1164540 - Add signing workers to signing_new_token_allowed_ips

Status: RESOLVED FIXED

(Release Engineering :: General, defect)

Description

[Rail Aliiev [:rail]]

Signing workers used by funsize need to generate signing tokens.

Comment 1

[Rail Aliiev [:rail]]

Attachment: puppet-signing-worker-dev.diff

Comment 2

[Rail Aliiev [:rail]]

[13:46] <dustin> rail: can you tell me more about this signing worker stuff?
[13:49] <rail> dustin: those will be TC workers sitting in our VPC, so they can talk to the signing servers. TC would create a task with a list of files that will be signed by these workers and published as artifacts
[13:49] <rail> dustin: the IP is a "dev" instance, I'm going to use it against dep-signing servers

Comment 3

[Rail Aliiev [:rail]]

Comment on attachment 8605359 [details] [diff] [review]
puppet-signing-worker-dev.diff

remote:   https://hg.mozilla.org/build/puppet/rev/9758f211347f
remote:   https://hg.mozilla.org/build/puppet/rev/322b31cd5758

Comment 4

[Rail Aliiev [:rail]]

Attachment: puppet-signing-workers.diff

Subnets are in place now, we can add them. I didn't add usw1.

Comment 5

[Rail Aliiev [:rail]]

Comment on attachment 8609065 [details] [diff] [review]
puppet-signing-workers.diff

remote:   https://hg.mozilla.org/build/puppet/rev/c0c64dc202bf
remote:   https://hg.mozilla.org/build/puppet/rev/f62569008646