Make Kitchen use "system" LUCI service account for Logdog |
|||||||||||
Issue descriptionThis will allow us to stop deploying luci-logdog-publisher service account keys to all Swarming bots.
,
Sep 8 2017
Dan, was this completed as part of the BigQuery work? Can you update the bug? Assigning to Dan to update.
,
Sep 8 2017
Yep!
,
Sep 8 2017
luci-logdog-publisher service account key seems to be still deployed to swarming? https://chrome-internal.googlesource.com/infra/puppet/+/master/puppetm/opt/puppet/conf/nodes.yaml#504
,
Sep 8 2017
Yeah I didn't un-deploy any credentials.
,
Sep 9 2017
let's re-open this bug so we don't forget to undeploy them
,
Sep 9 2017
,
Sep 9 2017
,
Sep 9 2017
Dan, are you going to un-deploy the credentials or someone else?
,
Sep 9 2017
I wasn't planning on it. It's not urgent, is it?
,
Sep 9 2017
Looking a little deeper into it, the config linked in #4 doesn't seem trivial to modify to exclude *just* Swarming bots (see comment on linked line). ATM I'm tempted to just leave the creds there and remove them later with a bot-cleaning sweep. WDYT? The important thing here is done - LogDog uses the auth context account.
,
Sep 12 2017
I think this is done. Getting rid of luci-logdog-publisher account is blocked on moving off buildbot (where it is also used), so I consider it outside the scope of this task.
,
Nov 8 2017
,
Jan 31 2018
,
Jan 31 2018
,
Feb 15 2018
|
|||||||||||
►
Sign in to add a comment |
|||||||||||
Comment 1 by bugdroid1@chromium.org
, Aug 23 2017