Adding perf default service account to chromium-swarm view tasks and bots |
||
Issue descriptionPerf doesn't currently specify a service account when triggering jobs on chromium-swarm so I am assuming it defaults to a public one. We need to be able to query chromium-swarm to view tasks and bots but we are failing without permissions. See log here: https://logs.chromium.org/v/?s=chrome%2Fbb%2Fchromium.perf.fyi%2FMac_10.13_Laptop_High_End%2F643%2F%2B%2Frecipes%2Fsteps%2Ftest_pre_run%2F0%2Fsteps%2Fs__trigger__net_perftests_on_ATI_GPU_on_Mac%2F0%2Fstdout I am curious what this default is and can it be added to the group that can query to view tasks and bots in swarming.
,
May 4 2018
The default on Buildbot is "use IP whitelisting". I've added "bot:whitelisted-ip" identity to 'chromium-swarm-view-all-bots' and 'chromium-swarm-view-all-tasks' groups (and cleaned them up a bit). It should allow Buildbot bots to list swarming bots and tasks. I think its fine, because we already allowed any account to see everything (whitelisted bots just don't count as "an account", they don't have an email). |
||
►
Sign in to add a comment |
||
Comment 1 by vadimsh@chromium.org
, May 3 2018