1164612 - Encrypt the relengapi token when submitting Android jobs to TC

Status: RESOLVED FIXED

(Release Engineering :: General, defect)

Description

[Dustin J. Mitchell [:dustin] (he/him)]

The RELENGAPI_TOKEN variable needs to be set for Android builds, since they need to use tooltool.

It's not clear to me where this token would come from for a try job or a scheduled job -- is it up to the scheduler to find the value and encrypt it?

Comment 1

[Morgan Phillips [:mrrrgn]]

There is currently no way to do this in tree. A promising solution seems to be adding a proxy container which doles out keys to workers based on their scopes.

Comment 2

[Morgan Phillips [:mrrrgn]]

(In reply to Dustin J. Mitchell [:dustin] from comment #0)
> The RELENGAPI_TOKEN variable needs to be set for Android builds, since they
> need to use tooltool.
> 
> It's not clear to me where this token would come from for a try job or a
> scheduled job -- is it up to the scheduler to find the value and encrypt it?

Removing myself from this, since you're working on the proxy. No sense for it to sit in my queue.

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

Closing this in favor of bug 1170753, which will be closed shortly.