1324177 - give mihai and jlund access to signing servers

Status: RESOLVED WONTFIX

(Release Engineering :: General, defect)

Description

[Jordan Lund (:jlund)]

as we implement and iterate cot throughout scriptworker based workers, it is likely that we will need to inspect signing nodes when we deploy new cot patches.

see my arguments here:

<jlund|away> aki: wondering if I should be added to signingscript shortlist so I can 1) ssh in the event signingscript gpghomedir blows up again and 2) actively monitor scriptworker deployment and signingscript gpghomedir gen when we add to cot-gpg trusted keys
19:18:32 
<aki> sgtm

I think it is reasonable to then remove ourselves from shortlist once beetmoverscrip and balrogscript adopt cot

this bug requires

1) puppet patch
2) encrypt signing node pw in private repo with jlund+mihai gpg keys

Comment 1

[Jordan Lund (:jlund)]

Attachment: Bug 1324177 - give mihai and jlund access to signing servers,

Review commit: https://reviewboard.mozilla.org/r/99250/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/99250/

Comment 2

[Jordan Lund (:jlund)]

nick, would you mind handling part 2 if you get a chance? If you get to this and also beat catlee, could you snag r? of part 1: https://bugzilla.mozilla.org/attachment.cgi?id=8819513

Comment 3

[Jordan Lund (:jlund)]

nick and I chatted a bit on this. I'm going to cancel my request. I should be able to get around any inconveniences via others on the shortlist. I'm less worried now that the gpghomedir recreation patch has landed and aki is intermittently back for any cot foo. If I need access in the future, I can revisit.

mihai, if you would like access, maybe reopen this bug and remove my name from patch.

Comment 4

[Mihai Tabara [:mtabara]⌚️GMT]

(In reply to Jordan Lund (:jlund) from comment #3)
> mihai, if you would like access, maybe reopen this bug and remove my name
> from patch.

Feeling less as a target is good, so fine by me with not having access to these :)