1834579 - SSH Access for rel eng staging project for debugging

Status: RESOLVED FIXED

(Release Engineering :: General, task)

Description

[Rahul Sainani [:rsainani]]

Client ID mozilla-auth0/ad|Mozilla-LDAP|rsainani does not have sufficient scopes and is missing the following scopes:

{
  "AllOf": [
    "queue:get-artifact:mobile/android-sdk/*",
    "queue:scheduler-id:mobile-level-1",
    {
      "AnyOf": [
        "queue:create-task:highest:mobile-1/b-linux-large-gcp",
        "queue:create-task:very-high:mobile-1/b-linux-large-gcp",
        "queue:create-task:high:mobile-1/b-linux-large-gcp",
        "queue:create-task:medium:mobile-1/b-linux-large-gcp",
        "queue:create-task:low:mobile-1/b-linux-large-gcp"
      ]
    }
  ]
}

This request requires the client to satisfy the following scope expression:

{
  "AllOf": [
    "queue:get-artifact:mobile/android-sdk/*",
    "queue:create-task:project:none",
    "queue:scheduler-id:mobile-level-1",
    {
      "AnyOf": [
        "queue:create-task:highest:mobile-1/b-linux-large-gcp",
        "queue:create-task:very-high:mobile-1/b-linux-large-gcp",
        "queue:create-task:high:mobile-1/b-linux-large-gcp",
        "queue:create-task:medium:mobile-1/b-linux-large-gcp",
        "queue:create-task:low:mobile-1/b-linux-large-gcp"
      ]
    }
  ]
}

This will duplicate the task and create it under a different taskId.

The new task will be altered to:

Set task.payload.features.interactive = true

Strip task.payload.caches to avoid poisoning

Ensures task.payload.maxRunTime is minimum of 60 minutes

Strip task.routes to avoid side-effects

Set the environment variable TASKCLUSTER_INTERACTIVE=true

Note: this may not work with all tasks. You may not have the scopes required to create the task.

Comment 1

[Julien Cristau [:jcristau]]

What is it that you're trying to do?

Comment 2

[Rahul Sainani [:rsainani]]

Working on Bug 1807350 to generate baseline profiles. This requires an emulator, which cannot be run in hardware accelerated mode on the CI. Unfortunately, there are some issues we are facing trying to disable hardware acceleration on the emulator on the CI. Things work on our machines but the turn around time to debug the issue on CI is quite long, check this task. So the idea was to debug on the machine for quicker iterations.

Comment 3

[Andrew Halberstadt [:ahal]]

Looks like these scopes are needed to create an interactive task for some reason? I'm not really sure why.. but they seem harmless to grant. I chatted with jonalmeida briefly, and I'm going to grant these scopes to the mobile_eng_ops LDAP group, and then we can file a bug to get rsainani added there (if he's not already).

Comment 4

[Andrew Halberstadt [:ahal]]

Attachment: Bug 1834579 - Grant 'mobile_eng_ops' access to mobile interactive tasks, r?#releng-reviewers!

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/ci/ci-configuration/rev/20afaf88e0f3
Grant 'mobile_eng_ops' access to mobile interactive tasks, r=releng-reviewers,gbrown