1895483 - set up windows watersheds for 2024 authenticode certificate renewal

Status: ASSIGNED

(Release Engineering :: Release Automation: Updates, task)

Description

[Julien Cristau [:jcristau]]

We need to set up a watershed on each channel to ensure users get a build with the change from bug 1894689 before updating to a build signed with the new authenticode cert from bug 1889299.

Comment 1

[Julien Cristau [:jcristau]]

This is now in place for nightly*:

$ curl -s https://aus-api.mozilla.org/api/v1/rules/17900 | jq .
{
  "rule_id": 17900,
  "alias": null,
  "priority": 160,
  "mapping": "Firefox-mozilla-central-nightly-20240512212637",
  "fallbackMapping": null,
  "backgroundRate": 100,
  "update_type": "minor",
  "product": "Firefox",
  "version": null,
  "channel": "nightly*",
  "buildTarget": null,
  "buildID": "<20240503220029",
  "locale": null,
  "osVersion": "Windows_NT",
  "memory": null,
  "instructionSet": null,
  "jaws": null,
  "mig64": null,
  "distribution": null,
  "distVersion": null,
  "headerArchitecture": null,
  "comment": "Bug 1895483 - nightly watershed for authenticode issuer change",
  "data_version": 3
}

Comment 2

[Julien Cristau [:jcristau]]

Bug 1889299 was backed out, so the rule referenced in comment 1 was removed for now.

Comment 3

[Julien Cristau [:jcristau]]

The certificate switch re-landed, and the watershed on nightly is back:

$ curl -s https://aus-api.mozilla.org/api/v1/rules/17902 | jq . 
{
  "rule_id": 17902,
  "alias": null,
  "priority": 160,
  "mapping": "Firefox-mozilla-central-nightly-20240527092611",
  "fallbackMapping": null,
  "backgroundRate": 100,
  "update_type": "minor",
  "product": "Firefox",
  "version": null,
  "channel": "nightly*",
  "buildTarget": null,
  "buildID": "<20240525094144",
  "locale": null,
  "osVersion": "Windows_NT",
  "memory": null,
  "instructionSet": null,
  "jaws": null,
  "mig64": null,
  "distribution": null,
  "distVersion": null,
  "headerArchitecture": null,
  "comment": "Bug 1895483 - nightly watershed for authenticode issuer change",
  "data_version": 2
}