1619415 - Please create an updatebot hg account

Status: RESOLVED FIXED

(Infrastructure & Operations :: Infrastructure: LDAP, task)

Description

[Tom Ritter [:tjr]]

Attachment: updatebot.put

It should only have level 1 access.

This user/key will be used for sending try pushes for third party library auto-updates.

Comment 1

[Aki Sasaki (not active)]

If we want to limit what files this user can write to, we could add an hg.m.o check like https://hg.mozilla.org/hgcustom/version-control-tools/file/tip/hghooks/mozhghooks/check/merge_day.py .

Comment 2

[Justin Dow [:jabba]]

Will this account only be doing hg interactions, i.e. is the ssh key the only form of authentication that it needs, or will it also need a password and MFA?

Comment 3

[Tom Ritter [:tjr]]

No it does not need a password/mfa.

Comment 4

[Justin Dow [:jabba]]

I've created the account, added it to scm_level_1 and attached the key to it. The username is "[e-mail]" (not a routable e-mail address)