1301401 - Modify chain-of-trust implementation to conform to chainOfTrustVersion 1

Status: RESOLVED FIXED

(Taskcluster :: Workers, defect)

Description

[Pete Moore [:pmoore][:pete]]

This stems from https://bugzilla.mozilla.org/show_bug.cgi?id=1287112#c11:

To sum up, it looks like we have the following cot artifact changes across docker-worker, generic-worker, and scriptworker:

1. artifacts now looks like

    "artifacts": {
      "path/to/artifact": {
        "sha256": "..."
      }
      ...
    }

2. Let's add a top level version at the top level.  I'm open about the name.

    "chainOfTrustVersion": 1

3. Rename 'extra' to 'environment'

    "environment": {
      "publicIpAddress": "12.34.56.78",
      "privateIpAddress": "87.65.43.21",
      "instanceId": "i123456789",
      "instanceType": "c3.2xlarge",
      "region": "us-west-2a"
    }

4. Rename 'certificate.json.gpg' to 'chainOfTrust.json.asc'.

Comment 1

[Pete Moore [:pmoore][:pete]]

Attachment: Github Pull Request for docker-worker

Comment 2

[[github robot]]

Commits pushed to master at https://github.com/taskcluster/docker-worker

https://github.com/taskcluster/docker-worker/commit/30584f88105ef4433f7edcf93c20b55deacaa61e
Bug 1301401 - updating to chainOfTrust version 1 format

https://github.com/taskcluster/docker-worker/commit/1a69b6ee6f3fc62832a70f9858e991da74393e34
Bug 1301401 - incorporated fixes suggested by garndt in PR review

https://github.com/taskcluster/docker-worker/commit/18f98605a1fbae37e73712cbcf576129a198a2e2
Merge pull request #249 from taskcluster/bug1301401

Bug 1301401 - updating to chainOfTrust version 1 format

Comment 3

[Greg Arndt [:garndt]]

Comment on attachment 8789686 [details] [review]
Github Pull Request for docker-worker

this has been merged but not yet deployed

Comment 4

[Pete Moore [:pmoore][:pete]]

Greg, can this be closed now?

Comment 5

[Greg Arndt [:garndt]]

Yup, this is all set.