1194807 - create and deploy taskcluster credentials for release runner dev

Status: RESOLVED FIXED

(Release Engineering :: Release Automation: Other, defect)

Description

[[e-mail] (:bhearsum)]

We're getting close to wanting to being able to create task graphs with it, and we'll need release runner to have credentials to be able submit it!

Comment 1

[[e-mail] (:bhearsum)]

I created credentials called "release runner dev", and granted them the following scopes:
    queue:*
    docker-worker:*
    scheduler:*
    signing:format:gpg
    signing:format:mar
    signing:cert:dep-signing


...which are most of the things listed in https://github.com/rail/releasetasks/blob/master/releasetasks/templates/release_graph.yml.tmpl right now. I explicitly didn't include signing:cert:release-signing or docker-worker:feature:balrogVPNProxy, because those are only needed for production balrog/signing, and we don't want dev to be able to do that.

Comment 2

[[e-mail] (:bhearsum)]

Attachment: deploy tc creds in release runner config

Comment 3

[[e-mail] (:bhearsum)]

Comment on attachment 8648169 [details] [diff] [review]
deploy tc creds in release runner config

I added the necessary secrets to Hiera and checked this in.