v16.0.0

CHANGELOG.md

@@ -3,6 +3,23 @@
 <!-- `yarn release` will insert the existing changelog snippets here: -->
 <!-- NEXT RELEASE HERE -->
 
+## v16.0.0
+
+[MAJOR] ([bug 1552970](http://bugzil.la/1552970)) The `auth.gcpCredentials` method no longer modifies the *granting* service account.
+Instead, that service account must be configured with the "Service Account Token Creator" role prior to deployment of Taskcluster.
+The format of configuration for these credentials has changed as well, now taking `GCP_CREDENTIALS_ALLOWED_PROJECTS`.
+See the deployment documentation for more information.
+
+[MAJOR] ([bug 1570723](http://bugzil.la/1570723)) The deployment configuration value `ui.ui_login_strategy_names` is now required.
+It should be a space-separated list of the names of the strategies in `web_server.ui_login_strategies`.
+
+[minor] ([#1140](https://github.com/taskcluster/taskcluster/issues/1140)) Add Chain of Trust documentation for taskcluster worker implementations and maintenance.
+
+[minor] ([#1062](https://github.com/taskcluster/taskcluster/issues/1062)) The taskcluster cli `rerun` action now takes a `--force` option. It will refuse to rerun non-exception, non-failed tasks without `--force`.
+
+([#1108](https://github.com/taskcluster/taskcluster/issues/1108)) The development process has been improved to use kubectl directly instead of helm.
+Helm is still used to render templates because we need to support it.
+
 ## v15.0.0
 
 [MAJOR] The web-server application no longer generates a JWT when logging in. It uses a sessions to keep track of users.

clients/client-go/README.md

@@ -1,43 +1,43 @@
 # Taskcluster Client Go
 
-[![GoDoc](https://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15?status.svg)](https://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15)
+[![GoDoc](https://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16?status.svg)](https://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16)
 [![Coverage Status](https://coveralls.io/repos/taskcluster/taskcluster/clients/client-go/badge.svg?branch=master&service=github)](https://coveralls.io/github/taskcluster/taskcluster/clients/client-go?branch=master)
 [![License](https://img.shields.io/badge/license-MPL%202.0-orange.svg)](http://mozilla.org/MPL/2.0)
 
 A go (golang) port of taskcluster-client.
 
-Complete godoc documentation [here](https://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15).
+Complete godoc documentation [here](https://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16).
 
 This library provides the following packages to interface with Taskcluster:
 
 ### HTTP APIs
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcauth
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcawsprovisioner
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcec2manager
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcgithub
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tchooks
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcindex
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tclogin
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcnotify
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcpurgecache
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcqueue
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcsecrets
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcauth
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcawsprovisioner
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcec2manager
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcgithub
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tchooks
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcindex
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tclogin
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcnotify
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcpurgecache
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcqueue
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcsecrets
 
 ### AMQP APIs
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcauthevents
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcawsprovisionerevents
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcgithubevents
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcpurgecacheevents
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcqueueevents
-* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tctreeherderevents
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcauthevents
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcawsprovisionerevents
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcgithubevents
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcpurgecacheevents
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcqueueevents
+* http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tctreeherderevents
 
 ## Example programs
 
 To get you started quickly, some example programs are included that use both the HTTP APIs and the AMQP APIs:
 
-* This [HTTP example program](http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcauth#example-package--Scopes) demonstrates the use of the [tcauth](http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcauth) package to query the expiry and expanded scopes of a given clientId.
-* This [HTTP example program](http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcauth#example-package--UpdateClient) demonstrates the use of the [tcauth](http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcauth) package to update an existing clientId with a new description and expiry.
-* The [AMQP example program](http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcqueueevents#example-package--TaskclusterSniffer) demonstrates the use of the [tcqueueevents](http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v15/tcqueueevents) package to listen in on Taskcluster tasks being defined and executed.
+* This [HTTP example program](http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcauth#example-package--Scopes) demonstrates the use of the [tcauth](http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcauth) package to query the expiry and expanded scopes of a given clientId.
+* This [HTTP example program](http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcauth#example-package--UpdateClient) demonstrates the use of the [tcauth](http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcauth) package to update an existing clientId with a new description and expiry.
+* The [AMQP example program](http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcqueueevents#example-package--TaskclusterSniffer) demonstrates the use of the [tcqueueevents](http://godoc.org/github.com/taskcluster/taskcluster/clients/client-go/v16/tcqueueevents) package to listen in on Taskcluster tasks being defined and executed.
 
 ## Calling API End-Points
 
@@ -55,8 +55,8 @@ import (
 	"time"
 
 	"github.com/taskcluster/slugid-go/slugid"
-	tcclient "github.com/taskcluster/taskcluster/clients/client-go/v15"
-	"github.com/taskcluster/taskcluster/clients/client-go/v15/tcqueue"
+	tcclient "github.com/taskcluster/taskcluster/clients/client-go/v16"
+	"github.com/taskcluster/taskcluster/clients/client-go/v16/tcqueue"
 )
 
 // *********************************************************
@@ -526,8 +526,8 @@ import (
 	"strconv"
 	"time"
 
-	tcclient "github.com/taskcluster/taskcluster/clients/client-go/v15"
-	"github.com/taskcluster/taskcluster/clients/client-go/v15/tcqueue"
+	tcclient "github.com/taskcluster/taskcluster/clients/client-go/v16"
+	"github.com/taskcluster/taskcluster/clients/client-go/v16/tcqueue"
 )
 
 const (

clients/client-go/codegenerator/model/api.go

@@ -122,7 +122,7 @@ import (
 	"errors"
 	"net/url"
 	"time"
-	tcclient "github.com/taskcluster/taskcluster/clients/client-go/v15"
+	tcclient "github.com/taskcluster/taskcluster/clients/client-go/v16"
 )
 
 type ` + api.Name() + ` tcclient.Client

clients/client-go/codegenerator/model/exchange.go

@@ -157,7 +157,7 @@ func (exchange *Exchange) generateAPICode(exchangeName string) string {
 import (
 	"reflect"
 	"strings"
-	tcclient "github.com/taskcluster/taskcluster/clients/client-go/v15"
+	tcclient "github.com/taskcluster/taskcluster/clients/client-go/v16"
 )
 
 `

clients/client-go/codegenerator/model/generatemodel.go

@@ -12,7 +12,7 @@ import (
 
 	docopt "github.com/docopt/docopt-go"
 	"github.com/taskcluster/jsonschema2go"
-	"github.com/taskcluster/taskcluster/clients/client-go/v15/codegenerator/model"
+	"github.com/taskcluster/taskcluster/clients/client-go/v16/codegenerator/model"
 )
 
 var (

clients/client-go/codegenerator/model/model.go

@@ -159,7 +159,7 @@ func FormatSourceAndSave(sourceFile string, sourceCode []byte) {
 	// imports inscrutably uses the old tc-client path, so fix that up.  Note
 	// that this must be the full path to allow `yarn release` to update it
 	// correctly.
-	formattedContent = regexp.MustCompile(`github.com/taskcluster/taskcluster-client-go`).ReplaceAll(formattedContent, []byte(`github.com/taskcluster/taskcluster/clients/client-go/v15`))
+	formattedContent = regexp.MustCompile(`github.com/taskcluster/taskcluster-client-go`).ReplaceAll(formattedContent, []byte(`github.com/taskcluster/taskcluster/clients/client-go/v16`))
 
 	// remove links based on the schema server
 	formattedContent = regexp.MustCompile(`(?:[ \t]*//\n)?[ \t]*// See http://127.0.0.1:.*\n`).ReplaceAll(formattedContent, []byte(""))

clients/client-go/creds_test.go

@@ -7,8 +7,8 @@ import (
 	"testing"
 	"time"
 
-	tcclient "github.com/taskcluster/taskcluster/clients/client-go/v15"
-	"github.com/taskcluster/taskcluster/clients/client-go/v15/tcauth"
+	tcclient "github.com/taskcluster/taskcluster/clients/client-go/v16"
+	"github.com/taskcluster/taskcluster/clients/client-go/v16/tcauth"
 )
 
 func ExampleCredentials_CreateTemporaryCredentials() {

clients/client-go/go.mod

@@ -1,4 +1,4 @@
-module github.com/taskcluster/taskcluster/clients/client-go/v15
+module github.com/taskcluster/taskcluster/clients/client-go/v16
 
 go 1.12
 

clients/client-go/integrationtest/integration_test.go

@@ -7,9 +7,9 @@ import (
 
 	"github.com/taskcluster/slugid-go/slugid"
 	"github.com/taskcluster/taskcluster-base-go/jsontest"
-	tcclient "github.com/taskcluster/taskcluster/clients/client-go/v15"
-	"github.com/taskcluster/taskcluster/clients/client-go/v15/tcindex"
-	"github.com/taskcluster/taskcluster/clients/client-go/v15/tcqueue"
+	tcclient "github.com/taskcluster/taskcluster/clients/client-go/v16"
+	"github.com/taskcluster/taskcluster/clients/client-go/v16/tcindex"
+	"github.com/taskcluster/taskcluster/clients/client-go/v16/tcqueue"
 )
 
 // This is a silly test that looks for the latest mozilla-inbound linux64 debug