Closed Bug 1915477 Opened 5 months ago Closed 5 months ago

Sheriffs - Missing scope for quarantining win-nuc workers

Categories

(Release Engineering :: Firefox-CI Administration, defect)

defect

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: CosminS, Assigned: ahal)

Details

Attachments

(1 file)

Was trying to quarantine the following worker https://firefox-ci-tc.services.mozilla.com/provisioners/releng-hardware/worker-types/win11-64-2009-hw/workers/mdc1/nuc13-090?sortBy=started&sortDirection=desc when I got the message that I don't have sufficient scopes to do that. Sign out/sign in didn't work.

Code sheriffs used to have permissions to do that as we've quarantined windows workers before for a long time, looks like something has changed or is this specific type of workers we are missing. I have checked with others and they also receive the same error.

Client ID mozilla-auth0/ad|Mozilla-LDAP|csabou does not have sufficient scopes and is missing the following scopes:
queue:quarantine-worker:releng-hardware/win11-64-2009-hw/mdc1/nuc13-090
This request requires the client to satisfy the following scope expression:
{
  "AllOf": [
    "queue:quarantine-worker:releng-hardware/win11-64-2009-hw/mdc1/nuc13-090"
  ]
}
Summary: Sheriffs - Missing scope for quarantining win workers → Sheriffs - Missing scope for quarantining win-nuc workers

Looks like it's just a new pool.

Unfortunately the pool doesn't have the trust domain in the name.. We should probably fix that. I'll grant it directly in the meantime however.

Assignee: nobody → ahal
Status: NEW → ASSIGNED
Status: ASSIGNED → RESOLVED
Closed: 5 months ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: