Skip to content

Add scoped log view#4

Open
lotas wants to merge 2 commits into
mainfrom
feat/taskcluster-log-reader
Open

Add scoped log view#4
lotas wants to merge 2 commits into
mainfrom
feat/taskcluster-log-reader

Conversation

@lotas
Copy link
Copy Markdown
Collaborator

@lotas lotas commented May 29, 2026

To limit even further what access tokens can do, we add a support for impersonated tokens:

gcloud auth print-access-token \
--impersonate-service-account=tc-logview-reader@moz-fx-taskcluster-prod.iam.gserviceaccount.com

which requires this service account to exist with the correct access permissions, and is configured in the webservices-infra repository

This feature depends on webservices-infra change https://github.com/mozilla/webservices-infra/pull/11197

To limit even further what access tokens can do, we add a support for
impersonated tokens:
```
gcloud auth print-access-token \
--impersonate-service-account=tc-logview-reader@moz-fx-taskcluster-prod.iam.gserviceaccount.com
```

which  requires this service account to exist with the correct access
permissions, and is configured in the webservices-infra repository
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant