Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci: Move global credentials to web configuration #55304

Merged
merged 1 commit into from
Oct 31, 2018

Conversation

alexcrichton
Copy link
Member

This commit moves a number of our encrypted credentials stored in
configuration files in this repository to env vars on the web UI. This
will hopefully make it easier to rotate credentials in the future as
well as quickly change them if the need arises. (quicker than landing a
PR that is).

This also updates the travis deployment process to always use the aws
command line tool which we're already installing on Linux and should
enable us to avoid all dpl gem issues as well as have greater control
over what's going where.

@alexcrichton
Copy link
Member Author

@bors: try

r? @kennytm

@rust-highfive
Copy link
Collaborator

r? @nikomatsakis

(rust_highfive has picked a reviewer for you, use r? to override)

@rust-highfive rust-highfive added the S-waiting-on-review Status: Awaiting review from the assignee but also interested parties. label Oct 24, 2018
@bors
Copy link
Contributor

bors commented Oct 24, 2018

⌛ Trying commit 52f02da with merge 7c2f022...

bors added a commit that referenced this pull request Oct 24, 2018
ci: Move global credentials to web configuration

This commit moves a number of our encrypted credentials stored in
configuration files in this repository to env vars on the web UI. This
will hopefully make it easier to rotate credentials in the future as
well as quickly change them if the need arises. (quicker than landing a
PR that is).

This also updates the travis deployment process to always use the `aws`
command line tool which we're already installing on Linux and should
enable us to avoid all `dpl` gem issues as well as have greater control
over what's going where.
.travis.yml Outdated
@@ -21,12 +36,14 @@ matrix:

- env: IMAGE=dist-x86_64-linux DEPLOY=1
if: branch = try OR branch = auto
after_success: *DEPLOY
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤔 Could we put that &DEPLOY reference into the global after_success section (which is configured to do nothing if $DEPLOY and $DEPLOY_ALT are undefined), so we don't need to add these dozen lines inside the matrix:

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sure thing, sounds reasonable to me!

@bors
Copy link
Contributor

bors commented Oct 24, 2018

☀️ Test successful - status-travis
State: approved= try=True

This commit moves a number of our encrypted credentials stored in
configuration files in this repository to env vars on the web UI. This
will hopefully make it easier to rotate credentials in the future as
well as quickly change them if the need arises. (quicker than landing a
PR that is).

This also updates the travis deployment process to always use the `aws`
command line tool which we're already installing on Linux and should
enable us to avoid all `dpl` gem issues as well as have greater control
over what's going where.
@alexcrichton
Copy link
Member Author

Ok try builds look good! Appears that files were indeed successfully uploaded

@kennytm
Copy link
Member

kennytm commented Oct 24, 2018

@bors r+

@bors
Copy link
Contributor

bors commented Oct 24, 2018

📌 Commit 3c25f80 has been approved by kennytm

@bors bors added S-waiting-on-bors Status: Waiting on bors to run and complete tests. Bors will change the label on completion. and removed S-waiting-on-review Status: Awaiting review from the assignee but also interested parties. labels Oct 24, 2018
@kennytm
Copy link
Member

kennytm commented Oct 28, 2018

@bors r-

Failed in #55433 (comment)

[01:33:26] Uploading artifact "8a21b8e099d1daf8afd39fcbd7106f4ef4fabaf4/cargo-nightly-x86_64-pc-windows-msvc.tar.gz" (0 bytes) to S3 bucket "rust-lang-ci2" as "rustc-builds/8a21b8e099d1daf8afd39fcbd7106f4ef4fabaf4/cargo-nightly-x86_64-pc-windows-msvc.tar.gz"...Access Denied

@bors bors added S-waiting-on-author Status: This is awaiting some action (such as code changes or more information) from the author. and removed S-waiting-on-bors Status: Waiting on bors to run and complete tests. Bors will change the label on completion. labels Oct 28, 2018
@alexcrichton
Copy link
Member Author

I've asked a question to see whether this way of configuration actually should work, and will reevaluate based on the answer

@alexcrichton
Copy link
Member Author

@bors: r=kennytm

Ok I think I may have messed up the keys. In any case I wouldn't recommend rolling this up

@bors
Copy link
Contributor

bors commented Oct 29, 2018

📌 Commit 3c25f80 has been approved by kennytm

@bors bors added S-waiting-on-bors Status: Waiting on bors to run and complete tests. Bors will change the label on completion. and removed S-waiting-on-author Status: This is awaiting some action (such as code changes or more information) from the author. labels Oct 29, 2018
@bors
Copy link
Contributor

bors commented Oct 30, 2018

⌛ Testing commit 3c25f80 with merge d52d9c2...

bors added a commit that referenced this pull request Oct 30, 2018
ci: Move global credentials to web configuration

This commit moves a number of our encrypted credentials stored in
configuration files in this repository to env vars on the web UI. This
will hopefully make it easier to rotate credentials in the future as
well as quickly change them if the need arises. (quicker than landing a
PR that is).

This also updates the travis deployment process to always use the `aws`
command line tool which we're already installing on Linux and should
enable us to avoid all `dpl` gem issues as well as have greater control
over what's going where.
@bors
Copy link
Contributor

bors commented Oct 30, 2018

💔 Test failed - status-appveyor

@bors bors added S-waiting-on-review Status: Awaiting review from the assignee but also interested parties. and removed S-waiting-on-bors Status: Waiting on bors to run and complete tests. Bors will change the label on completion. labels Oct 30, 2018
@alexcrichton
Copy link
Member Author

@bors: retry

3 hr time limit

@bors bors added S-waiting-on-bors Status: Waiting on bors to run and complete tests. Bors will change the label on completion. and removed S-waiting-on-review Status: Awaiting review from the assignee but also interested parties. labels Oct 30, 2018
@bors
Copy link
Contributor

bors commented Oct 31, 2018

⌛ Testing commit 3c25f80 with merge 05812fa...

bors added a commit that referenced this pull request Oct 31, 2018
ci: Move global credentials to web configuration

This commit moves a number of our encrypted credentials stored in
configuration files in this repository to env vars on the web UI. This
will hopefully make it easier to rotate credentials in the future as
well as quickly change them if the need arises. (quicker than landing a
PR that is).

This also updates the travis deployment process to always use the `aws`
command line tool which we're already installing on Linux and should
enable us to avoid all `dpl` gem issues as well as have greater control
over what's going where.
@bors
Copy link
Contributor

bors commented Oct 31, 2018

☀️ Test successful - status-appveyor, status-travis
Approved by: kennytm
Pushing 05812fa to master...

@bors bors merged commit 3c25f80 into rust-lang:master Oct 31, 2018
@alexcrichton alexcrichton deleted the update-credentials branch October 31, 2018 13:34
bors added a commit that referenced this pull request Nov 7, 2018
[beta] Fixes #46775 -- don't mutate the process's environment in Command::exec

This is a backport of the following PRs:

* #55359
* #55569
* #55304
bors added a commit that referenced this pull request Nov 8, 2018
[beta] Fixes #46775 -- don't mutate the process's environment in Command::exec

This is a backport of the following PRs:

* #55359
* #55569
* #55304
* #55661
@alexcrichton alexcrichton added the beta-accepted Accepted for backporting to the compiler in the beta channel. label Nov 8, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
beta-accepted Accepted for backporting to the compiler in the beta channel. S-waiting-on-bors Status: Waiting on bors to run and complete tests. Bors will change the label on completion.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants