1252365 - Create prod relpro TC login

Status: RESOLVED FIXED

(Release Engineering :: Release Automation: Other, defect)

Description

[Rail Aliiev [:rail]]

Need to create a new login with following scopes

docker-worker:*
project:releng:buildbot-bridge:builder-name:*
queue:*
scheduler:*
signing:cert:*
signing:format:*


Example task graph it supposed to create https://tools.taskcluster.net/task-graph-inspector/#1-qNGWPKTAOv7vx4wmGymg/

Comment 1

[Rail Aliiev [:rail]]

I'm not able to create new clients anymore, what's the current procedure?

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

You can create clientIds in the releng namespace, `project/releng/*`

You will want to be more specific with some of those stars.  What I'd suggest is adding assume:moz-tree:level:3 (https://tools.taskcluster.net/auth/roles/#moz-tree:level:1) which will get you everything you need to build mozilla-central, then adding whatever additional scopes you need to do the release promotion.  Note, too, bug 1226019 -- ideally we'd be using `project:releng:signing:cert:..`. etc.

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

I created `project/releng/release-promotion/production` with 

    assume:moz-tree:level:3
    project:releng:buildbot-bridge:builder-name:*
    signing:cert:*
    signing:format:*

if we need more scopes, just add them or let me know.