1411643 - provide sufficient scopes to treeherder sheriffs to manually trigger nightlies

Status: RESOLVED FIXED

(Infrastructure & Operations :: Infrastructure: LDAP, task)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

The softvision sheriffs need permissions to manually request nightlies (e.g. if there was an issue with the previous ones).

For the list of people see bug 1406086.

From IRC:
[17:16:57]	jonasfj: Aryx: to trigger a hook you need: hooks:trigger-hook:<hookGroupId>/<hookId>
[17:17:11]	jonasfj: See https://docs.taskcluster.net/reference/core/taskcluster-hooks/references/api#triggerHook
[17:18:05]	jonasfj: For nightly I bet you'll need to be in releng LDAP group to get those scopes form the assume:project:releng role

Comment 1

[Justin Dow [:jabba]]

:catlee, are you the correct person to ack this request? I believe it's asking for the list of softvision contractors in bug 1406086 to be added to cn=releng,ou=groups,dc=mozilla

Comment 2

[Chris AtLee [:catlee]]

Yes, the sheriffs should have access to request nightlies, but they should not be in the releng LDAP group.

I think the L3 ldap group is the right place to do this. coop, greg, what do you think?

Comment 3

[Greg Arndt [:garndt]]

It appears that this group might be the most appropriate because they will need to have l3 commit at some point I would imagine.

Comment 4

[Justin Dow [:jabba]]

Ok, I'm not sure the current process to grant scm_level_3, but it's not generally something that I do. I think https://www.mozilla.org/en-US/about/governance/policies/commit/ is the procedure.

Comment 5

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

The meta bug for SoftVision level 3 access is bug 1408873.

Comment 6

[Chris Cooper [:coop] (he/him)]

(In reply to Chris AtLee [:catlee] from comment #2)
> Yes, the sheriffs should have access to request nightlies, but they should
> not be in the releng LDAP group.
> 
> I think the L3 ldap group is the right place to do this. coop, greg, what do
> you think?

I'm fine with requiring L3 for this. Only one SV sheriff has L3 access so far, so functionally it won't matter too much in the short term.

Comment 7

[Justin Dow [:jabba]]

I found this bug in triage. Is there anything still needed here?

Comment 8

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

This is fixed (sheriffs got level 3 commit access).