1507557 - Please move the "gecko-cinnabar-mirror" Hook and Secret under a dedicated project prefix

Status: VERIFIED FIXED

(Taskcluster :: Services, defect)

Description

[Jan Keromnes [:janx]]

We would like to automate the synchronization of the https://github.com/mozilla/gecko mirror (hg→git-cinnabar, see bug 1459200) using a Taskcluster Hook that regularly pulls from hg.mozilla.org and pushes to GitHub.

As a proof of concept, I've created the following:

1. Secret: https://tools.taskcluster.net/secrets/garbage%2Fjkeromnes%2Fgecko-cinnabar-mirror (contains bogus Git and GitHub credentials)

2. Hook: https://tools.taskcluster.net/hooks/garbage/gecko-cinnabar-mirror (pulls from hg.m.o and pushes to GitHub every 6 hours)

Since it works as expected, we'd like to move forward by moving both Secret and Hook under a dedicated project prefix, for example like so:

1'. Secret: garbage/jkeromnes/gecko-cinnabar-mirror → project/gh-mirrors/gecko-cinnabar-mirror

2'. Hook: garbage/gecko-cinnabar-mirror → gh-mirrors/gecko-cinnabar-mirror

This will allow adding real credentials to the Secret, thus confirming that the automatic syncing of a (private fork of) https://github.com/mozilla/gecko can work.

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

https://tools.taskcluster.net/auth/roles/mozillians-group%3Agh-mirrors-admins should do the trick.  It can take a while for Mozillians groups to propagate.  You'll know it's active when you see "assume:mozillians-group:gh-mirrors-admins" in https://tools.taskcluster.net/credentials

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

I see 
    'mozilliansorg_gh-mirrors-admins',
in your Auth0 profile, so I think this is working!

Comment 3

[Jan Keromnes [:janx]]

Confirmed! I was able to re-create the hook [0] and the secret. [1]

Thanks a lot for your help!

[0] Hook: https://tools.taskcluster.net/hooks/project-gh-mirrors/gecko-cinnabar-mirror
[1] Secret: https://tools.taskcluster.net/secrets/project%2Fgh-mirrors%2Fgecko-cinnabar-mirror