Created
July 11, 2024 11:28
-
-
Save bhearsum/4b41c2fb042838ab172a58a2174a827f to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ~/tmp/2024-07-10 ❯ cat ciadmin.diff | |
| --- current | |
| +++ generated | |
| @@ -128314,51 +128314,16 @@ Role=repo:github.com/mozilla-releng/balrog:action:*: | |
| - queue:route:notify.irc-user.* | |
| - queue:scheduler-id:releng-level-3 | |
| - queue:scheduler-id:taskcluster-github | |
| - secrets:get:project/releng/level-3/* | |
| - secrets:get:project/releng/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - Role=repo:github.com/mozilla-releng/balrog:branch:*: | |
| - roleId: repo:github.com/mozilla-releng/balrog:branch:* | |
| - description: | |
| - *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| - | |
| - Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: | |
| - - docker-worker:cache:releng-level-3-* | |
| - - generic-worker:cache:releng-level-3-* | |
| - - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| - - index:insert-task:releng.cache.level-3.* | |
| - - index:insert-task:releng.v2.balrog.* | |
| - - notify:email:* | |
| - - notify:irc-channel:* | |
| - - notify:irc-user:* | |
| - - queue:cancel-task:releng-level-3/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:releng-3/* | |
| - - queue:create-task:highest:releng-t/* | |
| - - queue:rerun-task:releng-level-3/* | |
| - - queue:route:checks | |
| - - queue:route:garbage.* | |
| - - queue:route:index.garbage.* | |
| - - queue:route:index.releng.cache.level-3.* | |
| - - queue:route:index.releng.v2.balrog.* | |
| - - queue:route:notify.email.* | |
| - - queue:route:notify.irc-channel.* | |
| - - queue:route:notify.irc-user.* | |
| - - queue:scheduler-id:releng-level-3 | |
| - - queue:scheduler-id:taskcluster-github | |
| - - secrets:get:project/releng/level-3/* | |
| - - secrets:get:project/releng/level-any/* | |
| - - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - | |
| Role=repo:github.com/mozilla-releng/balrog:branch:main: | |
| roleId: repo:github.com/mozilla-releng/balrog:branch:main | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:releng-level-3-* | |
| @@ -128934,53 +128899,16 @@ Role=repo:github.com/mozilla-releng/k8s-autoscale:action:*: | |
| - queue:scheduler-id:taskcluster-github | |
| - secrets:get:project/releng/k8s-autoscale/level-3/* | |
| - secrets:get:project/releng/k8s-autoscale/level-any/* | |
| - secrets:get:project/releng/level-3/* | |
| - secrets:get:project/releng/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - Role=repo:github.com/mozilla-releng/k8s-autoscale:branch:*: | |
| - roleId: repo:github.com/mozilla-releng/k8s-autoscale:branch:* | |
| - description: | |
| - *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| - | |
| - Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: | |
| - - docker-worker:cache:releng-level-3-* | |
| - - docker-worker:cache:releng-project-k8s-autoscale-level-3-* | |
| - - generic-worker:cache:releng-level-3-* | |
| - - generic-worker:cache:releng-project-k8s-autoscale-level-3-* | |
| - - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| - - index:insert-task:releng.v2.k8s-autoscale.* | |
| - - notify:email:* | |
| - - notify:irc-channel:* | |
| - - notify:irc-user:* | |
| - - queue:cancel-task:releng-level-3/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:releng-3/* | |
| - - queue:create-task:highest:releng-t/* | |
| - - queue:rerun-task:releng-level-3/* | |
| - - queue:route:checks | |
| - - queue:route:garbage.* | |
| - - queue:route:index.garbage.* | |
| - - queue:route:index.releng.v2.k8s-autoscale.* | |
| - - queue:route:notify.email.* | |
| - - queue:route:notify.irc-channel.* | |
| - - queue:route:notify.irc-user.* | |
| - - queue:scheduler-id:releng-level-3 | |
| - - queue:scheduler-id:taskcluster-github | |
| - - secrets:get:project/releng/k8s-autoscale/level-3/* | |
| - - secrets:get:project/releng/k8s-autoscale/level-any/* | |
| - - secrets:get:project/releng/level-3/* | |
| - - secrets:get:project/releng/level-any/* | |
| - - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - | |
| Role=repo:github.com/mozilla-releng/k8s-autoscale:branch:dev: | |
| roleId: repo:github.com/mozilla-releng/k8s-autoscale:branch:dev | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:releng-level-3-* | |
| @@ -129287,48 +129215,16 @@ Role=repo:github.com/mozilla-releng/mozilla-taskgraph:action:*: | |
| - secrets:get:project/releng/taskgraph/mozilla-taskgraph/ci | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - secrets:get:project/taskgraph/level-3/* | |
| - secrets:get:project/taskgraph/level-any/* | |
| - secrets:get:project/taskgraph/mozilla-taskgraph/level-3/* | |
| - secrets:get:project/taskgraph/mozilla-taskgraph/level-any/* | |
| - Role=repo:github.com/mozilla-releng/mozilla-taskgraph:branch:*: | |
| - roleId: repo:github.com/mozilla-releng/mozilla-taskgraph:branch:* | |
| - description: | |
| - *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| - | |
| - Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: | |
| - - docker-worker:cache:taskgraph-level-3-* | |
| - - docker-worker:cache:taskgraph-project-mozilla-taskgraph-level-3-* | |
| - - generic-worker:cache:taskgraph-level-3-* | |
| - - generic-worker:cache:taskgraph-project-mozilla-taskgraph-level-3-* | |
| - - in-tree:hook-action:project-taskgraph/in-tree-action-3-* | |
| - - index:insert-task:taskgraph.v2.mozilla-taskgraph.* | |
| - - queue:cancel-task:taskgraph-level-3/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:taskgraph-3/* | |
| - - queue:create-task:highest:taskgraph-t/* | |
| - - queue:create-task:low:aws-provisioner-v1/gecko-3-decision | |
| - - queue:create-task:low:aws-provisioner-v1/gecko-3-images | |
| - - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| - - queue:rerun-task:taskgraph-level-3/* | |
| - - queue:route:checks | |
| - - queue:route:index.taskgraph.v2.mozilla-taskgraph.* | |
| - - queue:scheduler-id:taskgraph-level-3 | |
| - - secrets:get:project/releng/taskgraph/mozilla-taskgraph/ci | |
| - - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - - secrets:get:project/taskgraph/level-3/* | |
| - - secrets:get:project/taskgraph/level-any/* | |
| - - secrets:get:project/taskgraph/mozilla-taskgraph/level-3/* | |
| - - secrets:get:project/taskgraph/mozilla-taskgraph/level-any/* | |
| - | |
| Role=repo:github.com/mozilla-releng/mozilla-taskgraph:branch:main: | |
| roleId: repo:github.com/mozilla-releng/mozilla-taskgraph:branch:main | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:taskgraph-level-3-* | |
| @@ -129865,46 +129761,16 @@ Role=repo:github.com/mozilla-releng/scriptworker-scripts:action:*: | |
| - queue:route:index.scriptworker.v2.scriptworker-scripts.* | |
| - queue:scheduler-id:scriptworker-level-1 | |
| - queue:scheduler-id:scriptworker-level-3 | |
| - secrets:get:project/scriptworker/level-3/* | |
| - secrets:get:project/scriptworker/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - Role=repo:github.com/mozilla-releng/scriptworker-scripts:branch:*: | |
| - roleId: repo:github.com/mozilla-releng/scriptworker-scripts:branch:* | |
| - description: | |
| - *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| - | |
| - Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: | |
| - - docker-worker:cache:scriptworker-level-3-* | |
| - - generic-worker:cache:scriptworker-level-3-* | |
| - - in-tree:hook-action:project-scriptworker/in-tree-action-3-* | |
| - - index:insert-task:scriptworker.cache.level-3.* | |
| - - index:insert-task:scriptworker.v2.scriptworker-scripts.* | |
| - - queue:cancel-task:scriptworker-level-3/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:scriptworker-1/* | |
| - - queue:create-task:highest:scriptworker-3/* | |
| - - queue:create-task:highest:scriptworker-k8s/scriptworker-t-* | |
| - - queue:create-task:highest:scriptworker-t/* | |
| - - queue:rerun-task:scriptworker-level-3/* | |
| - - queue:route:checks | |
| - - queue:route:index.scriptworker.cache.level-1.* | |
| - - queue:route:index.scriptworker.cache.level-3.* | |
| - - queue:route:index.scriptworker.v2.scriptworker-scripts.* | |
| - - queue:scheduler-id:scriptworker-level-1 | |
| - - queue:scheduler-id:scriptworker-level-3 | |
| - - secrets:get:project/scriptworker/level-3/* | |
| - - secrets:get:project/scriptworker/level-any/* | |
| - - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - | |
| Role=repo:github.com/mozilla-releng/scriptworker-scripts:branch:dev*: | |
| roleId: repo:github.com/mozilla-releng/scriptworker-scripts:branch:dev* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:scriptworker-level-3-* | |
| @@ -130075,42 +129941,16 @@ Role=repo:github.com/mozilla-releng/scriptworker:action:*: | |
| - queue:scheduler-id:scriptworker-level-3 | |
| - secrets:get:project/scriptworker/level-3/* | |
| - secrets:get:project/scriptworker/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - secrets:get:repo:github.com/mozilla-releng/scriptworker:coveralls | |
| - secrets:get:repo:github.com/mozilla-releng/scriptworker:github | |
| - Role=repo:github.com/mozilla-releng/scriptworker:branch:*: | |
| - roleId: repo:github.com/mozilla-releng/scriptworker:branch:* | |
| - description: | |
| - *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| - | |
| - Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: | |
| - - docker-worker:cache:scriptworker-level-3-* | |
| - - generic-worker:cache:scriptworker-level-3-* | |
| - - in-tree:hook-action:project-scriptworker/in-tree-action-3-* | |
| - - index:insert-task:scriptworker.cache.level-3.* | |
| - - index:insert-task:scriptworker.v2.scriptworker.* | |
| - - queue:cancel-task:scriptworker-level-3/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:scriptworker-3/* | |
| - - queue:create-task:highest:scriptworker-t/* | |
| - - queue:rerun-task:scriptworker-level-3/* | |
| - - queue:route:checks | |
| - - queue:route:index.scriptworker.cache.level-3.* | |
| - - queue:route:index.scriptworker.v2.scriptworker.* | |
| - - queue:scheduler-id:scriptworker-level-3 | |
| - - secrets:get:project/scriptworker/level-3/* | |
| - - secrets:get:project/scriptworker/level-any/* | |
| - - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - | |
| Role=repo:github.com/mozilla-releng/scriptworker:branch:main: | |
| roleId: repo:github.com/mozilla-releng/scriptworker:branch:main | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:scriptworker-level-3-* | |
| @@ -130225,52 +130065,16 @@ Role=repo:github.com/mozilla-releng/shipit:action:*: | |
| - queue:scheduler-id:releng-level-3 | |
| - queue:scheduler-id:taskcluster-github | |
| - secrets:get:project/releng/level-3/* | |
| - secrets:get:project/releng/level-any/* | |
| - secrets:get:project/releng/shipit/ci | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - Role=repo:github.com/mozilla-releng/shipit:branch:*: | |
| - roleId: repo:github.com/mozilla-releng/shipit:branch:* | |
| - description: | |
| - *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| - | |
| - Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: | |
| - - docker-worker:cache:releng-level-3-* | |
| - - generic-worker:cache:releng-level-3-* | |
| - - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| - - index:insert-task:releng.cache.level-3.* | |
| - - index:insert-task:releng.v2.shipit.* | |
| - - notify:email:* | |
| - - notify:irc-channel:* | |
| - - notify:irc-user:* | |
| - - queue:cancel-task:releng-level-3/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:releng-3/* | |
| - - queue:create-task:highest:releng-t/* | |
| - - queue:rerun-task:releng-level-3/* | |
| - - queue:route:checks | |
| - - queue:route:garbage.* | |
| - - queue:route:index.garbage.* | |
| - - queue:route:index.releng.cache.level-3.* | |
| - - queue:route:index.releng.v2.shipit.* | |
| - - queue:route:notify.email.* | |
| - - queue:route:notify.irc-channel.* | |
| - - queue:route:notify.irc-user.* | |
| - - queue:scheduler-id:releng-level-3 | |
| - - queue:scheduler-id:taskcluster-github | |
| - - secrets:get:project/releng/level-3/* | |
| - - secrets:get:project/releng/level-any/* | |
| - - secrets:get:project/releng/shipit/ci | |
| - - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - | |
| Role=repo:github.com/mozilla-releng/shipit:branch:dev: | |
| roleId: repo:github.com/mozilla-releng/shipit:branch:dev | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:releng-level-3-* | |
| @@ -130584,54 +130388,16 @@ Role=repo:github.com/mozilla-releng/staging-adhoc-signing:action:*: | |
| - queue:create-task:highest:scriptworker-prov-v1/adhoc-signing-mac-dev | |
| - queue:create-task:highest:scriptworker-prov-v1/adhoc-t-* | |
| - queue:get-artifact:releng/adhoc/* | |
| - queue:route:index.adhoc-signing.cache.level-1.* | |
| - queue:route:index.adhoc.v2.staging-adhoc-manifest.* | |
| - queue:route:index.adhoc.v2.staging-adhoc-signing.* | |
| - queue:route:notify.email.* | |
| - Role=repo:github.com/mozilla-releng/staging-adhoc-signing:branch:*: | |
| - roleId: repo:github.com/mozilla-releng/staging-adhoc-signing:branch:* | |
| - description: | |
| - *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| - | |
| - Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: | |
| - - docker-worker:cache:adhoc-level-1-* | |
| - - generic-worker:cache:adhoc-level-1-* | |
| - - in-tree:hook-action:project-adhoc/in-tree-action-1-* | |
| - - index:insert-task:adhoc.cache.level-1.* | |
| - - index:insert-task:adhoc.v2.staging-adhoc-signing.* | |
| - - project:adhoc:releng:signing:cert:dep-signing | |
| - - queue:cancel-task:adhoc-level-1/* | |
| - - queue:create-task:highest:adhoc-1/* | |
| - - queue:create-task:highest:adhoc-t/* | |
| - - queue:create-task:highest:scriptworker-k8s/adhoc-1-* | |
| - - queue:create-task:highest:scriptworker-k8s/adhoc-t-* | |
| - - queue:create-task:highest:scriptworker-prov-v1/adhoc-1-* | |
| - - queue:create-task:highest:scriptworker-prov-v1/adhoc-signing-mac-dev | |
| - - queue:create-task:highest:scriptworker-prov-v1/adhoc-t-* | |
| - - queue:create-task:low:adhoc-1/* | |
| - - queue:create-task:low:adhoc-t/* | |
| - - queue:create-task:low:built-in/* | |
| - - queue:get-artifact:releng/adhoc/* | |
| - - queue:rerun-task:adhoc-level-1/* | |
| - - queue:route:checks | |
| - - queue:route:index.adhoc-signing.cache.level-1.* | |
| - - queue:route:index.adhoc.cache.level-1.* | |
| - - queue:route:index.adhoc.v2.staging-adhoc-manifest.* | |
| - - queue:route:index.adhoc.v2.staging-adhoc-signing.* | |
| - - queue:route:notify.email.* | |
| - - queue:scheduler-id:adhoc-level-1 | |
| - - secrets:get:project/adhoc/level-1/* | |
| - - secrets:get:project/adhoc/level-any/* | |
| - - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - | |
| Role=repo:github.com/mozilla-releng/staging-adhoc-signing:branch:master: | |
| roleId: repo:github.com/mozilla-releng/staging-adhoc-signing:branch:master | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:adhoc-level-1-* | |
| @@ -131584,51 +131350,16 @@ Role=repo:github.com/mozilla-releng/staging-xpi-manifest:action:release-promotion: | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - project:xpi:releng:ship-it:action:mark-as-shipped | |
| - project:xpi:releng:ship-it:server:staging | |
| - Role=repo:github.com/mozilla-releng/staging-xpi-manifest:branch:*: | |
| - roleId: repo:github.com/mozilla-releng/staging-xpi-manifest:branch:* | |
| - description: | |
| - *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| - | |
| - Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: | |
| - - docker-worker:cache:xpi-level-1-* | |
| - - generic-worker:cache:xpi-level-1-* | |
| - - in-tree:hook-action:project-xpi/in-tree-action-1-* | |
| - - index:insert-task:xpi.cache.level-1.* | |
| - - index:insert-task:xpi.v2.staging-xpi-manifest.* | |
| - - project:xpi:releng:signing:cert:dep-signing | |
| - - queue:cancel-task-group:xpi-level-1/* | |
| - - queue:cancel-task:xpi-level-1/* | |
| - - queue:create-task:low:built-in/* | |
| - - queue:create-task:low:scriptworker-k8s/xpi-t-* | |
| - - queue:create-task:low:xpi-1/* | |
| - - queue:create-task:low:xpi-t/* | |
| - - queue:get-artifact:xpi/* | |
| - - queue:rerun-task:xpi-level-1/* | |
| - - queue:route:checks | |
| - - queue:route:index.xpi.cache.level-1.* | |
| - - queue:route:index.xpi.v2.* | |
| - - queue:route:index.xpi.xpi-manifest.cache.level-1.* | |
| - - queue:route:notify.email.* | |
| - - queue:scheduler-id:taskcluster-github | |
| - - queue:scheduler-id:xpi-level-1 | |
| - - queue:seal-task-group:xpi-level-1/* | |
| - - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - - secrets:get:project/xpi/level-1/* | |
| - - secrets:get:project/xpi/level-any/* | |
| - - secrets:get:project/xpi/xpi-github-clone-ssh | |
| - | |
| Role=repo:github.com/mozilla-releng/staging-xpi-manifest:branch:main: | |
| roleId: repo:github.com/mozilla-releng/staging-xpi-manifest:branch:main | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:xpi-level-1-* | |
| @@ -131773,50 +131504,16 @@ Role=repo:github.com/mozilla-releng/staging-xpi-private:*: | |
| - queue:route:index.xpi.cache.level-1.* | |
| - queue:route:index.xpi.v2.staging-xpi-private.* | |
| - queue:scheduler-id:xpi-level-1 | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - secrets:get:project/xpi/level-1/* | |
| - secrets:get:project/xpi/level-any/* | |
| - Role=repo:github.com/mozilla-releng/staging-xpi-private:branch:*: | |
| - roleId: repo:github.com/mozilla-releng/staging-xpi-private:branch:* | |
| - description: | |
| - *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| - | |
| - Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: | |
| - - docker-worker:cache:xpi-level-1-* | |
| - - generic-worker:cache:xpi-level-1-* | |
| - - index:insert-task:xpi.cache.level-1.* | |
| - - index:insert-task:xpi.v2.staging-xpi-private.* | |
| - - project:xpi:releng:signing:cert:dep-signing | |
| - - queue:cancel-task-group:xpi-level-1/* | |
| - - queue:cancel-task:xpi-level-1/* | |
| - - queue:create-task:low:built-in/* | |
| - - queue:create-task:low:scriptworker-k8s/xpi-t-* | |
| - - queue:create-task:low:xpi-1/* | |
| - - queue:create-task:low:xpi-t/* | |
| - - queue:get-artifact:xpi/* | |
| - - queue:rerun-task:xpi-level-1/* | |
| - - queue:route:checks | |
| - - queue:route:index.xpi.cache.level-1.* | |
| - - queue:route:index.xpi.v2.* | |
| - - queue:route:index.xpi.xpi-manifest.cache.level-1.* | |
| - - queue:route:notify.email.* | |
| - - queue:scheduler-id:taskcluster-github | |
| - - queue:scheduler-id:xpi-level-1 | |
| - - queue:seal-task-group:xpi-level-1/* | |
| - - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - - secrets:get:project/xpi/level-1/* | |
| - - secrets:get:project/xpi/level-any/* | |
| - - secrets:get:project/xpi/xpi-github-clone-ssh | |
| - | |
| Role=repo:github.com/mozilla-releng/staging-xpi-private:branch:master: | |
| roleId: repo:github.com/mozilla-releng/staging-xpi-private:branch:master | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:xpi-level-1-* | |
| @@ -132081,54 +131778,16 @@ Role=repo:github.com/mozilla-releng/tooltool:action:*: | |
| - queue:scheduler-id:taskcluster-github | |
| - secrets:get:project/releng/level-3/* | |
| - secrets:get:project/releng/level-any/* | |
| - secrets:get:project/releng/tooltool/level-3/* | |
| - secrets:get:project/releng/tooltool/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - Role=repo:github.com/mozilla-releng/tooltool:branch:*: | |
| - roleId: repo:github.com/mozilla-releng/tooltool:branch:* | |
| - description: | |
| - *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| - | |
| - Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: | |
| - - docker-worker:cache:releng-level-3-* | |
| - - docker-worker:cache:releng-project-tooltool-level-3-* | |
| - - generic-worker:cache:releng-level-3-* | |
| - - generic-worker:cache:releng-project-tooltool-level-3-* | |
| - - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| - - index:insert-task:releng.v2.tooltool.* | |
| - - notify:email:* | |
| - - notify:irc-channel:* | |
| - - notify:irc-user:* | |
| - - queue:cancel-task:releng-level-3/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:releng-3/* | |
| - - queue:create-task:highest:releng-t/* | |
| - - queue:rerun-task:releng-level-3/* | |
| - - queue:route:checks | |
| - - queue:route:garbage.* | |
| - - queue:route:index.garbage.* | |
| - - queue:route:index.releng.v2.tooltool.* | |
| - - queue:route:notify.email.* | |
| - - queue:route:notify.irc-channel.* | |
| - - queue:route:notify.irc-user.* | |
| - - queue:scheduler-id:releng-level-3 | |
| - - queue:scheduler-id:taskcluster-github | |
| - - secrets:get:project/releng/level-3/* | |
| - - secrets:get:project/releng/level-any/* | |
| - - secrets:get:project/releng/tooltool/ci | |
| - - secrets:get:project/releng/tooltool/level-3/* | |
| - - secrets:get:project/releng/tooltool/level-any/* | |
| - - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - | |
| Role=repo:github.com/mozilla-releng/tooltool:branch:dev: | |
| roleId: repo:github.com/mozilla-releng/tooltool:branch:dev | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:releng-level-3-* | |
| @@ -132378,38 +132037,16 @@ Role=repo:github.com/mozilla-releng/treestatus:action:*: | |
| - queue:route:checks | |
| - queue:route:garbage.* | |
| - queue:route:index.garbage.* | |
| - queue:route:notify.email.* | |
| - queue:route:notify.irc-channel.* | |
| - queue:route:notify.irc-user.* | |
| - queue:scheduler-id:taskcluster-github | |
| - Role=repo:github.com/mozilla-releng/treestatus:branch:*: | |
| - roleId: repo:github.com/mozilla-releng/treestatus:branch:* | |
| - description: | |
| - *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| - | |
| - Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: | |
| - - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| - - notify:email:* | |
| - - notify:irc-channel:* | |
| - - notify:irc-user:* | |
| - - queue:create-task:highest:releng-3/* | |
| - - queue:create-task:highest:releng-t/* | |
| - - queue:route:checks | |
| - - queue:route:garbage.* | |
| - - queue:route:index.garbage.* | |
| - - queue:route:notify.email.* | |
| - - queue:route:notify.irc-channel.* | |
| - - queue:route:notify.irc-user.* | |
| - - queue:scheduler-id:taskcluster-github | |
| - - secrets:get:project/releng/treestatus/ci | |
| - | |
| Role=repo:github.com/mozilla-releng/treestatus:branch:dev: | |
| roleId: repo:github.com/mozilla-releng/treestatus:branch:dev | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| @@ -133594,50 +133231,16 @@ Role=repo:github.com/taskcluster/taskgraph:action:*: | |
| - queue:route:tc-treeherder.v2.taskgraph.* | |
| - queue:scheduler-id:taskgraph-level-3 | |
| - secrets:get:project/releng/taskgraph/ci | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - secrets:get:project/taskgraph/level-3/* | |
| - secrets:get:project/taskgraph/level-any/* | |
| - Role=repo:github.com/taskcluster/taskgraph:branch:*: | |
| - roleId: repo:github.com/taskcluster/taskgraph:branch:* | |
| - description: | |
| - *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| - | |
| - Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: | |
| - - docker-worker:cache:taskgraph-level-3-* | |
| - - generic-worker:cache:taskgraph-level-3-* | |
| - - in-tree:hook-action:project-taskgraph/in-tree-action-3-* | |
| - - index:insert-task:taskgraph.cache.level-3.* | |
| - - index:insert-task:taskgraph.v2.taskgraph.* | |
| - - queue:cancel-task:taskgraph-level-3/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:taskgraph-3/* | |
| - - queue:create-task:highest:taskgraph-t/* | |
| - - queue:create-task:low:aws-provisioner-v1/gecko-3-decision | |
| - - queue:create-task:low:aws-provisioner-v1/gecko-3-images | |
| - - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| - - queue:rerun-task:taskgraph-level-3/* | |
| - - queue:route:checks | |
| - - queue:route:index.taskgraph.cache.level-3.* | |
| - - queue:route:index.taskgraph.v2.taskgraph.* | |
| - - queue:route:tc-treeherder-stage.taskgraph.* | |
| - - queue:route:tc-treeherder-stage.v2.taskgraph.* | |
| - - queue:route:tc-treeherder.taskgraph.* | |
| - - queue:route:tc-treeherder.v2.taskgraph.* | |
| - - queue:scheduler-id:taskgraph-level-3 | |
| - - secrets:get:project/releng/taskgraph/ci | |
| - - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - - secrets:get:project/taskgraph/level-3/* | |
| - - secrets:get:project/taskgraph/level-any/* | |
| - | |
| Role=repo:github.com/taskcluster/taskgraph:branch:main: | |
| roleId: repo:github.com/taskcluster/taskgraph:branch:main | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:taskgraph-level-3-* | |
| @@ -139725,60 +139328,16 @@ Role=repo:hg.mozilla.org/try:action:retrigger-decision: | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - assume:repo:hg.mozilla.org/try:branch:default | |
| - in-tree:hook-action:project-gecko/in-tree-action-1-* | |
| - Role=repo:hg.mozilla.org/try:branch:*: | |
| - roleId: repo:hg.mozilla.org/try:branch:* | |
| - description: | |
| - *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| - | |
| - Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: | |
| - - assume:project:taskcluster:gecko:level-1-sccache-buckets | |
| - - docker-worker:cache:gecko-level-1-* | |
| - - generic-worker:cache:gecko-level-1-* | |
| - - in-tree:hook-action:project-gecko/in-tree-action-1-* | |
| - - index:insert-task:gecko.cache.level-1.* | |
| - - index:insert-task:gecko.v2.try.* | |
| - - queue:cancel-task:gecko-level-1/* | |
| - - queue:create-task:low:bitbar/gecko-t-* | |
| - - queue:create-task:low:built-in/* | |
| - - queue:create-task:low:gecko-1/* | |
| - - queue:create-task:low:gecko-t/* | |
| - - queue:create-task:low:performance-hardware/gecko-t-* | |
| - - queue:create-task:low:releng-hardware/gecko-1-* | |
| - - queue:create-task:low:releng-hardware/gecko-t-* | |
| - - queue:create-task:low:releng-hardware/win11-64-* | |
| - - queue:create-task:low:scriptworker-k8s/gecko-1-* | |
| - - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| - - queue:get-artifact:private/openh264/* | |
| - - queue:get-artifact:project/civet/* | |
| - - queue:rerun-task:gecko-level-1/* | |
| - - queue:route:coalesce.v1.try.* | |
| - - queue:route:index.gecko.cache.level-1.* | |
| - - queue:route:index.gecko.v2.try.* | |
| - - queue:route:project.relman.codereview.* | |
| - - queue:route:tc-treeherder-stage.try.* | |
| - - queue:route:tc-treeherder-stage.v2.try.* | |
| - - queue:route:tc-treeherder.try.* | |
| - - queue:route:tc-treeherder.v2.try.* | |
| - - queue:scheduler-id:gecko-level-1 | |
| - - secrets:get:project/civet/github-deploy-key | |
| - - secrets:get:project/engwf/gecko/1/tokens | |
| - - secrets:get:project/gecko/level-1/* | |
| - - secrets:get:project/gecko/level-any/* | |
| - - secrets:get:project/releng/gecko/build/level-1/* | |
| - - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - | |
| Role=repo:hg.mozilla.org/try:branch:default: | |
| roleId: repo:hg.mozilla.org/try:branch:default | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - assume:project:taskcluster:gecko:level-1-sccache-buckets | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment