Thus, they're not very isolated :).
There's a three potential solutions I can think of:
* do all the gsutil stuff before creating the isolate, and then stick the artifacts in the isolate
* fetch the artifacts as CIPD packages as part of the swarming task
* add the devshell wrapper tool to the tasks and assign a service account so that they can continue to fetch stuff (this is the least preferred solution)
But I'm sure there's more possibilities (I'm also a bit fuzzy on the exact details of the underlying fetcher thingy).
In particular, this will be important to fix sooner than later, because we're rolling out swarming service accounts, which will no longer give all bots blanket read/write access credentials for e.g. gsutil (which is what these tests currently rely on).
Comment 1 by nedngu...@google.com
, Nov 2 2017Owner: ----
Status: Available (was: Assigned)