1601598 - Please add smoketest roles to stage and firefox-ci deployments

Status: RESOLVED DUPLICATE of bug 1588083

(Release Engineering :: Firefox-CI Administration, enhancement)

Description

[Dustin J. Mitchell [:dustin] (he/him)]

https://github.com/mozilla/community-tc-config/blob/09f33e1d6dd0bf18950d537776598850a51e4890/config/projects.yml#L206-L223

    - grant:
        - auth:create-client:project/taskcluster/smoketest/*
        - auth:create-role:project:taskcluster:smoketest:*
        - auth:delete-client:project/taskcluster/smoketest/*
        - auth:delete-role:project:taskcluster:smoketest:*
        - auth:reset-access-token:project/taskcluster/smoketest/*
        - auth:update-client:project/taskcluster/smoketest/*
        - auth:update-role:project:taskcluster:smoketest:*
        - project:taskcluster:smoketest:*
        - purge-cache:built-in/succeed:smoketest-cache
        - queue:create-task:highest:built-in/*
        - queue:create-task:highest:built-in/fail
        - queue:create-task:highest:built-in/succeed
        - queue:route:index.project.taskcluster.smoketest.*
        - queue:scheduler-id:-
        - secrets:get:project/taskcluster/smoketest/*
        - secrets:set:project/taskcluster/smoketest/*
      to: project:taskcluster:smoketests

and that role is then granted to the people who we would like to be able to run smoketests.

Note that this does create some roles and clients. We have

  externallyManaged:
    # smoketests create these resources, and also cleans them up, so leave
    # them alone here...
    - "Client=project/taskcluster/smoketest/.*"
    - "Role=project:taskcluster:smoketest:.*"

so that tc-admin diff doesn't complain about them, but just letting ci-admin delete them is fine, too.