1220750 - Assign each worker an appropriate role, remove wt.scopes

Status: RESOLVED DUPLICATE of bug 1217088

(Taskcluster :: Services, defect)

Description

[Dustin J. Mitchell [:dustin] (he/him)]

Now that we have roles, the provisioner should just assign a well-known role to each workerType, rather than allowing an open list of scopes.

Those roles should be:

  assume:worker-type:aws-provisioner-v1/<workerType>
  assume:worker-id:<region>/<instanceId>

This will not affect the scopes provided to workers -- each workerType's scopes are currently set as described (well, with `*` for <region>/<instanceId>).  So this is just making that configuration automatic.

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

So specific steps for this bug:
 - remove `scopes` from the workerType schemata
 - when spawning a worker, use the roles given in comment 0 instead of `scopes`.

Comment 2

[Jonas Finnemann Jensen (:jonasfj)]

See bug 1217088, almost the same...