1358231 - Use host-secrets service for linux taskcluster-worker hosts

Status: RESOLVED FIXED

(Taskcluster :: Workers, enhancement)

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

Need to land and deploy https://github.com/taskcluster/taskcluster-worker/pull/241 before this will work, but that's easy enough.

The service itself is also awaiting deployment of https://github.com/taskcluster/taskcluster-host-secrets/pull/19 which I can do now.

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

Attachment: Bug 1358231: use a newer taskcluster-worker with hostcredentials;

This new taskcluster-worker also includes a completely rewritten config format.

Review commit: https://reviewboard.mozilla.org/r/132496/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/132496/

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

Worth noting that tc-worker 0.1.0 isn't released yet, so this can't get merged until that's done :)

Comment 4

[Dustin J. Mitchell [:dustin] (he/him)]

Attachment: Bug 1358231: upgrade host-secrets to 1.1.2 to get correct clientId;

Review commit: https://reviewboard.mozilla.org/r/132498/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/132498/

Comment 5

[Rob Thijssen [:grenade (EET/UTC+0300)]]

Comment on attachment 8860550 [details]
Bug 1358231: upgrade host-secrets to 1.1.2 to get correct clientId;

https://reviewboard.mozilla.org/r/132498/#review135478

Comment 6

[Wander Lairson Costa]

Comment on attachment 8860496 [details]
Bug 1358231: use a newer taskcluster-worker with hostcredentials;

https://reviewboard.mozilla.org/r/132496/#review135518

::: modules/taskcluster_worker/templates/taskcluster-worker.yml.erb:19
(Diff revision 1)
>    engines:
>      native:
>        createUser: false
> -  logLevel:         info
>    plugins:
> -<% if @operatingsystem == 'Darwin' -%>
> +    disabled: []

Why is interactive task enabled?

Comment 7

[Dustin J. Mitchell [:dustin] (he/him)]

Comment on attachment 8860496 [details]
Bug 1358231: use a newer taskcluster-worker with hostcredentials;

https://reviewboard.mozilla.org/r/132496/#review135518

> Why is interactive task enabled?

It's not -- anything not named in the configuration is not enabled, in the new version.

Comment 8

[Dustin J. Mitchell [:dustin] (he/him)]

Landed this stuff, and the worker is starting and getting secrets and stuff!