1536081 - enable application-services in ci-admin and ci-configuration

Status: RESOLVED FIXED

(Release Engineering :: General, enhancement)

Description

[Mihai Tabara [:mtabara]⌚️GMT]

As we have a good github & mobile story in ci-admin, we're going to look at adding the application-services there too. I'm expecting to work on this with :eoger at the early beginning of Q2.

Enabling this in ciadmin/ciconfiguration should give us more flexiblity, security and resilience around managing scopes.

Comment 1

[Mihai Tabara [:mtabara]⌚️GMT]

Attachment: Bug 1536081 - enable ciadmin support for application-services

Bug 1536081 - enable application-services in ci-admin and ci-configuration

Comment 2

[Mihai Tabara [:mtabara]⌚️GMT]

Attachment: repo:github.com/mozilla/application-services:*

Comment 3

[Mihai Tabara [:mtabara]⌚️GMT]

Attachment: repo:github.com/mozilla/application-services:release

Comment 4

[Mihai Tabara [:mtabara]⌚️GMT]

Attachment: repo:github.com/mozilla/application-services:tag:*

Comment 5

[Mihai Tabara [:mtabara]⌚️GMT]

Status update:

• I've added backingup roles above, just in case things go south when turning in ciadmin for this project
• the https://phabricator.services.mozilla.com/D35064 ready to be deployed.

We're waiting for the green-go from :eoger.

Comment 6

[Mihai Tabara [:mtabara]⌚️GMT]

Changes have been deployed:

(ci-admin) mtabara@mozspace:[]~/work/mozilla/clones/hg/ci-admin$ ci-admin apply --environment=production
Creating Role=repo:github.com/mozilla/application-services:branch:master
Updating Role=repo:github.com/mozilla/application-services:release
Deleting Role=repo:github.com/mozilla/application-services:tag:*
Creating Role=repo:github.com/mozilla/application-services:pull-request
Deleting Role=repo:github.com/mozilla/application-services:*

Comment 7

[Mihai Tabara [:mtabara]⌚️GMT]

:eoger and myself confirmed that this is working by triggering graphs:

• PR - https://tools.taskcluster.net/groups/V6lXcGGxSOqQtfBAG5G-Iw
• master - https://tools.taskcluster.net/groups/Lh_UTWn8TuWxZbUbTPNXng
• release - https://tools.taskcluster.net/groups/CDVBeOAOR9evxZL1c4BH6g

To close the loop, from now on - scopes changes should go via ciadmin, rather then editing the scopes directly. RelEng is available with escalation paths in #releaseduty-mobile and can quickly amend if needed.

Closing this for now.

Comment 8

[Mihai Tabara [:mtabara]⌚️GMT]

:eoger is amending https://github.com/mozilla/application-services/blob/master/docs/build-and-publish-pipeline.md to reflect the new way of doing scopes and mention the Slack channel where RelEng is to provide help \o/