658673 - Please grant r/w repo access to the new relengrw user

Status: RESOLVED FIXED

(mozilla.org :: Repository Account Requests, task)

Description

[Chris Cooper [:coop] (he/him)]

Attachment: Public key for new relengrw user

As part of bug 517304, we're creating a new user (and corresponding ssh keys) that will perform all the commits to mozilla repos on behalf on the build system (release tagging, etc). The key will live on a few dedicated slaves (instead of the entire slave farm) and will have different login info.

This new user, relengrw, will need the same level of access to all mozilla repos that is currently enjoyed by the cltbld user. Specifically, I think this means r/w access to:

* mozilla-central (and all descendants)
* main cvs repo
* mofo cvs repo

Once access for this new user is established, we can scale back access for the cltbld user to read-only. NOTE: we'll file a separate bug for that once we're ready for it. We'd like both to be active simultaneous at the start to make sure we're not relying on cltbld access somewhere unknowingly.

Comment 1

[Marcia Knous [:marcia]]

Over to server-ops to create the account.

Comment 2

[Nick Thomas [:nthomas] (UTC+12)]

IIRC cltbld doesn't have write access to hg, but ffxbld does. Please duplicate access bits from ffxbld.

Comment 3

[Chris Cooper [:coop] (he/him)]

(In reply to comment #2)
> IIRC cltbld doesn't have write access to hg, but ffxbld does. Please
> duplicate access bits from ffxbld.

Yes, my mistake. Please use ffxbld as the template user here.

Comment 4

[Dumitru Gherman [:dumitru]]

I created a new "relengrw" user with the same ldap permissions as "ffxbld" , and also granted CVS access.
Not sure what else do you guys need for it (like the ldap password maybe?), please advise or else close the bug.
Thanks.

Comment 5

[Nick Thomas [:nthomas] (UTC+12)]

Chris, do you have a public key to put into ldap ?

Comment 6

[Chris Cooper [:coop] (he/him)]

(In reply to comment #4)
> I created a new "relengrw" user with the same ldap permissions as "ffxbld" ,
> and also granted CVS access.
> Not sure what else do you guys need for it (like the ldap password maybe?),
> please advise or else close the bug.

Does ffxbld have an LDAP entry? We only use cltbld for logins and we(releng) manage that password so it would surprise me.

(In reply to comment #5)
> Chris, do you have a public key to put into ldap ?

If ffxbld *does* have an LDAP entry, public key for relengrw is in attachment 534120 [details].

Comment 7

[Dumitru Gherman [:dumitru]]

Yes, "ffxbld" has an LDAP entry.
For "relengrw" I added the public key attached to this bug.

Comment 8

[Chris Cooper [:coop] (he/him)]

OK, then I think we're done here, thanks.