1716625 - Scopes to RDP into gecko-t/win10-64-azure-* Windows instances

Status: RESOLVED FIXED

(Release Engineering :: Firefox-CI Administration, task)

Description

[Michelle Goossens [:masterwayz]]

Hi,

For new images that I am currently and in the future will create, it would be useful that I can RDP (as an user and as an admin) into gecko-t/win10-64-azure-* instances. This is what my current scopes in terms of creating/deleting/editing workers are limited to as well.

For example right now I need to troubleshoot a worker I made, and papertrail doesn't give me the information I need, so being able to RDP into it would be very useful.

My client ID: mozilla-auth0/ad|Mozilla-LDAP|michelle2

Comment 1

[Aki Sasaki (not active)]

We can probably isolate the scopes needed by attempting to RDP and finding the error message.
Then we need a patch like https://hg.mozilla.org/ci/ci-configuration/rev/4b201992e613825eb459e1737f8907b2e4cbe8e0 to grant the scopes.

Comment 2

[Joel Maher ( :jmaher ) (UTC -8)]

I thought we would need to add in generic-worker:allow-rdp:gecko-t/t-win* to the grant section

Comment 3

[Michelle Goossens [:masterwayz]]

It looks like I would need:
generic-worker:allow-rdp:gecko-t/win10-64-azure-* and if possible generic-worker:os-group:gecko-t/win10-64-azure-*/Administrators? Would that be the correct way of using the *?

Comment 4

[Joel Maher ( :jmaher ) (UTC -8)]

Attachment: Bug 1716625 - add win10 rdp access for :masterwayz. r=#releng-reviewers

Comment 5

[Aki Sasaki (not active)]

(In reply to Michelle Goossens from comment #3)

It looks like I would need:
generic-worker:allow-rdp:gecko-t/win10-64-azure-* and if possible generic-worker:os-group:gecko-t/win10-64-azure-*/Administrators? Would that be the correct way of using the *?

The * needs to be at the end, so that would be generic-worker:os-group:gecko-t/win10-64-azure-* most likely.

Comment 6

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/ci/ci-configuration/rev/e2de87f860b7
add win10 rdp access for :masterwayz. r=releng-reviewers,aki

Comment 7

[Michelle Goossens [:masterwayz]]

The first patch works. So now I can get a rdpinfo artifact.