1594076 - Give taskcluster devs read-only access to Cloudops Azure subscriptions

Status: RESOLVED FIXED

(Cloud Services :: Operations: Taskcluster, task)

Description

[Brian Pitts]

Just like they have read-only access to the two GCP projects we run their services in, the taskcluster devs should have access to the three azure subscriptions we store their data in.

Dustin, who all do you think needs access?

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

The subset of our team that has Azure accounts is:

[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]

Comment 2

[edunham]

Azure currently has a group in it called Taskcluster. haali is on your list but was not in the team; bpitts, I, AJ, and Kendall were on the team but not in your list.

I have added Hassan to the Taskcluster group, and given the Taskcluster group "reader" permissions on the Firefox CI Production and Firefox CI Staging Azure subscriptions. I assume they already had the desired perms on the Taskcluster Dev subscription, and left that subscription unchanged.

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

OK, I can see more data now. I have to go to "subscriptions" and then "change directory" (even though there's only one directory) and then add the "Firefox CI Production" and "Firefox CI Staging" subscriptions. Note that communitytc is a storage account in the "Firefox Ci Production" subscription (names are hard!).

I'd like to get one other person to verify they can also see this, and then we can call it done.

Comment 4

[Dustin J. Mitchell [:dustin] (he/him)]

Brian can you verify you can see this too?

Comment 5

[Brian Stack [:bstack]]

Yeah, looks like I can see things. I must've been looking at the wrong thing before or something?

Comment 6

[edunham]

Thanks :bstack!