Access to deploy updates to code.cdn.mozilla.net for :jryans

VERIFIED FIXED

Status

Infrastructure & Operations
WebOps: Other
VERIFIED FIXED
2 years ago
2 years ago

People

(Reporter: jryans, Assigned: cyliang)

Tracking

Details

(Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/2653] )

I would like access to deploy updated files to the CDN at code.cdn.mozilla.net.  I believe this means I need access to the S3 bucket that backs the files.

I do already have a Mozilla AWS key for other purposes, not sure if that is reusable for this purpose, or if a new key is needed.

Supposedly :fox2mike documented this on https://mana.mozilla.org/wiki/display/SYSADMIN/Granting+access+to+code.cdn.mozilla.net.  See bug 981801 and related bugs.
(Reporter)

Comment 1

2 years ago
My internal account is rstinnett@mozilla.com.

Updated

2 years ago
Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/2653]
(Assignee)

Updated

2 years ago
Assignee: server-ops-webops → cliang
(Assignee)

Comment 2

2 years ago
I'm looping in a few folks on this bug: I'd like someone who already has access to this CDN to approve your access request.
Flags: needinfo?(tofumatt)
Flags: needinfo?(thepotch)
Flags: needinfo?(rpetty)
Flags: needinfo?(janx)

Comment 3

2 years ago
I may have access but I never actually ended up using this. I think wenzel's old team was going to use it for something but we never did, so I'm quite lost on the some, sorry!
Flags: needinfo?(tofumatt)

Comment 4

2 years ago
the some = this one, silly iPad keyboard.

Comment 5

2 years ago
(In reply to C. Liang [:cyliang] from comment #2)
> I'm looping in a few folks on this bug: I'd like someone who already has
> access to this CDN to approve your access request.

I already have access to code.cdn.mozilla.net and I approve this request! With :jryans we'd be two DevToolers who can push new revisions of https://code.cdn.mozilla.net/devices/devices.json
Flags: needinfo?(janx)
(Assignee)

Updated

2 years ago
Flags: needinfo?(thepotch)
Flags: needinfo?(rpetty)
(Assignee)

Comment 6

2 years ago
Ryan: I've sent you a new set of credentials via email (sent to your gmail account).  (The S3 bucket underlying the CDN is held in a specific AWS account; I created a user for you under that account since it didn't look like one existed.)  Please let me know if you haven't received the file or have issues using the account.
Flags: needinfo?(jryans)
(Reporter)

Comment 7

2 years ago
Thanks, I received the credentials.  I was able to deploy an updated version of the file to s3.  The CDN still shows the old version, but I assume we just need to wait for the CDN cache to expire.
Flags: needinfo?(jryans)
(Assignee)

Comment 8

2 years ago
K.  If the updated file doesn't expire w/in a timely manner, file a bug and we can see if a cache purge is needed.
Status: NEW → RESOLVED
Last Resolved: 2 years ago
Resolution: --- → FIXED
(Reporter)

Comment 9

2 years ago
The CDN is now giving an access denied error:

https://code.cdn.mozilla.net/devices/devices.json

Is this an issue with permissions on the S3 object?
Flags: needinfo?(cliang)
(Assignee)

Comment 10

2 years ago
You probably need to set the permissions on the S3 object so that "Everyone" can read them.  

If I log into the AWS console and look at ./images/firefox_dark_widescreen-wide.jpg, it shows that "Everyone" can "Open/Download" the object.  If I look at the ./devices/devices.json object, it is missing permissions for "Everyone".
Flags: needinfo?(cliang)
Great, it's working well now.  Thanks all!
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.