1437464 - Update generic-worker to support taskcluster-secret-backed secret config

Status: RESOLVED FIXED

(Taskcluster :: Workers, enhancement)

Description

[Pete Moore [:pmoore][:pete]]

This is for implementing bug 1246620 in generic-worker.

Comment 1

[John Ford [:jhford] CET/CEST Berlin Time]

I am pretty sure this is a dupe of 1375156, but please re-open if not.

Comment 2

[Pete Moore [:pmoore][:pete]]

I'm going to deduplicate, just because this bug is about a generic worker implementation of bug 1246620, which is a slightly more sophisticated proposition than I'm implementing in bug 1375156.

My plan is that bug 1375156 is a simple implementation where secret content from worker type definitions are simply relocated directly into taskcluster secrets named after the worker type.

In contrast, this bug, which would still be nice to implement at some later point, allows properties inside the worker type definition userData sections to be derived from taskcluster secrets, by referring to secret keys inside the blobs. I choose to tackle the simpler implementation of bug 1375156 first, as this is currently blocking other outstanding work, and we have other pressing issues we need to address with higher priority. But I would still love it to be implemented at some point.

I'll update bug 1375156 to be more explicit about its scope.

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

I think this is done, and also supported by worker-runner!