:team_relops in order to give them access to secrets:get:repo:github.com/mozilla-releng/OpenCloudConfig:*

also, it would be good going forward if nthomas, catlee, kmoir and callek had access to those secrets. I don't know how many are in mozilla-group:releng but that might be the appropriate role to add the scope to. i defer to someone who understands the role/group/user scope mapping better.

The names above are people I know who troubleshoot windows build problems or implement windows build/test ci changes. there are likely to be others.
the buildduty folks should be included as well.
This will have a significant impact on me being able to move forward on Bug 1328640.
Those two people should be in that LDAP group already (although I can't verify that myself).  And mozilla-group:team_relops assumes mozilla-group:releng, which has secrets:{get,set}:repo:github.com/mozilla-releng/* and includes nick, catlee, etc.

So, I think, and we agree in irc, that this already works :)
Assignee: nobody → dustin
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WORKSFORME
Component: Service Request → Operations and Service Requests
You need to log in before you can comment on or make changes to this bug.