1701359 - Create staging scopes and workflow for EngWF Sentry release task

Status: RESOLVED FIXED

(Release Engineering :: General, task)

Description

[Mitchell Hentges [:mhentges] 🦀]

As discussed with Aki over Zoom today:

I'd like to have a task that informs Sentry of each revision in mozilla-central as they're pushed. Unfortunately, my implementation is failing, and it's unclear what the fix is without further debugging.

It would be helpful to have:

• Multiple levels of the secret for this task: at least one for try, and one for production (mozilla-central).
• Access for my team (myself, [e-mail], [e-mail]) to get and set these secrets.
• Scopes for try workers to see the level 1 secret, Scope for mozilla-central workers to see the level 3 secret.

I think that will provide the flexibility that will help me narrow down why my task is failing :)

Comment 1

[Aki Sasaki (not active)]

Attachment: Bug 1701359 - grant engworkflow team access to engwf secrets r=#releng-reviewers

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/ci/ci-configuration/rev/5c23f21897d9
grant engworkflow team access to engwf secrets r=releng-reviewers,mtabara

Comment 3

[Aki Sasaki (not active)]

Ok, Mitch, you should be set with scopes to set and get secrets, and test with the level 1 secret on Try.

Comment 4

[Mitchell Hentges [:mhentges] 🦀]

Thanks Aki, that's great! 💃🐧