1253279 - Access to deploy updates to code.cdn.mozilla.net for :jryans

Status: VERIFIED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[J. Ryan Stinnett [:jryans] (Use needinfo, replies may be slow)]

I would like access to deploy updated files to the CDN at code.cdn.mozilla.net.  I believe this means I need access to the S3 bucket that backs the files.

I do already have a Mozilla AWS key for other purposes, not sure if that is reusable for this purpose, or if a new key is needed.

Supposedly :fox2mike documented this on https://mana.mozilla.org/wiki/display/SYSADMIN/Granting+access+to+code.cdn.mozilla.net.  See bug 981801 and related bugs.

Comment 1

[J. Ryan Stinnett [:jryans] (Use needinfo, replies may be slow)]

My internal account is [e-mail].

Comment 2

[C. Liang [:cyliang]]

I'm looping in a few folks on this bug: I'd like someone who already has access to this CDN to approve your access request.

Comment 3

[tofumatt [:tofumatt]]

I may have access but I never actually ended up using this. I think wenzel's old team was going to use it for something but we never did, so I'm quite lost on the some, sorry!

Comment 4

[tofumatt [:tofumatt]]

the some = this one, silly iPad keyboard.

Comment 5

[Jan Keromnes [:janx]]

(In reply to C. Liang [:cyliang] from comment #2)
> I'm looping in a few folks on this bug: I'd like someone who already has
> access to this CDN to approve your access request.

I already have access to code.cdn.mozilla.net and I approve this request! With :jryans we'd be two DevToolers who can push new revisions of https://code.cdn.mozilla.net/devices/devices.json

Comment 6

[C. Liang [:cyliang]]

Ryan: I've sent you a new set of credentials via email (sent to your gmail account).  (The S3 bucket underlying the CDN is held in a specific AWS account; I created a user for you under that account since it didn't look like one existed.)  Please let me know if you haven't received the file or have issues using the account.

Comment 7

[J. Ryan Stinnett [:jryans] (Use needinfo, replies may be slow)]

Thanks, I received the credentials.  I was able to deploy an updated version of the file to s3.  The CDN still shows the old version, but I assume we just need to wait for the CDN cache to expire.

Comment 8

[C. Liang [:cyliang]]

K.  If the updated file doesn't expire w/in a timely manner, file a bug and we can see if a cache purge is needed.

Comment 9

[J. Ryan Stinnett [:jryans] (Use needinfo, replies may be slow)]

The CDN is now giving an access denied error:

https://code.cdn.mozilla.net/devices/devices.json

Is this an issue with permissions on the S3 object?

Comment 10

[C. Liang [:cyliang]]

You probably need to set the permissions on the S3 object so that "Everyone" can read them.  

If I log into the AWS console and look at ./images/firefox_dark_widescreen-wide.jpg, it shows that "Everyone" can "Open/Download" the object.  If I look at the ./devices/devices.json object, it is missing permissions for "Everyone".

Comment 11

[J. Ryan Stinnett [:jryans] (Use needinfo, replies may be slow)]

Great, it's working well now.  Thanks all!