Create a "ZuulDevOpsBot" service account to run tofu for the zuul Cloud VPS project.
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | • bd808 | T396247 Set up new project for Zuulv3+ pre-merge and non-image-build workloads | |||
| Resolved | • bd808 | T396902 Create service account user for OpenTofu automation |
Event Timeline
Comment Actions
- Created ZuulDevOpsBot Developer account using idp.wikimedia.org
- Created ZuulDevOpsBot SUL account using meta.wikimedia.org
- Added ZuulDevOpsBot Developer account as a member+reader for the zuul project via Horizon
- Created OpenStack credentials for ZuulDevOpsBot via Horizon.
- NOTE: Application credentials need to include the "Unrestricted (dangerous)" permission or things will blow up when Magnum tries to create a service account related to the cluster (T372365#10063201)
- Created ec2 credentials for S3 gateway
Comment Actions
Many of these creds will end up in the GitLab project's CI secrets. @thcipriani is getting me access to the Release-Engineering-Team's 1Password vault so I can stick a copy in there too.
Comment Actions
Credentials added to Release Engineering 1password vault as:
- ZuulDevOpsBot Developer account
- ZuulDevOpsBot SUL account
- ZuulDevOpsBot OpenStack API credentials
- ZuulDevOpsBot AWS/ec2 credentials