2067974 - Thunderbird Enterprise macOS shippable tasks failing on notarization step

Status: RESOLVED FIXED

(Enterprise Products :: Thunderbird, defect)

Description

[:gerard-majax]

From https://treeherder.mozilla.org/jobs?repo=enterprise-main&selectedTaskRun=dAHKM178QuOBz7qm2Vnnjw.0 on enterprise-main branches:

Traceback (most recent call last):
  File "/app/.venv/lib/python3.14/site-packages/scriptworker/client.py", line 206, in _handle_asyncio_loop
    await async_main(context)
  File "/app/signingscript/src/signingscript/script.py", line 55, in async_main
    setup_apple_notarization_credentials(context)
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
  File "/app/signingscript/src/signingscript/script.py", line 186, in setup_apple_notarization_credentials
    raise SigningScriptError("Credentials not found for scope: %s" % cert_type)
signingscript.exceptions.SigningScriptError: Credentials not found for scope: project:enterprise:releng:signing:cert:release-apple-notarization

Comment 1

[Andrew Halberstadt [:ahal]]

It's because the task is still using enterprise-t-signing and we don't have anyway to do "staging" notarization, so the credentials aren't configured in this context:
https://github.com/mozilla-releng/scriptworker-scripts/blob/226bda515669c1995878ed2197651512527a980a/signingscript/docker.d/apple_notarization_creds.yml#L14

(on this pool ENV != "prod")

Comment 2

[BMO Github Automation]

Attachment: [mozilla/enterprise-firefox] Bug 2067974 - Set 'release-branches' for enterprise-thunderbird as well (#1384)

Comment 3

[:gerard-majax]

Attachment: Bug 2067974 - Provide correct branch mapping for releases of Thunderbird Enterprise r?#thunderbird-enterprise-reviewers!

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/comm-central/rev/eacbfee4dc2a
Provide correct branch mapping for releases of Thunderbird Enterprise r=ahal,coreycb