1579483 - "Create Interactive Task" from treeherder doesn't provide sufficient scopes for private toolchain artifacts

Status: RESOLVED FIXED

(Taskcluster :: General, defect)

Description

[Nathan Froyd [:froydnj]]

+++ This bug was initially created as a clone of Bug #1546619 +++

STR:

1. Find an Android build task on try (I used https://treeherder.mozilla.org/#/jobs?repo=try&selectedJob=265019291&revision=6547a3b1315ef0b6aca230a70fb0481a267fab7e)
2. Click menu, then "Create interactive task"
3. When the interactive task comes up, replicate build steps.

ER:

Things build, or at least build to the point of interest.

AR:

...
Downloading http://taskcluster/api/queue/v1/task/RPnUwXcWQP--jhhR9NGE9g/artifacts/project/gecko/android-ndk/android-ndk.tar.xz to fetches/a
ndroid-ndk.tar.xz
Downloading http://taskcluster/api/queue/v1/task/RPnUwXcWQP--jhhR9NGE9g/artifacts/project/gecko/android-ndk/android-ndk.tar.xz
Download failed: HTTP Error 403: Forbidden

This is kind of like bug 1546619, but I foolishly assumed that the fix there would also fix the Android case, which is not the case, because different scopes are used between tooltool downloads and downloads from task artifacts.

Comment 1

[Nathan Froyd [:froydnj]]

Attachment: Bug 1579483 - add scopes for private toolchain artifacts in interactive tasks; r=dustin

Without these scopes, we can't build Android configs from interactive
tasks, because we can't fetch the NDK and SDK from their toolchain tasks.

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/7d31ad9f9ab9
add scopes for private toolchain artifacts in interactive tasks; r=dustin

Comment 3

[Natalia Csoregi [:nataliaCs]]

https://hg.mozilla.org/mozilla-central/rev/7d31ad9f9ab9