1246191 - Users can't view the list of workerTypes

Status: RESOLVED FIXED

(Taskcluster :: Services, defect)

Description

[Dustin J. Mitchell [:dustin] (he/him)]

Users implementing new task types don't have any way to view the list of available workerTypes.  This is basically the only read-only call in TC that is protected by scopes (aside from secrets, obviously).

This is protected because there are secrets embedded in the workerType definitions.  It wouldn't be too hard to return a subset of the workerType definition in the `workerTypes` method, and only include the secrets in the `workerType` method -- or even to add a separate `getSecrets` method.

Comment 1

[Pete Moore [:pmoore][:pete]]

I'd propose instead that the worker types only refer to keys of the secrets store, not values, and this way can become public (see bug 1246620).

Comment 2

[Selena Deckelmann :selenamarie :selena]

From irc: Let's patch listWorkerTypes so that it doesn't require a scope.

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

Once that's done, pass the bug to me and I'll update tools to show only workerType names (and pending tasks) for each, when aws-provisioner:view-worker:<workerType> is not available.

Comment 4

[John Ford [:jhford] CET/CEST Berlin Time]

Attachment: patch

Comment 5

[Selena Deckelmann :selenamarie :selena]

This is merged.