Taskcluster

No changes

GENERAL

▶ [patch] [bug 1633582](http://bugzil.la/1633582)
Fixes an issue in the worker-manager google provider where improperly configured disk tagging caused worker creation to fail.

DEPLOYERS

▶ [minor] [bug 1619652](http://bugzil.la/1619652)
Taskcluster logs now include `traceId` and `requestId` fields on messages that have these in context.
A `requestId` is per http request and a `traceId` follows a request chain along as far as it goes so
for example a graphql request to web-server -> queue -> auth.authenticateHawk are all correlatable
as part of one trace.

As part of this change, by default in Kubernetes, requests between services are now routed directly using
Kubernetes dns service discovery. To disable this, you can set the top-level `useKubernetesDnsServiceDiscovery`
to `false` in your helm values.

▶ [patch] [bug 1637104](http://bugzil.la/1637104)
The livelog, taskcluster-proxy, and websocktunnel Docker images now use statically-linked binaries, meaning they will not fail on startup.

▶ [patch] [bug 1636189](http://bugzil.la/1636189)
The websocktunnel, livelog, and taskcluster-proxy images now have an `/app/version.json` as required by DockerFlow, and websocktunnel correctly services all three DockerFlow endpoints. In additional, all `version.json` files including that in the main `taskcluster/taskcluster` image now have a correct build URL.

WORKER-DEPLOYERS

▶ [patch] [2788](https://github.com/taskcluster/taskcluster/issues/2788)
Docker-worker releases are now included in the assets on a Taskcluster release, with a well-documented format.

▶ [patch] [2739](https://github.com/taskcluster/taskcluster/issues/2739)
Taskcluster-proxy assets, and a `taskcluster/askcluster-proxy` docker image, are now produced for every TC release.

▶ [patch] [bug 1636163](http://bugzil.la/1636163)
docker-worker docs now show on docs website

USERS

▶ [patch] [bug 1635897](http://bugzil.la/1635897)
Taskcluster-GitHub now correctly determines the sha for releases from signed tags.

OTHER

▶ Additional changes not described here: [bug 1561668](http://bugzil.la/1561668), [bug 1636165](http://bugzil.la/1636165), [#2783](https://github.com/taskcluster/taskcluster/issues/2783), [#2808](https://github.com/taskcluster/taskcluster/issues/2808).

DEPLOYERS

▶ [patch] [bug 1636292](http://bugzil.la/1636292)
The bug in 29.4.0 which caused DB migration to fail given large WorkerPool table rows has been fixed with a patch to DB version 10.

DEVELOPERS

▶ [patch] [bug 1635985](http://bugzil.la/1635985)
Docker Worker code now lives in this repository instead of taskcluster/docker-worker

GENERAL

▶ [patch] [bug 1631829](http://bugzil.la/1631829)
Fixes an issue where azure-provider wasn't properly tagging resources.

DEPLOYERS

▶ [minor] [bug 1630023](http://bugzil.la/1630023)
The worker manager's worker pools are now stored in a normal database table. This table is small, and the DB migration should complete in seconds.

DEVELOPERS

▶ [patch]
Fix missing db TypeError in purge-cache.

▶ [patch] [bug 1633897](http://bugzil.la/1633897)
Remove outdated check for taskcluster.net when sending cookies. This was used
back when the UI was hosted in heroku.

OTHER

▶ Additional change not described here: [bug 1633882](http://bugzil.la/1633882).

GENERAL

▶ [minor] [bug 1630019](http://bugzil.la/1630019)
The purge_cache service now uses normalized db tables

▶ [patch] [bug 1633582](http://bugzil.la/1633582)
The worker-manager Google provider now labels worker disks with the same set of labels as VMs.

USERS

▶ [patch] [1536](https://github.com/taskcluster/taskcluster/issues/1536)
taskcluster-client-web no longer shows the 'hawk is undefined' regression error.

DEVELOPERS

▶ [patch] [bug 1630023](http://bugzil.la/1630023)
DB version 8 introduces some utility functions that will be useful in migrating from (and downgrading to) tc-lib-entities-compatible tables.

▶ [patch]
The morgan-debug logging for web services has been removed in favor of continued support of our api logging and iprepd logging in production

OTHER

▶ Additional change not described here: [bug 1633882](http://bugzil.la/1633882).

DEPLOYERS

▶ [patch] [bug 1606006](http://bugzil.la/1606006)
Services that use ephemeral queues now use a different queue name on each connection. This avoids issues with RESOURCE-LOCKED from RabbitMQ.

USERS

▶ [minor] [bug 1629807](http://bugzil.la/1629807)
Taskcluster login now includes a state token in the url search query during the login transaction to
conform with the recommendations in rfc-261.

▶ [patch] [bug 1631099](http://bugzil.la/1631099)
Taskcluster-GitHub now retries on 401 "Bad Credentials" errors from GitHub, as suggested by [GitHub developers](https://github.community/t5/GitHub-API-Development-and/Random-401-errors-after-using-freshly-generated-installation/m-p/23531/highlight/true#M1680).

▶ [patch] [bug 1633622](http://bugzil.la/1633622)
The taskcluster-client-web package now contains the `build` directory as expected.