Deploy Autograph 2.9.1 config changes to hsm stack
Categories
(Cloud Services :: Operations: Deployment Requests - DEPRECATED, task)
Tracking
(Not tracked)
People
(Reporter: u581815, Assigned: u581815)
References
(Blocks 1 open bug)
Details
Please deploy Autograph 2.9.1 to HSM stack and perform QA testing.
https://mana.mozilla.org/wiki/display/SVCOPS/Autograph#Autograph-QA
-
code changes: None. This is the same image tag 2.9.1 as deployed in bug 1528802
-
docker image: https://hub.docker.com/r/mozilla/autograph/tags/
-
circle ci jobs for that tag:
- https://circleci.com/gh/mozilla-services/autograph/1979
- https://circleci.com/gh/mozilla-services/autograph/1978
- https://circleci.com/gh/mozilla-services/autograph/1977
- https://circleci.com/gh/mozilla-services/autograph/1976
- https://circleci.com/gh/mozilla-services/autograph/1975
- https://circleci.com/gh/mozilla-services/autograph/1972
-
-
config changes:
- add stumbler key for bug 1529967
- enable the HSM-backed XPI signers for bug 1518642
- add the ext signer for bug 1530398
Deploy to stage successfully. For QA:
a. the monitor is passing and showing new signers
confirmed updated edge signers work in https://bugzilla.mozilla.org/show_bug.cgi?id=1530807#c1
:miles deployed to prod successfully. For QA:
a. the monitor is passing and checks the new signers
checked that signing an APK with the stumbler creds worked and an XPI with the lockbox addon creds worked too.
:aki confirmed that a small mar signing job succeeded
Description
•