1369714 - Copy github.com/ochameau/ff-dt scopes to github.com/devtools-html/devtools

Status: RESOLVED FIXED

(Taskcluster :: Operations and Service Requests, task)

Description

[Alexandre Poirot [:ochameau]]

github.com/ochameau/ff-dt is the work in progress, only used internaly to start settings things up.
github.com/devtools-html/devtools is going to be the final production repo.

I think we now have a pretty good setup on github.com/ochameau/ff-dt and I went through most of the scopes we would need for devtools.
So I think it is a good time to start thinking about setting up the final production repo. I would like to plan ahead and start having all the right scopes.

Looking at current scopes for ochameau/ff-dt, here is what I think we should set for devtools-html/devtools:

repo:github.com/devtools-html/devtools:branch:*
    github:create-comment:devtools-html/devtools
    github:create-status:devtools-html/devtools
    index:insert-task:project.devtools.*
    queue:create-task:aws-provisioner-v1/win2012r2
    queue:route:index.project.devtools.*
https://tools.taskcluster.net/auth/roles/#repo:github.com%252fochameau%252fff-dt:*

repo:github.com/devtools-html/devtools:branch:master
    secrets:get:repo:github.com/devtools-html/devtools:branch:master
    assume:repo:github.com/devtools-html/devtools:branch:master
    github:create-comment:devtools-html/devtools
    github:create-status:devtools-html/devtools
    index:insert-task:project.devtools.*
    queue:create-task:aws-provisioner-v1/github-worker
    queue:create-task:aws-provisioner-v1/win2012r2
    queue:route:index.project.devtools.*
https://tools.taskcluster.net/auth/roles/#repo:github.com%252fochameau%252fff-dt:branch:master

Could you please also allow my ldap to modify the new secrets?

And [e-mail] should also be allowed to modify the secrets as he will be co-owning this new repo. I don't know if some other scopes I have would be useful for him, but do not hesitate to give him what I already have.
https://tools.taskcluster.net/auth/roles/#mozilla-user:[e-mail]

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

https://tools.taskcluster.net/auth/roles/#repo:github.com%252fdevtools-html%252fdevtools:branch:master
https://tools.taskcluster.net/auth/roles/#repo:github.com%252fdevtools-html%252fdevtools:*

(note on the latter, I used :* instead of :branch:*, to be parallel to your repo..)

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

https://tools.taskcluster.net/auth/roles/#mozilla-user:[e-mail]
https://tools.taskcluster.net/auth/roles/#mozilla-user:[e-mail]

I think that's everything - let me know what I missed!

Comment 3

[Alexandre Poirot [:ochameau]]

I see:
queue:create-task:aws-provisioner-v1/github-worker
Missing from:
https://tools.taskcluster.net/auth/roles/#repo:github.com%252fdevtools-html%252fdevtools:*
(Unless that is an implicit scope given to github tasks?)

Could you also give jdescottes "secrets:set:repo:github.com/ochameau/ff-dt:*"
https://tools.taskcluster.net/auth/roles/#mozilla-user:[e-mail]
I want him to be able to manage my repo's secret as we are both working on it.

Thanks Dustin for all your help!

Comment 4

[Dustin J. Mitchell [:dustin] (he/him)]

Yes, the github-worker scope is inherited from role `repo:github.com/*`

Re: jdescottes, done