New issue
Advanced search Search tips

Issue 756218 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
Closed: Sep 2017
Cc:
Components:
EstimatedDays: 3
NextAction: ----
OS: ----
Pri: 3
Type: Bug

Blocking:
issue 712444



Sign in to add a comment

Make Kitchen use "system" LUCI service account for Logdog

Project Member Reported by vadimsh@chromium.org, Aug 16 2017

Issue description

This will allow us to stop deploying luci-logdog-publisher service account keys to all Swarming bots.
 
Project Member

Comment 1 by bugdroid1@chromium.org, Aug 23 2017

The following revision refers to this bug:
  https://chrome-internal.googlesource.com/infradata/config/+/309d1b38ec90e588aed656c110ad6f97da8f736a

commit 309d1b38ec90e588aed656c110ad6f97da8f736a
Author: Vadim Shtayura <vadimsh@chromium.org>
Date: Wed Aug 23 22:21:05 2017

Comment 2 by efoo@chromium.org, Sep 8 2017

Owner: d...@chromium.org
Status: Assigned (was: Available)
Dan, was this completed as part of the BigQuery work? Can you update the bug? Assigning to Dan to update. 

Comment 3 by d...@chromium.org, Sep 8 2017

Status: Fixed (was: Assigned)
Yep!

Comment 4 by no...@chromium.org, Sep 8 2017

luci-logdog-publisher service account key seems to be still deployed to swarming? https://chrome-internal.googlesource.com/infra/puppet/+/master/puppetm/opt/puppet/conf/nodes.yaml#504

Comment 5 by d...@chromium.org, Sep 8 2017

Yeah I didn't un-deploy any credentials.

Comment 6 by no...@chromium.org, Sep 9 2017

Status: Assigned (was: Fixed)
let's re-open this bug so we don't forget to undeploy them

Comment 7 by d...@chromium.org, Sep 9 2017

Owner: ----
Status: Available (was: Assigned)

Comment 8 by efoo@chromium.org, Sep 9 2017

Labels: LUCI-M3-S7 REQBY-LUCI-M6-Support LUCI-M3-ClosedBeta

Comment 9 by efoo@chromium.org, Sep 9 2017

Dan, are you going to un-deploy the credentials or someone else? 
I wasn't planning on it. It's not urgent, is it?

Comment 11 by d...@chromium.org, Sep 9 2017

Looking a little deeper into it, the config linked in #4 doesn't seem trivial to modify to exclude *just* Swarming bots (see comment on linked line). ATM I'm tempted to just leave the creds there and remove them later with a bot-cleaning sweep. WDYT?

The important thing here is done - LogDog uses the auth context account.
Owner: d...@chromium.org
Status: Fixed (was: Available)
I think this is done. Getting rid of luci-logdog-publisher account is blocked on moving off buildbot (where it is also used), so I consider it outside the scope of this task.

Comment 13 by efoo@chromium.org, Nov 8 2017

Labels: -LUCI-M3-ClosedBeta -REQBY-LUCI-M6-Support LUCI-M3-Beta REQBY-LUCI-M4d-LinuxComplete

Comment 14 by efoo@chromium.org, Jan 31 2018

Labels: LUCI-Beta

Comment 15 by efoo@chromium.org, Jan 31 2018

Labels: -LUCI-M3-Beta

Comment 16 by efoo@chromium.org, Feb 15 2018

Labels: -REQBY-LUCI-M4d-LinuxComplete REQBY-LUCI-LinuxComplete

Sign in to add a comment