Created
June 28, 2024 16:46
-
-
Save bhearsum/d988868b70e5a1afab1d3b0c40d12a79 to your computer and use it in GitHub Desktop.
bug1903776
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- current | |
| +++ generated | |
| @@ -128776,16 +129057,44 @@ Role=repo:github.com/firefox-devtools/profiler:*: | |
| - queue:scheduler-id:mozilla-level-1 | |
| - secrets:get:project/mozilla/firefox-profiler/level-1/* | |
| - secrets:get:project/mozilla/firefox-profiler/level-any/* | |
| - secrets:get:project/mozilla/level-1/* | |
| - secrets:get:project/mozilla/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/firefox-devtools/profiler:branch:main: | |
| + roleId: repo:github.com/firefox-devtools/profiler:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:mozilla-level-1-* | |
| + - docker-worker:cache:mozilla-project-firefox-profiler-level-1-* | |
| + - generic-worker:cache:mozilla-level-1-* | |
| + - generic-worker:cache:mozilla-project-firefox-profiler-level-1-* | |
| + - in-tree:hook-action:project-mozilla/in-tree-action-1-* | |
| + - index:insert-task:mozilla.v2.firefox-profiler.* | |
| + - queue:cancel-task:mozilla-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozilla-1/* | |
| + - queue:create-task:low:mozilla-t/* | |
| + - queue:rerun-task:mozilla-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozilla.v2.firefox-profiler.* | |
| + - queue:scheduler-id:mozilla-level-1 | |
| + - secrets:get:project/mozilla/firefox-profiler/level-1/* | |
| + - secrets:get:project/mozilla/firefox-profiler/level-any/* | |
| + - secrets:get:project/mozilla/level-1/* | |
| + - secrets:get:project/mozilla/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/firefox-devtools/profiler:pull-request: | |
| roleId: repo:github.com/firefox-devtools/profiler:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - index:insert-task:mozilla.v2.firefox-profiler-pr.* | |
| @@ -128930,35 +129239,63 @@ Role=repo:github.com/mozilla-extensions/xpi-manifest:branch:*: | |
| Role=repo:github.com/mozilla-extensions/xpi-manifest:branch:main: | |
| roleId: repo:github.com/mozilla-extensions/xpi-manifest:branch:main | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| + - docker-worker:cache:xpi-level-1-* | |
| + - docker-worker:cache:xpi-level-3-* | |
| + - generic-worker:cache:xpi-level-3-* | |
| + - in-tree:hook-action:project-xpi/in-tree-action-3-* | |
| + - index:insert-task:xpi.cache.level-3.* | |
| + - index:insert-task:xpi.v2.xpi-manifest.* | |
| - project:xpi:balrog:action:* | |
| - project:xpi:balrog:channel:* | |
| - project:xpi:balrog:server:release | |
| - project:xpi:balrog:server:staging | |
| - project:xpi:beetmover:action:* | |
| - project:xpi:beetmover:bucket:dep | |
| - project:xpi:beetmover:bucket:release | |
| - project:xpi:releng:github:action:release | |
| - project:xpi:releng:github:project:mozilla-extensions/* | |
| - project:xpi:releng:github:project:mozilla-rally/rally-core-addon | |
| - project:xpi:releng:github:project:mozilla-releng/staging-xpi-* | |
| - project:xpi:releng:signing:cert:dep-signing | |
| - project:xpi:releng:signing:cert:release-signing | |
| + - queue:cancel-task-group:xpi-level-1/* | |
| + - queue:cancel-task:xpi-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| - queue:create-task:highest:scriptworker-k8s/xpi-3-* | |
| - queue:create-task:highest:scriptworker-k8s/xpi-t-* | |
| - queue:create-task:highest:xpi-3/* | |
| - queue:create-task:highest:xpi-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:scriptworker-k8s/xpi-t-* | |
| + - queue:create-task:low:xpi-1/* | |
| + - queue:create-task:low:xpi-t/* | |
| + - queue:get-artifact:xpi/* | |
| + - queue:rerun-task:xpi-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.xpi.cache.level-1.* | |
| - queue:route:index.xpi.cache.level-3.* | |
| - - queue:route:index.xpi.v2.xpi-manifest.* | |
| + - queue:route:index.xpi.v2.* | |
| + - queue:route:index.xpi.xpi-manifest.cache.level-1.* | |
| + - queue:route:notify.email.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + - queue:scheduler-id:xpi-level-1 | |
| + - queue:scheduler-id:xpi-level-3 | |
| + - queue:seal-task-group:xpi-level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/xpi/level-3/* | |
| + - secrets:get:project/xpi/level-any/* | |
| + - secrets:get:project/xpi/xpi-github-clone-ssh | |
| Role=repo:github.com/mozilla-extensions/xpi-manifest:cron:*: | |
| roleId: repo:github.com/mozilla-extensions/xpi-manifest:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -129011,19 +129348,16 @@ Role=repo:github.com/mozilla-extensions/xpi-manifest:pull-request: | |
| - index:insert-task:xpi.cache.level-1.* | |
| - index:insert-task:xpi.cache.pr.* | |
| - index:insert-task:xpi.v2.xpi-manifest-pr.* | |
| - project:xpi:releng:ship-it:action:mark-as-shipped | |
| - project:xpi:releng:ship-it:server:staging | |
| - project:xpi:releng:signing:cert:dep-signing | |
| - queue:cancel-task-group:xpi-level-1/* | |
| - queue:cancel-task:xpi-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:xpi-1/* | |
| - - queue:create-task:highest:xpi-t/* | |
| - queue:create-task:low:built-in/* | |
| - queue:create-task:low:scriptworker-k8s/xpi-t-* | |
| - queue:create-task:low:xpi-1/* | |
| - queue:create-task:low:xpi-t/* | |
| - queue:get-artifact:xpi/* | |
| - queue:rerun-task:xpi-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.xpi.cache.head.* | |
| @@ -129195,16 +129529,70 @@ Role=repo:github.com/mozilla-mobile/firefox-ios:branch:*: | |
| - secrets:get:project/mobile/firefox-ios/bitrise | |
| - secrets:get:project/mobile/firefox-ios/level-3/* | |
| - secrets:get:project/mobile/firefox-ios/level-any/* | |
| - secrets:get:project/mobile/level-3/* | |
| - secrets:get:project/mobile/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla-mobile/firefox-ios:branch:main: | |
| + roleId: repo:github.com/mozilla-mobile/firefox-ios:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:mobile-level-3-* | |
| + - docker-worker:cache:mobile-project-firefox-ios-level-3-* | |
| + - generic-worker:cache:mobile-level-3-* | |
| + - generic-worker:cache:mobile-project-firefox-ios-level-3-* | |
| + - in-tree:hook-action:project-mobile/in-tree-action-3-* | |
| + - index:insert-task:mobile.cache.level-3.* | |
| + - index:insert-task:mobile.v2.firefox-ios.* | |
| + - notify:email:* | |
| + - notify:slack-channel:* | |
| + - project:mobile:firefox-ios:releng:bitrise:app:firefox-ios | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:Bitrise_Performance_Test | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:Firebase_Performance_Test | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:L10nBuild | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:L10nScreenshotsTests | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:build_and_test_* | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:firefox_configure_build | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:focus_configure_build | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:focus_ui_test | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:focus_unit_test | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:klar_unit_test | |
| + - project:mobile:firefox-ios:releng:signing:cert:dep-signing | |
| + - project:mobile:firefox-ios:releng:signing:format:* | |
| + - queue:cancel-task:mobile-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:mobile-3/* | |
| + - queue:create-task:highest:mobile-t/* | |
| + - queue:create-task:highest:scriptworker-k8s/mobile-3-* | |
| + - queue:get-artifact:mobile/android-sdk/* | |
| + - queue:rerun-task:mobile-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.mobile.cache.level-3.* | |
| + - queue:route:index.mobile.v2.firefox-ios.* | |
| + - queue:route:notify.* | |
| + - queue:route:tc-treeherder-stage.firefox-ios.* | |
| + - queue:route:tc-treeherder-stage.v2.firefox-ios.* | |
| + - queue:route:tc-treeherder.firefox-ios.* | |
| + - queue:route:tc-treeherder.v2.firefox-ios.* | |
| + - queue:scheduler-id:mobile-level-3 | |
| + - secrets:get:project/mobile/ci/testrail | |
| + - secrets:get:project/mobile/firefox-ios/bitrise | |
| + - secrets:get:project/mobile/firefox-ios/level-3/* | |
| + - secrets:get:project/mobile/firefox-ios/level-any/* | |
| + - secrets:get:project/mobile/level-3/* | |
| + - secrets:get:project/mobile/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla-mobile/firefox-ios:cron:*: | |
| roleId: repo:github.com/mozilla-mobile/firefox-ios:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:mobile-level-3-* | |
| @@ -129307,20 +129695,22 @@ Role=repo:github.com/mozilla-mobile/firefox-ios:pull-request: | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:focus_configure_build | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:focus_ui_test | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:focus_unit_test | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:klar_unit_test | |
| - project:mobile:firefox-ios:releng:signing:cert:dep-signing | |
| - project:mobile:firefox-ios:releng:signing:format:* | |
| - queue:cancel-task-group:mobile-level-1/* | |
| - queue:cancel-task:mobile-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - queue:create-task:highest:mobile-1/* | |
| - queue:create-task:highest:mobile-t/* | |
| - queue:create-task:highest:scriptworker-k8s/mobile-1-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mobile-1/* | |
| + - queue:create-task:low:mobile-t/* | |
| - queue:get-artifact:mobile/android-sdk/* | |
| - queue:rerun-task:mobile-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.mobile.cache.level-1.* | |
| - queue:route:index.mobile.v2.firefox-ios-pr.* | |
| - queue:route:index.mobile.v2.firefox-ios.cache.head.* | |
| - queue:route:index.mobile.v2.firefox-ios.cache.level-1.* | |
| - queue:route:index.mobile.v2.firefox-ios.cache.pr.* | |
| @@ -129355,19 +129745,21 @@ Role=repo:github.com/mozilla-mobile/firefox-ios:pull-request-untrusted: | |
| - index:insert-task:mobile.v2.firefox-ios.cache.level-1.* | |
| - index:insert-task:mobile.v2.firefox-ios.cache.pr.* | |
| - notify:email:* | |
| - notify:slack-channel:* | |
| - project:mobile:firefox-ios:releng:signing:cert:dep-signing | |
| - project:mobile:firefox-ios:releng:signing:format:* | |
| - queue:cancel-task-group:mobile-level-1/* | |
| - queue:cancel-task:mobile-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - queue:create-task:highest:mobile-1/* | |
| - queue:create-task:highest:mobile-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mobile-1/* | |
| + - queue:create-task:low:mobile-t/* | |
| - queue:get-artifact:mobile/android-sdk/* | |
| - queue:rerun-task:mobile-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.mobile.cache.level-1.* | |
| - queue:route:index.mobile.v2.firefox-ios-pr.* | |
| - queue:route:index.mobile.v2.firefox-ios.cache.head.* | |
| - queue:route:index.mobile.v2.firefox-ios.cache.level-1.* | |
| - queue:route:index.mobile.v2.firefox-ios.cache.pr.* | |
| @@ -129529,32 +129921,108 @@ Role=repo:github.com/mozilla-mobile/mozilla-vpn-client:branch:*: | |
| Role=repo:github.com/mozilla-mobile/mozilla-vpn-client:branch:main: | |
| roleId: repo:github.com/mozilla-mobile/mozilla-vpn-client:branch:main | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| + - docker-worker:cache:mozillavpn-level-3-* | |
| + - generic-worker:cache:mozillavpn-level-3-* | |
| + - in-tree:hook-action:project-mozillavpn/in-tree-action-3-* | |
| + - index:insert-task:mozillavpn.cache.level-3.* | |
| + - index:insert-task:mozillavpn.v2.mozilla-vpn-client.* | |
| + - project:mozillavpn:releng:beetmover:action:import-from-gcs-to-artifact-registry | |
| + - project:mozillavpn:releng:beetmover:action:push-to-candidates | |
| + - project:mozillavpn:releng:beetmover:apt-repo:dep | |
| + - project:mozillavpn:releng:beetmover:bucket:dep | |
| + - project:mozillavpn:releng:signing:cert:dep-signing | |
| - project:mozillavpn:releng:signing:cert:release-apple-notarization | |
| - project:mozillavpn:releng:signing:cert:release-signing | |
| - - queue:route:index.mozillavpn.v2.mozilla-vpn-client.branch.* | |
| + - project:mozillavpn:releng:signing:format:* | |
| + - project:releng:services/tooltool/api/download/internal | |
| + - project:releng:services/tooltool/api/download/public | |
| + - queue:cancel-task:mozillavpn-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:mozillavpn-3/* | |
| + - queue:create-task:highest:mozillavpn-t/* | |
| + - queue:create-task:highest:releng-hardware/mozillavpn-b-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/mozillavpn-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/mozillavpn-t-* | |
| + - queue:create-task:highest:scriptworker-prov-v1/mozillavpn-3-* | |
| + - queue:create-task:highest:scriptworker-prov-v1/mozillavpn-t-* | |
| + - queue:get-artifact:project/mozillavpn/* | |
| + - queue:rerun-task:mozillavpn-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozillavpn.cache.level-3.* | |
| + - queue:route:index.mozillavpn.v2.mozilla-vpn-client.* | |
| + - queue:route:index.mozillavpn.v2.mozillavpn.cache.level-3.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:tc-treeherder-stage.mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder-stage.v2.mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder.mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder.v2.mozilla-vpn-client.* | |
| + - queue:scheduler-id:mozillavpn-level-3 | |
| + - secrets:get:project/mozillavpn/level-1/* | |
| + - secrets:get:project/mozillavpn/level-3/* | |
| + - secrets:get:project/mozillavpn/level-any/* | |
| - secrets:get:project/mozillavpn/tokens | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-mobile/mozilla-vpn-client:branch:releases/*: | |
| roleId: repo:github.com/mozilla-mobile/mozilla-vpn-client:branch:releases/* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| + - docker-worker:cache:mozillavpn-level-3-* | |
| + - generic-worker:cache:mozillavpn-level-3-* | |
| + - in-tree:hook-action:project-mozillavpn/in-tree-action-3-* | |
| + - index:insert-task:mozillavpn.cache.level-3.* | |
| + - index:insert-task:mozillavpn.v2.mozilla-vpn-client.* | |
| + - project:mozillavpn:releng:beetmover:action:import-from-gcs-to-artifact-registry | |
| + - project:mozillavpn:releng:beetmover:action:push-to-candidates | |
| + - project:mozillavpn:releng:beetmover:apt-repo:dep | |
| + - project:mozillavpn:releng:beetmover:bucket:dep | |
| + - project:mozillavpn:releng:signing:cert:dep-signing | |
| - project:mozillavpn:releng:signing:cert:release-apple-notarization | |
| - project:mozillavpn:releng:signing:cert:release-signing | |
| - - queue:route:index.mozillavpn.v2.mozilla-vpn-client.branch.* | |
| + - project:mozillavpn:releng:signing:format:* | |
| + - project:releng:services/tooltool/api/download/internal | |
| + - project:releng:services/tooltool/api/download/public | |
| + - queue:cancel-task:mozillavpn-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:mozillavpn-3/* | |
| + - queue:create-task:highest:mozillavpn-t/* | |
| + - queue:create-task:highest:releng-hardware/mozillavpn-b-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/mozillavpn-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/mozillavpn-t-* | |
| + - queue:create-task:highest:scriptworker-prov-v1/mozillavpn-3-* | |
| + - queue:create-task:highest:scriptworker-prov-v1/mozillavpn-t-* | |
| + - queue:get-artifact:project/mozillavpn/* | |
| + - queue:rerun-task:mozillavpn-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozillavpn.cache.level-3.* | |
| + - queue:route:index.mozillavpn.v2.mozilla-vpn-client.* | |
| + - queue:route:index.mozillavpn.v2.mozillavpn.cache.level-3.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:tc-treeherder-stage.mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder-stage.v2.mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder.mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder.v2.mozilla-vpn-client.* | |
| + - queue:scheduler-id:mozillavpn-level-3 | |
| + - secrets:get:project/mozillavpn/level-1/* | |
| + - secrets:get:project/mozillavpn/level-3/* | |
| + - secrets:get:project/mozillavpn/level-any/* | |
| - secrets:get:project/mozillavpn/tokens | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-mobile/mozilla-vpn-client:pull-request: | |
| roleId: repo:github.com/mozilla-mobile/mozilla-vpn-client:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -129573,24 +130041,24 @@ Role=repo:github.com/mozilla-mobile/mozilla-vpn-client:pull-request: | |
| - project:mozillavpn:releng:ship-it:action:mark-as-shipped | |
| - project:mozillavpn:releng:ship-it:server:staging | |
| - project:mozillavpn:releng:signing:cert:dep-signing | |
| - project:mozillavpn:releng:signing:format:* | |
| - project:releng:services/tooltool/api/download/internal | |
| - project:releng:services/tooltool/api/download/public | |
| - queue:cancel-task-group:mozillavpn-level-1/* | |
| - queue:cancel-task:mozillavpn-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:mozillavpn-1/* | |
| - - queue:create-task:highest:mozillavpn-t/* | |
| - - queue:create-task:highest:releng-hardware/mozillavpn-b-1-* | |
| - queue:create-task:highest:scriptworker-k8s/mozillavpn-1-* | |
| - queue:create-task:highest:scriptworker-k8s/mozillavpn-t-* | |
| - - queue:create-task:highest:scriptworker-prov-v1/mozillavpn-1-* | |
| - queue:create-task:highest:scriptworker-prov-v1/mozillavpn-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozillavpn-1/* | |
| + - queue:create-task:low:mozillavpn-t/* | |
| + - queue:create-task:low:releng-hardware/mozillavpn-b-1-* | |
| + - queue:create-task:low:scriptworker-prov-v1/mozillavpn-1-* | |
| - queue:get-artifact:project/mozillavpn/* | |
| - queue:rerun-task:mozillavpn-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.mozillavpn.cache.head.* | |
| - queue:route:index.mozillavpn.cache.level-1.* | |
| - queue:route:index.mozillavpn.cache.pr.* | |
| - queue:route:index.mozillavpn.v2.mozilla-vpn-client-pr.* | |
| - queue:route:index.mozillavpn.v2.mozillavpn.cache.head.* | |
| @@ -129624,24 +130092,24 @@ Role=repo:github.com/mozilla-mobile/mozilla-vpn-client:pull-request-untrusted: | |
| - project:mozillavpn:releng:beetmover:action:push-to-candidates | |
| - project:mozillavpn:releng:beetmover:apt-repo:dep | |
| - project:mozillavpn:releng:beetmover:bucket:dep | |
| - project:mozillavpn:releng:ship-it:action:mark-as-shipped | |
| - project:mozillavpn:releng:ship-it:server:staging | |
| - project:mozillavpn:releng:signing:cert:dep-signing | |
| - queue:cancel-task-group:mozillavpn-level-1/* | |
| - queue:cancel-task:mozillavpn-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:mozillavpn-1/* | |
| - - queue:create-task:highest:mozillavpn-t/* | |
| - - queue:create-task:highest:releng-hardware/mozillavpn-b-1-* | |
| - queue:create-task:highest:scriptworker-k8s/mozillavpn-1-* | |
| - queue:create-task:highest:scriptworker-k8s/mozillavpn-t-* | |
| - - queue:create-task:highest:scriptworker-prov-v1/mozillavpn-1-* | |
| - queue:create-task:highest:scriptworker-prov-v1/mozillavpn-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozillavpn-1/* | |
| + - queue:create-task:low:mozillavpn-t/* | |
| + - queue:create-task:low:releng-hardware/mozillavpn-b-1-* | |
| + - queue:create-task:low:scriptworker-prov-v1/mozillavpn-1-* | |
| - queue:get-artifact:project/mozillavpn/* | |
| - queue:rerun-task:mozillavpn-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.mozillavpn.cache.head.* | |
| - queue:route:index.mozillavpn.cache.level-1.* | |
| - queue:route:index.mozillavpn.cache.pr.* | |
| - queue:route:index.mozillavpn.v2.mozilla-vpn-client-pr.* | |
| - queue:route:index.mozillavpn.v2.mozillavpn.cache.head.* | |
| @@ -129817,18 +130285,57 @@ Role=repo:github.com/mozilla-mobile/reference-browser:branch:*: | |
| Role=repo:github.com/mozilla-mobile/reference-browser:branch:master: | |
| roleId: repo:github.com/mozilla-mobile/reference-browser:branch:master | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - - queue:route:index.mobile.v2.reference-browser.performance-test.* | |
| - - queue:route:[email protected] | |
| + - docker-worker:cache:mobile-level-3-* | |
| + - docker-worker:cache:mobile-project-reference-browser-level-3-* | |
| + - generic-worker:cache:mobile-level-3-* | |
| + - generic-worker:cache:mobile-project-reference-browser-level-3-* | |
| + - in-tree:hook-action:project-mobile/in-tree-action-3-* | |
| + - index:insert-task:mobile.cache.level-3.* | |
| + - index:insert-task:mobile.v2.reference-browser.* | |
| + - notify:email:* | |
| + - notify:slack-channel:* | |
| + - project:mobile:reference-browser:releng:signing:cert:dep-signing | |
| + - project:mobile:reference-browser:releng:signing:format:* | |
| + - queue:cancel-task:mobile-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:mobile-3/* | |
| + - queue:create-task:highest:mobile-t/* | |
| + - queue:create-task:highest:proj-autophone/gecko-t-ap-perf-g5 | |
| + - queue:create-task:highest:proj-autophone/gecko-t-ap-perf-p2 | |
| + - queue:create-task:highest:proj-autophone/gecko-t-bitbar-gw-perf-a51 | |
| + - queue:create-task:highest:proj-autophone/gecko-t-bitbar-gw-perf-g5 | |
| + - queue:create-task:highest:proj-autophone/gecko-t-bitbar-gw-perf-p2 | |
| + - queue:create-task:highest:scriptworker-k8s/mobile-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/mobile-t-* | |
| + - queue:get-artifact:mobile/android-sdk/* | |
| + - queue:rerun-task:mobile-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.mobile.cache.level-3.* | |
| + - queue:route:index.mobile.v2.reference-browser.* | |
| + - queue:route:notify.* | |
| + - queue:route:tc-treeherder-stage.reference-browser.* | |
| + - queue:route:tc-treeherder-stage.v2.reference-browser.* | |
| + - queue:route:tc-treeherder.reference-browser.* | |
| + - queue:route:tc-treeherder.v2.reference-browser.* | |
| + - queue:scheduler-id:mobile-level-3 | |
| + - secrets:get:project/mobile/level-3/* | |
| + - secrets:get:project/mobile/level-any/* | |
| + - secrets:get:project/mobile/reference-browser/firebase | |
| + - secrets:get:project/mobile/reference-browser/level-3/* | |
| + - secrets:get:project/mobile/reference-browser/level-any/* | |
| + - secrets:get:project/mobile/reference-browser/nightly | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-mobile/reference-browser:cron:*: | |
| roleId: repo:github.com/mozilla-mobile/reference-browser:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -129910,26 +130417,28 @@ Role=repo:github.com/mozilla-mobile/reference-browser:pull-request: | |
| - index:insert-task:mobile.v2.reference-browser.cache.pr.* | |
| - notify:email:* | |
| - notify:slack-channel:* | |
| - project:mobile:reference-browser:releng:googleplay:product:reference-browser:dep | |
| - project:mobile:reference-browser:releng:signing:cert:dep-signing | |
| - project:mobile:reference-browser:releng:signing:format:* | |
| - queue:cancel-task-group:mobile-level-1/* | |
| - queue:cancel-task:mobile-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - queue:create-task:highest:mobile-1/* | |
| - queue:create-task:highest:mobile-t/* | |
| - queue:create-task:highest:proj-autophone/gecko-t-ap-perf-g5 | |
| - queue:create-task:highest:proj-autophone/gecko-t-ap-perf-p2 | |
| - queue:create-task:highest:proj-autophone/gecko-t-bitbar-gw-perf-a51 | |
| - queue:create-task:highest:proj-autophone/gecko-t-bitbar-gw-perf-g5 | |
| - queue:create-task:highest:proj-autophone/gecko-t-bitbar-gw-perf-p2 | |
| - queue:create-task:highest:scriptworker-k8s/mobile-1-* | |
| - queue:create-task:highest:scriptworker-k8s/mobile-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mobile-1/* | |
| + - queue:create-task:low:mobile-t/* | |
| - queue:get-artifact:mobile/android-sdk/* | |
| - queue:rerun-task:mobile-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.mobile.cache.level-1.* | |
| - queue:route:index.mobile.v2.reference-browser-pr.* | |
| - queue:route:index.mobile.v2.reference-browser.cache.head.* | |
| - queue:route:index.mobile.v2.reference-browser.cache.level-1.* | |
| - queue:route:index.mobile.v2.reference-browser.cache.pr.* | |
| @@ -129965,26 +130474,28 @@ Role=repo:github.com/mozilla-mobile/reference-browser:pull-request-untrusted: | |
| - index:insert-task:mobile.v2.reference-browser.cache.pr.* | |
| - notify:email:* | |
| - notify:slack-channel:* | |
| - project:mobile:reference-browser:releng:googleplay:product:reference-browser:dep | |
| - project:mobile:reference-browser:releng:signing:cert:dep-signing | |
| - project:mobile:reference-browser:releng:signing:format:* | |
| - queue:cancel-task-group:mobile-level-1/* | |
| - queue:cancel-task:mobile-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - queue:create-task:highest:mobile-1/* | |
| - queue:create-task:highest:mobile-t/* | |
| - queue:create-task:highest:proj-autophone/gecko-t-ap-perf-g5 | |
| - queue:create-task:highest:proj-autophone/gecko-t-ap-perf-p2 | |
| - queue:create-task:highest:proj-autophone/gecko-t-bitbar-gw-perf-a51 | |
| - queue:create-task:highest:proj-autophone/gecko-t-bitbar-gw-perf-g5 | |
| - queue:create-task:highest:proj-autophone/gecko-t-bitbar-gw-perf-p2 | |
| - queue:create-task:highest:scriptworker-k8s/mobile-1-* | |
| - queue:create-task:highest:scriptworker-k8s/mobile-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mobile-1/* | |
| + - queue:create-task:low:mobile-t/* | |
| - queue:get-artifact:mobile/android-sdk/* | |
| - queue:rerun-task:mobile-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.mobile.cache.level-1.* | |
| - queue:route:index.mobile.v2.reference-browser-pr.* | |
| - queue:route:index.mobile.v2.reference-browser.cache.head.* | |
| - queue:route:index.mobile.v2.reference-browser.cache.level-1.* | |
| - queue:route:index.mobile.v2.reference-browser.cache.pr.* | |
| @@ -130066,16 +130577,17 @@ Role=repo:github.com/mozilla-platform-ops/cloud-image-builder:branch:main: | |
| - auth:websocktunnel-token:firefoxcitc/* | |
| - generic-worker:os-group:* | |
| - generic-worker:run-as-administrator:* | |
| - queue:create-task:highest:gecko-1/b-win* | |
| - queue:create-task:highest:gecko-1/win* | |
| - queue:create-task:highest:gecko-t/t-win* | |
| - queue:create-task:highest:gecko-t/win* | |
| - queue:create-task:highest:relops* | |
| + - queue:route:checks | |
| - queue:route:index.project.relops.* | |
| - queue:scheduler-id:taskcluster-github | |
| - secrets:get:project/relops/image-builder* | |
| - secrets:get:project/relops/image-deploy* | |
| - worker-manager:manage-worker-pool:gecko-1/b-win* | |
| - worker-manager:manage-worker-pool:gecko-1/win* | |
| - worker-manager:manage-worker-pool:gecko-t/t-win* | |
| - worker-manager:manage-worker-pool:gecko-t/win* | |
| @@ -130153,31 +130665,76 @@ Role=repo:github.com/mozilla-rally/rally-core-addon:branch:*: | |
| Role=repo:github.com/mozilla-rally/rally-core-addon:branch:*: | |
| roleId: repo:github.com/mozilla-rally/rally-core-addon:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:xpi-level-1-* | |
| + - generic-worker:cache:xpi-level-1-* | |
| + - in-tree:hook-action:project-xpi/in-tree-action-1-* | |
| + - index:insert-task:xpi.cache.level-1.* | |
| + - index:insert-task:xpi.v2.rally-core-addon.* | |
| - project:xpi:releng:signing:cert:dep-signing | |
| - queue:cancel-task-group:xpi-level-1/* | |
| + - queue:cancel-task:xpi-level-1/* | |
| - queue:create-task:low:built-in/* | |
| - queue:create-task:low:scriptworker-k8s/xpi-t-* | |
| - queue:create-task:low:xpi-1/* | |
| - queue:create-task:low:xpi-t/* | |
| - queue:get-artifact:xpi/* | |
| + - queue:rerun-task:xpi-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.xpi.cache.level-1.* | |
| - queue:route:index.xpi.v2.* | |
| - queue:route:index.xpi.xpi-manifest.cache.level-1.* | |
| - queue:route:notify.email.* | |
| - queue:scheduler-id:taskcluster-github | |
| - queue:scheduler-id:xpi-level-1 | |
| - queue:seal-task-group:xpi-level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/xpi/level-1/* | |
| + - secrets:get:project/xpi/level-any/* | |
| + - secrets:get:project/xpi/xpi-github-clone-ssh | |
| + | |
| + Role=repo:github.com/mozilla-rally/rally-core-addon:branch:master: | |
| + roleId: repo:github.com/mozilla-rally/rally-core-addon:branch:master | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:xpi-level-1-* | |
| + - generic-worker:cache:xpi-level-1-* | |
| + - in-tree:hook-action:project-xpi/in-tree-action-1-* | |
| + - index:insert-task:xpi.cache.level-1.* | |
| + - index:insert-task:xpi.v2.rally-core-addon.* | |
| + - project:xpi:releng:signing:cert:dep-signing | |
| + - queue:cancel-task-group:xpi-level-1/* | |
| + - queue:cancel-task:xpi-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:scriptworker-k8s/xpi-t-* | |
| + - queue:create-task:low:xpi-1/* | |
| + - queue:create-task:low:xpi-t/* | |
| + - queue:get-artifact:xpi/* | |
| + - queue:rerun-task:xpi-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.xpi.cache.level-1.* | |
| + - queue:route:index.xpi.v2.* | |
| + - queue:route:index.xpi.xpi-manifest.cache.level-1.* | |
| + - queue:route:notify.email.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + - queue:scheduler-id:xpi-level-1 | |
| + - queue:seal-task-group:xpi-level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/xpi/level-1/* | |
| + - secrets:get:project/xpi/level-any/* | |
| - secrets:get:project/xpi/xpi-github-clone-ssh | |
| Role=repo:github.com/mozilla-rally/rally-core-addon:pull-request: | |
| roleId: repo:github.com/mozilla-rally/rally-core-addon:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| @@ -130335,27 +130892,51 @@ Role=repo:github.com/mozilla-releng/adhoc-signing:branch:*: | |
| - queue:route:index.adhoc.v2.staging-adhoc-manifest.* | |
| - queue:route:notify.email.* | |
| - queue:scheduler-id:adhoc-level-3 | |
| - secrets:get:project/adhoc/level-3/* | |
| - secrets:get:project/adhoc/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - Role=repo:github.com/mozilla-releng/adhoc-signing:branch:master: | |
| - roleId: repo:github.com/mozilla-releng/adhoc-signing:branch:master | |
| + Role=repo:github.com/mozilla-releng/adhoc-signing:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/adhoc-signing:branch:main | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - - project:adhoc:releng:signing:cert:nightly-signing | |
| - - project:adhoc:releng:signing:cert:release-apple-notarization | |
| - - project:adhoc:releng:signing:cert:release-signing | |
| - - queue:route:index.adhoc.v2.adhoc-manifest.* | |
| + - docker-worker:cache:adhoc-level-3-* | |
| + - generic-worker:cache:adhoc-level-3-* | |
| + - in-tree:hook-action:project-adhoc/in-tree-action-3-* | |
| + - index:insert-task:adhoc.cache.level-3.* | |
| + - index:insert-task:adhoc.v2.adhoc-signing.* | |
| + - project:adhoc:releng:signing:cert:dep-signing | |
| + - queue:cancel-task:adhoc-level-3/* | |
| + - queue:create-task:highest:adhoc-3/* | |
| + - queue:create-task:highest:adhoc-t/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:scriptworker-k8s/adhoc-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/adhoc-t-* | |
| + - queue:create-task:highest:scriptworker-prov-v1/adhoc-3-* | |
| + - queue:create-task:highest:scriptworker-prov-v1/adhoc-signing-mac-dev | |
| + - queue:create-task:highest:scriptworker-prov-v1/adhoc-t-* | |
| + - queue:get-artifact:releng/adhoc/* | |
| + - queue:rerun-task:adhoc-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.adhoc-signing.cache.level-3.* | |
| + - queue:route:index.adhoc.cache.level-3.* | |
| + - queue:route:index.adhoc.v2.adhoc-signing.* | |
| + - queue:route:index.adhoc.v2.staging-adhoc-manifest.* | |
| + - queue:route:notify.email.* | |
| + - queue:scheduler-id:adhoc-level-3 | |
| + - secrets:get:project/adhoc/level-3/* | |
| + - secrets:get:project/adhoc/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/adhoc-signing:pull-request: | |
| roleId: repo:github.com/mozilla-releng/adhoc-signing:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -130366,22 +130947,24 @@ Role=repo:github.com/mozilla-releng/adhoc-signing:pull-request: | |
| - index:insert-task:adhoc.cache.level-1.* | |
| - index:insert-task:adhoc.cache.pr.* | |
| - index:insert-task:adhoc.v2.adhoc-signing-pr.* | |
| - project:adhoc:releng:signing:cert:dep-signing | |
| - queue:cancel-task-group:adhoc-level-1/* | |
| - queue:cancel-task:adhoc-level-1/* | |
| - queue:create-task:highest:adhoc-1/* | |
| - queue:create-task:highest:adhoc-t/* | |
| - - queue:create-task:highest:built-in/* | |
| - queue:create-task:highest:scriptworker-k8s/adhoc-1-* | |
| - queue:create-task:highest:scriptworker-k8s/adhoc-t-* | |
| - queue:create-task:highest:scriptworker-prov-v1/adhoc-1-* | |
| - queue:create-task:highest:scriptworker-prov-v1/adhoc-signing-mac-dev | |
| - queue:create-task:highest:scriptworker-prov-v1/adhoc-t-* | |
| + - queue:create-task:low:adhoc-1/* | |
| + - queue:create-task:low:adhoc-t/* | |
| + - queue:create-task:low:built-in/* | |
| - queue:get-artifact:releng/adhoc/* | |
| - queue:rerun-task:adhoc-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.adhoc-signing.cache.level-1.* | |
| - queue:route:index.adhoc.cache.head.* | |
| - queue:route:index.adhoc.cache.level-1.* | |
| - queue:route:index.adhoc.cache.pr.* | |
| - queue:route:index.adhoc.v2.adhoc-signing-pr.* | |
| @@ -130493,18 +131076,42 @@ Role=repo:github.com/mozilla-releng/balrog:branch:*: | |
| Role=repo:github.com/mozilla-releng/balrog:branch:main: | |
| roleId: repo:github.com/mozilla-releng/balrog:branch:main | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| + - docker-worker:cache:releng-level-3-* | |
| + - generic-worker:cache:releng-level-3-* | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - index:insert-task:releng.cache.level-3.* | |
| + - index:insert-task:releng.v2.balrog.* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:cancel-task:releng-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:rerun-task:releng-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| - queue:route:index.project.balrog.* | |
| + - queue:route:index.releng.cache.level-3.* | |
| + - queue:route:index.releng.v2.balrog.* | |
| - queue:route:notify.* | |
| + - queue:scheduler-id:releng-level-3 | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/level-3/* | |
| + - secrets:get:project/releng/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - secrets:get:repo:github.com/mozilla-releng/balrog:coveralls | |
| - secrets:get:repo:github.com/mozilla-releng/balrog:dockerhub | |
| Role=repo:github.com/mozilla-releng/balrog:pull-request: | |
| roleId: repo:github.com/mozilla-releng/balrog:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| @@ -130517,19 +131124,19 @@ Role=repo:github.com/mozilla-releng/balrog:pull-request: | |
| - index:insert-task:releng.cache.level-1.* | |
| - index:insert-task:releng.cache.pr.* | |
| - index:insert-task:releng.v2.balrog-pr.* | |
| - notify:email:* | |
| - notify:irc-channel:* | |
| - notify:irc-user:* | |
| - queue:cancel-task-group:releng-level-1/* | |
| - queue:cancel-task:releng-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:releng-1/* | |
| - - queue:create-task:highest:releng-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:releng-1/* | |
| + - queue:create-task:low:releng-t/* | |
| - queue:rerun-task:releng-level-1/* | |
| - queue:route:checks | |
| - queue:route:garbage.* | |
| - queue:route:index.garbage.* | |
| - queue:route:index.releng.cache.head.* | |
| - queue:route:index.releng.cache.level-1.* | |
| - queue:route:index.releng.cache.pr.* | |
| - queue:route:index.releng.v2.balrog-pr.* | |
| @@ -130602,16 +131209,37 @@ Role=repo:github.com/mozilla-releng/build-mar:*: | |
| - queue:route:checks | |
| - queue:route:garbage.* | |
| - queue:route:index.garbage.* | |
| - queue:route:notify.email.* | |
| - queue:route:notify.irc-channel.* | |
| - queue:route:notify.irc-user.* | |
| - queue:scheduler-id:taskcluster-github | |
| + Role=repo:github.com/mozilla-releng/build-mar:branch:master: | |
| + roleId: repo:github.com/mozilla-releng/build-mar:branch:master | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - in-tree:hook-action:project-releng/in-tree-action-1-* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:create-task:low:releng-1/* | |
| + - queue:create-task:low:releng-t/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + | |
| Role=repo:github.com/mozilla-releng/firefox-ci-playground-private:*: | |
| roleId: repo:github.com/mozilla-releng/firefox-ci-playground-private:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:mozilla-level-1-* | |
| @@ -130633,16 +131261,47 @@ Role=repo:github.com/mozilla-releng/firefox-ci-playground-private:*: | |
| - secrets:get:project/mozilla/firefox-ci-playground/level-1/* | |
| - secrets:get:project/mozilla/firefox-ci-playground/level-any/* | |
| - secrets:get:project/mozilla/level-1/* | |
| - secrets:get:project/mozilla/level-any/* | |
| - secrets:get:project/releng/releng-github-clone-ssh | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla-releng/firefox-ci-playground-private:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/firefox-ci-playground-private:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:mozilla-level-1-* | |
| + - docker-worker:cache:mozilla-project-firefox-ci-playground-level-1-* | |
| + - generic-worker:cache:mozilla-level-1-* | |
| + - generic-worker:cache:mozilla-project-firefox-ci-playground-level-1-* | |
| + - in-tree:hook-action:project-mozilla/in-tree-action-1-* | |
| + - index:insert-task:mozilla.v2.firefox-ci-playground-private.* | |
| + - index:insert-task:mozilla.v2.firefox-ci-playground.cache.level-1.* | |
| + - queue:cancel-task:mozilla-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozilla-1/* | |
| + - queue:create-task:low:mozilla-t/* | |
| + - queue:rerun-task:mozilla-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozilla.v2.firefox-ci-playground-private.* | |
| + - queue:route:index.mozilla.v2.firefox-ci-playground.cache.level-1.* | |
| + - queue:scheduler-id:mozilla-level-1 | |
| + - secrets:get:project/mozilla/firefox-ci-playground/level-1/* | |
| + - secrets:get:project/mozilla/firefox-ci-playground/level-any/* | |
| + - secrets:get:project/mozilla/level-1/* | |
| + - secrets:get:project/mozilla/level-any/* | |
| + - secrets:get:project/releng/releng-github-clone-ssh | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla-releng/firefox-ci-playground-private:pull-request: | |
| roleId: repo:github.com/mozilla-releng/firefox-ci-playground-private:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - index:insert-task:mozilla.v2.firefox-ci-playground-private-pr.* | |
| @@ -130677,16 +131336,44 @@ Role=repo:github.com/mozilla-releng/firefox-ci-playground:*: | |
| - queue:scheduler-id:mozilla-level-1 | |
| - secrets:get:project/mozilla/firefox-ci-playground/level-1/* | |
| - secrets:get:project/mozilla/firefox-ci-playground/level-any/* | |
| - secrets:get:project/mozilla/level-1/* | |
| - secrets:get:project/mozilla/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla-releng/firefox-ci-playground:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/firefox-ci-playground:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:mozilla-level-1-* | |
| + - docker-worker:cache:mozilla-project-firefox-ci-playground-level-1-* | |
| + - generic-worker:cache:mozilla-level-1-* | |
| + - generic-worker:cache:mozilla-project-firefox-ci-playground-level-1-* | |
| + - in-tree:hook-action:project-mozilla/in-tree-action-1-* | |
| + - index:insert-task:mozilla.v2.firefox-ci-playground.* | |
| + - queue:cancel-task:mozilla-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozilla-1/* | |
| + - queue:create-task:low:mozilla-t/* | |
| + - queue:rerun-task:mozilla-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozilla.v2.firefox-ci-playground.* | |
| + - queue:scheduler-id:mozilla-level-1 | |
| + - secrets:get:project/mozilla/firefox-ci-playground/level-1/* | |
| + - secrets:get:project/mozilla/firefox-ci-playground/level-any/* | |
| + - secrets:get:project/mozilla/level-1/* | |
| + - secrets:get:project/mozilla/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla-releng/firefox-ci-playground:pull-request: | |
| roleId: repo:github.com/mozilla-releng/firefox-ci-playground:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - index:insert-task:mozilla.v2.firefox-ci-playground-pr.* | |
| @@ -130759,34 +131446,67 @@ Role=repo:github.com/mozilla-releng/fxci-config:branch:*: | |
| - queue:route:tc-treeherder.fxci-config.* | |
| - queue:route:tc-treeherder.v2.fxci-config.* | |
| - queue:scheduler-id:ci-level-3 | |
| - secrets:get:project/ci/level-3/* | |
| - secrets:get:project/ci/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla-releng/fxci-config:branch:migration: | |
| + roleId: repo:github.com/mozilla-releng/fxci-config:branch:migration | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:ci-level-3-* | |
| + - generic-worker:cache:ci-level-3-* | |
| + - in-tree:hook-action:project-ci/in-tree-action-3-* | |
| + - index:insert-task:ci.cache.level-3.* | |
| + - index:insert-task:ci.v2.fxci-config.* | |
| + - queue:cancel-task:ci-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:ci-3/* | |
| + - queue:create-task:highest:ci-t/* | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-3-decision | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-3-images | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| + - queue:rerun-task:ci-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.ci.cache.level-3.* | |
| + - queue:route:index.ci.v2.fxci-config.* | |
| + - queue:route:tc-treeherder-stage.fxci-config.* | |
| + - queue:route:tc-treeherder-stage.v2.fxci-config.* | |
| + - queue:route:tc-treeherder.fxci-config.* | |
| + - queue:route:tc-treeherder.v2.fxci-config.* | |
| + - queue:scheduler-id:ci-level-3 | |
| + - secrets:get:project/ci/level-3/* | |
| + - secrets:get:project/ci/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla-releng/fxci-config:pr-action:*: | |
| roleId: repo:github.com/mozilla-releng/fxci-config:pr-action:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:ci-level-1-* | |
| - generic-worker:cache:ci-level-1-* | |
| - in-tree:hook-action:project-ci/in-tree-action-1-* | |
| - index:insert-task:ci.cache.level-1.* | |
| - queue:cancel-task:ci-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:ci-1/* | |
| - - queue:create-task:highest:ci-t/* | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-decision | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-images | |
| - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:ci-1/* | |
| + - queue:create-task:low:ci-t/* | |
| - queue:rerun-task:ci-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.ci.cache.level-1.* | |
| - queue:route:tc-treeherder-stage.v2.fxci-config-pr.* | |
| - queue:route:tc-treeherder.v2.fxci-config-pr.* | |
| - queue:scheduler-id:ci-level-1 | |
| - secrets:get:project/ci/level-1/* | |
| - secrets:get:project/ci/level-any/* | |
| @@ -130805,22 +131525,22 @@ Role=repo:github.com/mozilla-releng/fxci-config:pull-request: | |
| - in-tree:hook-action:project-ci/in-tree-action-1-* | |
| - in-tree:hook-action:project-ci/in-tree-pr-action-1-* | |
| - index:insert-task:ci.cache.head.* | |
| - index:insert-task:ci.cache.level-1.* | |
| - index:insert-task:ci.cache.pr.* | |
| - index:insert-task:ci.v2.fxci-config-pr.* | |
| - queue:cancel-task-group:ci-level-1/* | |
| - queue:cancel-task:ci-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:ci-1/* | |
| - - queue:create-task:highest:ci-t/* | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-decision | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-images | |
| - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:ci-1/* | |
| + - queue:create-task:low:ci-t/* | |
| - queue:rerun-task:ci-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.ci.cache.head.* | |
| - queue:route:index.ci.cache.level-1.* | |
| - queue:route:index.ci.cache.pr.* | |
| - queue:route:index.ci.v2.fxci-config-pr.* | |
| - queue:route:tc-treeherder-stage.v2.fxci-config-pr.* | |
| - queue:route:tc-treeherder.v2.fxci-config-pr.* | |
| @@ -130843,22 +131563,22 @@ Role=repo:github.com/mozilla-releng/fxci-config:pull-request-untrusted: | |
| - in-tree:hook-action:project-ci/in-tree-action-1-* | |
| - in-tree:hook-action:project-ci/in-tree-pr-action-1-* | |
| - index:insert-task:ci.cache.head.* | |
| - index:insert-task:ci.cache.level-1.* | |
| - index:insert-task:ci.cache.pr.* | |
| - index:insert-task:ci.v2.fxci-config-pr.* | |
| - queue:cancel-task-group:ci-level-1/* | |
| - queue:cancel-task:ci-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:ci-1/* | |
| - - queue:create-task:highest:ci-t/* | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-decision | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-images | |
| - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:ci-1/* | |
| + - queue:create-task:low:ci-t/* | |
| - queue:rerun-task:ci-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.ci.cache.head.* | |
| - queue:route:index.ci.cache.level-1.* | |
| - queue:route:index.ci.cache.pr.* | |
| - queue:route:index.ci.v2.fxci-config-pr.* | |
| - queue:route:tc-treeherder-stage.v2.fxci-config-pr.* | |
| - queue:route:tc-treeherder.v2.fxci-config-pr.* | |
| @@ -130977,33 +131697,123 @@ Role=repo:github.com/mozilla-releng/k8s-autoscale:branch:*: | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/k8s-autoscale:branch:dev: | |
| roleId: repo:github.com/mozilla-releng/k8s-autoscale:branch:dev | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:project/releng/k8s-autoscale/deploy | |
| + scopes: | |
| + - docker-worker:cache:releng-level-3-* | |
| + - docker-worker:cache:releng-project-k8s-autoscale-level-3-* | |
| + - generic-worker:cache:releng-level-3-* | |
| + - generic-worker:cache:releng-project-k8s-autoscale-level-3-* | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - index:insert-task:releng.v2.k8s-autoscale.* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:cancel-task:releng-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:rerun-task:releng-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:index.releng.v2.k8s-autoscale.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:releng-level-3 | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/k8s-autoscale/deploy | |
| + - secrets:get:project/releng/k8s-autoscale/level-3/* | |
| + - secrets:get:project/releng/k8s-autoscale/level-any/* | |
| + - secrets:get:project/releng/level-3/* | |
| + - secrets:get:project/releng/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/k8s-autoscale:branch:master: | |
| roleId: repo:github.com/mozilla-releng/k8s-autoscale:branch:master | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:project/releng/k8s-autoscale/deploy | |
| + scopes: | |
| + - docker-worker:cache:releng-level-3-* | |
| + - docker-worker:cache:releng-project-k8s-autoscale-level-3-* | |
| + - generic-worker:cache:releng-level-3-* | |
| + - generic-worker:cache:releng-project-k8s-autoscale-level-3-* | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - index:insert-task:releng.v2.k8s-autoscale.* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:cancel-task:releng-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:rerun-task:releng-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:index.releng.v2.k8s-autoscale.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:releng-level-3 | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/k8s-autoscale/deploy | |
| + - secrets:get:project/releng/k8s-autoscale/level-3/* | |
| + - secrets:get:project/releng/k8s-autoscale/level-any/* | |
| + - secrets:get:project/releng/level-3/* | |
| + - secrets:get:project/releng/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/k8s-autoscale:branch:production: | |
| roleId: repo:github.com/mozilla-releng/k8s-autoscale:branch:production | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:project/releng/k8s-autoscale/deploy | |
| + scopes: | |
| + - docker-worker:cache:releng-level-3-* | |
| + - docker-worker:cache:releng-project-k8s-autoscale-level-3-* | |
| + - generic-worker:cache:releng-level-3-* | |
| + - generic-worker:cache:releng-project-k8s-autoscale-level-3-* | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - index:insert-task:releng.v2.k8s-autoscale.* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:cancel-task:releng-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:rerun-task:releng-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:index.releng.v2.k8s-autoscale.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:releng-level-3 | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/k8s-autoscale/deploy | |
| + - secrets:get:project/releng/k8s-autoscale/level-3/* | |
| + - secrets:get:project/releng/k8s-autoscale/level-any/* | |
| + - secrets:get:project/releng/level-3/* | |
| + - secrets:get:project/releng/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/k8s-autoscale:pull-request: | |
| roleId: repo:github.com/mozilla-releng/k8s-autoscale:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -131016,19 +131826,19 @@ Role=repo:github.com/mozilla-releng/k8s-autoscale:pull-request: | |
| - index:insert-task:releng.v2.k8s-autoscale.cache.head.* | |
| - index:insert-task:releng.v2.k8s-autoscale.cache.level-1.* | |
| - index:insert-task:releng.v2.k8s-autoscale.cache.pr.* | |
| - notify:email:* | |
| - notify:irc-channel:* | |
| - notify:irc-user:* | |
| - queue:cancel-task-group:releng-level-1/* | |
| - queue:cancel-task:releng-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:releng-1/* | |
| - - queue:create-task:highest:releng-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:releng-1/* | |
| + - queue:create-task:low:releng-t/* | |
| - queue:rerun-task:releng-level-1/* | |
| - queue:route:checks | |
| - queue:route:garbage.* | |
| - queue:route:index.garbage.* | |
| - queue:route:index.releng.v2.k8s-autoscale-pr.* | |
| - queue:route:index.releng.v2.k8s-autoscale.cache.head.* | |
| - queue:route:index.releng.v2.k8s-autoscale.cache.level-1.* | |
| - queue:route:index.releng.v2.k8s-autoscale.cache.pr.* | |
| @@ -131105,16 +131915,44 @@ Role=repo:github.com/mozilla-releng/mozilla-linux-pkg-manager:*: | |
| - queue:scheduler-id:mozilla-level-1 | |
| - secrets:get:project/mozilla/level-1/* | |
| - secrets:get:project/mozilla/level-any/* | |
| - secrets:get:project/mozilla/mozilla-linux-pkg-manager/level-1/* | |
| - secrets:get:project/mozilla/mozilla-linux-pkg-manager/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla-releng/mozilla-linux-pkg-manager:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/mozilla-linux-pkg-manager:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:mozilla-level-1-* | |
| + - docker-worker:cache:mozilla-project-mozilla-linux-pkg-manager-level-1-* | |
| + - generic-worker:cache:mozilla-level-1-* | |
| + - generic-worker:cache:mozilla-project-mozilla-linux-pkg-manager-level-1-* | |
| + - in-tree:hook-action:project-mozilla/in-tree-action-1-* | |
| + - index:insert-task:mozilla.v2.mozilla-linux-pkg-manager.* | |
| + - queue:cancel-task:mozilla-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozilla-1/* | |
| + - queue:create-task:low:mozilla-t/* | |
| + - queue:rerun-task:mozilla-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozilla.v2.mozilla-linux-pkg-manager.* | |
| + - queue:scheduler-id:mozilla-level-1 | |
| + - secrets:get:project/mozilla/level-1/* | |
| + - secrets:get:project/mozilla/level-any/* | |
| + - secrets:get:project/mozilla/mozilla-linux-pkg-manager/level-1/* | |
| + - secrets:get:project/mozilla/mozilla-linux-pkg-manager/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla-releng/mozilla-linux-pkg-manager:pull-request: | |
| roleId: repo:github.com/mozilla-releng/mozilla-linux-pkg-manager:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - index:insert-task:mozilla.v2.mozilla-linux-pkg-manager-pr.* | |
| @@ -131201,16 +132039,48 @@ Role=repo:github.com/mozilla-releng/mozilla-taskgraph:branch:*: | |
| - secrets:get:project/releng/taskgraph/mozilla-taskgraph/ci | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - secrets:get:project/taskgraph/level-3/* | |
| - secrets:get:project/taskgraph/level-any/* | |
| - secrets:get:project/taskgraph/mozilla-taskgraph/level-3/* | |
| - secrets:get:project/taskgraph/mozilla-taskgraph/level-any/* | |
| + Role=repo:github.com/mozilla-releng/mozilla-taskgraph:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/mozilla-taskgraph:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:taskgraph-level-3-* | |
| + - docker-worker:cache:taskgraph-project-mozilla-taskgraph-level-3-* | |
| + - generic-worker:cache:taskgraph-level-3-* | |
| + - generic-worker:cache:taskgraph-project-mozilla-taskgraph-level-3-* | |
| + - in-tree:hook-action:project-taskgraph/in-tree-action-3-* | |
| + - index:insert-task:taskgraph.v2.mozilla-taskgraph.* | |
| + - queue:cancel-task:taskgraph-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:taskgraph-3/* | |
| + - queue:create-task:highest:taskgraph-t/* | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-3-decision | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-3-images | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| + - queue:rerun-task:taskgraph-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.taskgraph.v2.mozilla-taskgraph.* | |
| + - queue:scheduler-id:taskgraph-level-3 | |
| + - secrets:get:project/releng/taskgraph/mozilla-taskgraph/ci | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/taskgraph/level-3/* | |
| + - secrets:get:project/taskgraph/level-any/* | |
| + - secrets:get:project/taskgraph/mozilla-taskgraph/level-3/* | |
| + - secrets:get:project/taskgraph/mozilla-taskgraph/level-any/* | |
| + | |
| Role=repo:github.com/mozilla-releng/mozilla-taskgraph:pull-request: | |
| roleId: repo:github.com/mozilla-releng/mozilla-taskgraph:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:taskgraph-level-1-* | |
| @@ -131219,22 +132089,22 @@ Role=repo:github.com/mozilla-releng/mozilla-taskgraph:pull-request: | |
| - generic-worker:cache:taskgraph-project-mozilla-taskgraph-level-1-* | |
| - in-tree:hook-action:project-taskgraph/in-tree-action-1-* | |
| - index:insert-task:taskgraph.v2.mozilla-taskgraph-pr.* | |
| - index:insert-task:taskgraph.v2.mozilla-taskgraph.cache.head.* | |
| - index:insert-task:taskgraph.v2.mozilla-taskgraph.cache.level-1.* | |
| - index:insert-task:taskgraph.v2.mozilla-taskgraph.cache.pr.* | |
| - queue:cancel-task-group:taskgraph-level-1/* | |
| - queue:cancel-task:taskgraph-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:taskgraph-1/* | |
| - - queue:create-task:highest:taskgraph-t/* | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-decision | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-images | |
| - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:taskgraph-1/* | |
| + - queue:create-task:low:taskgraph-t/* | |
| - queue:rerun-task:taskgraph-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.taskgraph.v2.mozilla-taskgraph-pr.* | |
| - queue:route:index.taskgraph.v2.mozilla-taskgraph.cache.head.* | |
| - queue:route:index.taskgraph.v2.mozilla-taskgraph.cache.level-1.* | |
| - queue:route:index.taskgraph.v2.mozilla-taskgraph.cache.pr.* | |
| - queue:scheduler-id:taskgraph-level-1 | |
| - queue:seal-task-group:taskgraph-level-1/* | |
| @@ -131259,22 +132129,22 @@ Role=repo:github.com/mozilla-releng/mozilla-taskgraph:pull-request-untrusted: | |
| - generic-worker:cache:taskgraph-project-mozilla-taskgraph-level-1-* | |
| - in-tree:hook-action:project-taskgraph/in-tree-action-1-* | |
| - index:insert-task:taskgraph.v2.mozilla-taskgraph-pr.* | |
| - index:insert-task:taskgraph.v2.mozilla-taskgraph.cache.head.* | |
| - index:insert-task:taskgraph.v2.mozilla-taskgraph.cache.level-1.* | |
| - index:insert-task:taskgraph.v2.mozilla-taskgraph.cache.pr.* | |
| - queue:cancel-task-group:taskgraph-level-1/* | |
| - queue:cancel-task:taskgraph-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:taskgraph-1/* | |
| - - queue:create-task:highest:taskgraph-t/* | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-decision | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-images | |
| - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:taskgraph-1/* | |
| + - queue:create-task:low:taskgraph-t/* | |
| - queue:rerun-task:taskgraph-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.taskgraph.v2.mozilla-taskgraph-pr.* | |
| - queue:route:index.taskgraph.v2.mozilla-taskgraph.cache.head.* | |
| - queue:route:index.taskgraph.v2.mozilla-taskgraph.cache.level-1.* | |
| - queue:route:index.taskgraph.v2.mozilla-taskgraph.cache.pr.* | |
| - queue:scheduler-id:taskgraph-level-1 | |
| - queue:seal-task-group:taskgraph-level-1/* | |
| @@ -131333,16 +132203,37 @@ Role=repo:github.com/mozilla-releng/mozilla-version:*: | |
| - queue:route:checks | |
| - queue:route:garbage.* | |
| - queue:route:index.garbage.* | |
| - queue:route:notify.email.* | |
| - queue:route:notify.irc-channel.* | |
| - queue:route:notify.irc-user.* | |
| - queue:scheduler-id:taskcluster-github | |
| + Role=repo:github.com/mozilla-releng/mozilla-version:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/mozilla-version:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - in-tree:hook-action:project-releng/in-tree-action-1-* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:create-task:low:releng-1/* | |
| + - queue:create-task:low:releng-t/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + | |
| Role=repo:github.com/mozilla-releng/product-details:action:*: | |
| roleId: repo:github.com/mozilla-releng/product-details:action:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| @@ -131375,53 +132266,116 @@ Role=repo:github.com/mozilla-releng/product-details:branch:*: | |
| - queue:route:checks | |
| - queue:route:garbage.* | |
| - queue:route:index.garbage.* | |
| - queue:route:notify.email.* | |
| - queue:route:notify.irc-channel.* | |
| - queue:route:notify.irc-user.* | |
| - queue:scheduler-id:taskcluster-github | |
| + Role=repo:github.com/mozilla-releng/product-details:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/product-details:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + | |
| Role=repo:github.com/mozilla-releng/product-details:branch:production: | |
| roleId: repo:github.com/mozilla-releng/product-details:branch:production | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:repo:github.com/mozilla-releng/product-details:branch:production | |
| + scopes: | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:repo:github.com/mozilla-releng/product-details:branch:production | |
| Role=repo:github.com/mozilla-releng/product-details:branch:staging: | |
| roleId: repo:github.com/mozilla-releng/product-details:branch:staging | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:repo:github.com/mozilla-releng/product-details:branch:staging | |
| + scopes: | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:repo:github.com/mozilla-releng/product-details:branch:staging | |
| Role=repo:github.com/mozilla-releng/product-details:branch:testing: | |
| roleId: repo:github.com/mozilla-releng/product-details:branch:testing | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:repo:github.com/mozilla-releng/product-details:branch:testing | |
| + scopes: | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:repo:github.com/mozilla-releng/product-details:branch:testing | |
| Role=repo:github.com/mozilla-releng/product-details:pull-request: | |
| roleId: repo:github.com/mozilla-releng/product-details:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - in-tree:hook-action:project-releng/in-tree-action-1-* | |
| - notify:email:* | |
| - notify:irc-channel:* | |
| - notify:irc-user:* | |
| - - queue:create-task:highest:releng-1/* | |
| - - queue:create-task:highest:releng-t/* | |
| + - queue:create-task:low:releng-1/* | |
| + - queue:create-task:low:releng-t/* | |
| - queue:route:checks | |
| - queue:route:garbage.* | |
| - queue:route:index.garbage.* | |
| - queue:route:notify.email.* | |
| - queue:route:notify.irc-channel.* | |
| - queue:route:notify.irc-user.* | |
| - queue:scheduler-id:taskcluster-github | |
| @@ -131469,16 +132423,44 @@ Role=repo:github.com/mozilla-releng/redo:*: | |
| - queue:scheduler-id:mozilla-level-1 | |
| - secrets:get:project/mozilla/level-1/* | |
| - secrets:get:project/mozilla/level-any/* | |
| - secrets:get:project/mozilla/redo/level-1/* | |
| - secrets:get:project/mozilla/redo/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla-releng/redo:branch:master: | |
| + roleId: repo:github.com/mozilla-releng/redo:branch:master | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:mozilla-level-1-* | |
| + - docker-worker:cache:mozilla-project-redo-level-1-* | |
| + - generic-worker:cache:mozilla-level-1-* | |
| + - generic-worker:cache:mozilla-project-redo-level-1-* | |
| + - in-tree:hook-action:project-mozilla/in-tree-action-1-* | |
| + - index:insert-task:mozilla.v2.redo.* | |
| + - queue:cancel-task:mozilla-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozilla-1/* | |
| + - queue:create-task:low:mozilla-t/* | |
| + - queue:rerun-task:mozilla-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozilla.v2.redo.* | |
| + - queue:scheduler-id:mozilla-level-1 | |
| + - secrets:get:project/mozilla/level-1/* | |
| + - secrets:get:project/mozilla/level-any/* | |
| + - secrets:get:project/mozilla/redo/level-1/* | |
| + - secrets:get:project/mozilla/redo/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla-releng/redo:pull-request: | |
| roleId: repo:github.com/mozilla-releng/redo:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - index:insert-task:mozilla.v2.redo-pr.* | |
| @@ -131513,16 +132495,44 @@ Role=repo:github.com/mozilla-releng/reps:*: | |
| - queue:scheduler-id:mozilla-level-1 | |
| - secrets:get:project/mozilla/level-1/* | |
| - secrets:get:project/mozilla/level-any/* | |
| - secrets:get:project/mozilla/reps/level-1/* | |
| - secrets:get:project/mozilla/reps/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla-releng/reps:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/reps:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:mozilla-level-1-* | |
| + - docker-worker:cache:mozilla-project-reps-level-1-* | |
| + - generic-worker:cache:mozilla-level-1-* | |
| + - generic-worker:cache:mozilla-project-reps-level-1-* | |
| + - in-tree:hook-action:project-mozilla/in-tree-action-1-* | |
| + - index:insert-task:mozilla.v2.reps.* | |
| + - queue:cancel-task:mozilla-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozilla-1/* | |
| + - queue:create-task:low:mozilla-t/* | |
| + - queue:rerun-task:mozilla-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozilla.v2.reps.* | |
| + - queue:scheduler-id:mozilla-level-1 | |
| + - secrets:get:project/mozilla/level-1/* | |
| + - secrets:get:project/mozilla/level-any/* | |
| + - secrets:get:project/mozilla/reps/level-1/* | |
| + - secrets:get:project/mozilla/reps/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla-releng/reps:pull-request: | |
| roleId: repo:github.com/mozilla-releng/reps:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - index:insert-task:mozilla.v2.reps-pr.* | |
| @@ -131611,25 +132621,101 @@ Role=repo:github.com/mozilla-releng/scriptworker-scripts:branch:*: | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/scriptworker-scripts:branch:dev*: | |
| roleId: repo:github.com/mozilla-releng/scriptworker-scripts:branch:dev* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:project/releng/scriptworker-scripts/deploy | |
| + scopes: | |
| + - docker-worker:cache:scriptworker-level-3-* | |
| + - generic-worker:cache:scriptworker-level-3-* | |
| + - in-tree:hook-action:project-scriptworker/in-tree-action-3-* | |
| + - index:insert-task:scriptworker.cache.level-3.* | |
| + - index:insert-task:scriptworker.v2.scriptworker-scripts.* | |
| + - queue:cancel-task:scriptworker-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:scriptworker-1/* | |
| + - queue:create-task:highest:scriptworker-3/* | |
| + - queue:create-task:highest:scriptworker-k8s/scriptworker-t-* | |
| + - queue:create-task:highest:scriptworker-t/* | |
| + - queue:rerun-task:scriptworker-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.scriptworker.cache.level-1.* | |
| + - queue:route:index.scriptworker.cache.level-3.* | |
| + - queue:route:index.scriptworker.v2.scriptworker-scripts.* | |
| + - queue:scheduler-id:scriptworker-level-1 | |
| + - queue:scheduler-id:scriptworker-level-3 | |
| + - secrets:get:project/releng/scriptworker-scripts/deploy | |
| + - secrets:get:project/scriptworker/level-3/* | |
| + - secrets:get:project/scriptworker/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:github.com/mozilla-releng/scriptworker-scripts:branch:master: | |
| + roleId: repo:github.com/mozilla-releng/scriptworker-scripts:branch:master | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:scriptworker-level-3-* | |
| + - generic-worker:cache:scriptworker-level-3-* | |
| + - in-tree:hook-action:project-scriptworker/in-tree-action-3-* | |
| + - index:insert-task:scriptworker.cache.level-3.* | |
| + - index:insert-task:scriptworker.v2.scriptworker-scripts.* | |
| + - queue:cancel-task:scriptworker-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:scriptworker-1/* | |
| + - queue:create-task:highest:scriptworker-3/* | |
| + - queue:create-task:highest:scriptworker-k8s/scriptworker-t-* | |
| + - queue:create-task:highest:scriptworker-t/* | |
| + - queue:rerun-task:scriptworker-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.scriptworker.cache.level-1.* | |
| + - queue:route:index.scriptworker.cache.level-3.* | |
| + - queue:route:index.scriptworker.v2.scriptworker-scripts.* | |
| + - queue:scheduler-id:scriptworker-level-1 | |
| + - queue:scheduler-id:scriptworker-level-3 | |
| + - secrets:get:project/scriptworker/level-3/* | |
| + - secrets:get:project/scriptworker/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/scriptworker-scripts:branch:production*: | |
| roleId: repo:github.com/mozilla-releng/scriptworker-scripts:branch:production* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:project/releng/scriptworker-scripts/deploy | |
| + scopes: | |
| + - docker-worker:cache:scriptworker-level-3-* | |
| + - generic-worker:cache:scriptworker-level-3-* | |
| + - in-tree:hook-action:project-scriptworker/in-tree-action-3-* | |
| + - index:insert-task:scriptworker.cache.level-3.* | |
| + - index:insert-task:scriptworker.v2.scriptworker-scripts.* | |
| + - queue:cancel-task:scriptworker-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:scriptworker-1/* | |
| + - queue:create-task:highest:scriptworker-3/* | |
| + - queue:create-task:highest:scriptworker-k8s/scriptworker-t-* | |
| + - queue:create-task:highest:scriptworker-t/* | |
| + - queue:rerun-task:scriptworker-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.scriptworker.cache.level-1.* | |
| + - queue:route:index.scriptworker.cache.level-3.* | |
| + - queue:route:index.scriptworker.v2.scriptworker-scripts.* | |
| + - queue:scheduler-id:scriptworker-level-1 | |
| + - queue:scheduler-id:scriptworker-level-3 | |
| + - secrets:get:project/releng/scriptworker-scripts/deploy | |
| + - secrets:get:project/scriptworker/level-3/* | |
| + - secrets:get:project/scriptworker/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/scriptworker-scripts:pull-request: | |
| roleId: repo:github.com/mozilla-releng/scriptworker-scripts:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -131637,20 +132723,22 @@ Role=repo:github.com/mozilla-releng/scriptworker-scripts:pull-request: | |
| - generic-worker:cache:scriptworker-level-1-* | |
| - in-tree:hook-action:project-scriptworker/in-tree-action-1-* | |
| - index:insert-task:scriptworker.cache.head.* | |
| - index:insert-task:scriptworker.cache.level-1.* | |
| - index:insert-task:scriptworker.cache.pr.* | |
| - index:insert-task:scriptworker.v2.scriptworker-scripts-pr.* | |
| - queue:cancel-task-group:scriptworker-level-1/* | |
| - queue:cancel-task:scriptworker-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - queue:create-task:highest:scriptworker-1/* | |
| - queue:create-task:highest:scriptworker-k8s/scriptworker-t-* | |
| - queue:create-task:highest:scriptworker-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:scriptworker-1/* | |
| + - queue:create-task:low:scriptworker-t/* | |
| - queue:rerun-task:scriptworker-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.scriptworker.cache.head.* | |
| - queue:route:index.scriptworker.cache.level-1.* | |
| - queue:route:index.scriptworker.cache.pr.* | |
| - queue:route:index.scriptworker.v2.scriptworker-scripts-pr.* | |
| - queue:route:index.scriptworker.v2.scriptworker-scripts.* | |
| - queue:scheduler-id:scriptworker-level-1 | |
| @@ -131742,16 +132830,34 @@ Role=repo:github.com/mozilla-releng/scriptworker:branch:*: | |
| Role=repo:github.com/mozilla-releng/scriptworker:branch:main: | |
| roleId: repo:github.com/mozilla-releng/scriptworker:branch:main | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| + - docker-worker:cache:scriptworker-level-3-* | |
| + - generic-worker:cache:scriptworker-level-3-* | |
| + - in-tree:hook-action:project-scriptworker/in-tree-action-3-* | |
| + - index:insert-task:scriptworker.cache.level-3.* | |
| + - index:insert-task:scriptworker.v2.scriptworker.* | |
| + - queue:cancel-task:scriptworker-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:scriptworker-3/* | |
| + - queue:create-task:highest:scriptworker-t/* | |
| + - queue:rerun-task:scriptworker-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.scriptworker.cache.level-3.* | |
| + - queue:route:index.scriptworker.v2.scriptworker.* | |
| + - queue:scheduler-id:scriptworker-level-3 | |
| + - secrets:get:project/scriptworker/level-3/* | |
| + - secrets:get:project/scriptworker/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - secrets:get:repo:github.com/mozilla-releng/scriptworker:coveralls | |
| - secrets:get:repo:github.com/mozilla-releng/scriptworker:github | |
| Role=repo:github.com/mozilla-releng/scriptworker:pull-request: | |
| roleId: repo:github.com/mozilla-releng/scriptworker:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| @@ -131761,19 +132867,19 @@ Role=repo:github.com/mozilla-releng/scriptworker:pull-request: | |
| - generic-worker:cache:scriptworker-level-1-* | |
| - in-tree:hook-action:project-scriptworker/in-tree-action-1-* | |
| - index:insert-task:scriptworker.cache.head.* | |
| - index:insert-task:scriptworker.cache.level-1.* | |
| - index:insert-task:scriptworker.cache.pr.* | |
| - index:insert-task:scriptworker.v2.scriptworker-pr.* | |
| - queue:cancel-task-group:scriptworker-level-1/* | |
| - queue:cancel-task:scriptworker-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:scriptworker-1/* | |
| - - queue:create-task:highest:scriptworker-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:scriptworker-1/* | |
| + - queue:create-task:low:scriptworker-t/* | |
| - queue:rerun-task:scriptworker-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.scriptworker.cache.head.* | |
| - queue:route:index.scriptworker.cache.level-1.* | |
| - queue:route:index.scriptworker.cache.pr.* | |
| - queue:route:index.scriptworker.v2.scriptworker-pr.* | |
| - queue:scheduler-id:scriptworker-level-1 | |
| - queue:seal-task-group:scriptworker-level-1/* | |
| @@ -131883,25 +132989,119 @@ Role=repo:github.com/mozilla-releng/shipit:branch:*: | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/shipit:branch:dev: | |
| roleId: repo:github.com/mozilla-releng/shipit:branch:dev | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:project/releng/shipit/deploy | |
| + scopes: | |
| + - docker-worker:cache:releng-level-3-* | |
| + - generic-worker:cache:releng-level-3-* | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - index:insert-task:releng.cache.level-3.* | |
| + - index:insert-task:releng.v2.shipit.* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:cancel-task:releng-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:rerun-task:releng-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:index.releng.cache.level-3.* | |
| + - queue:route:index.releng.v2.shipit.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:releng-level-3 | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/level-3/* | |
| + - secrets:get:project/releng/level-any/* | |
| + - secrets:get:project/releng/shipit/ci | |
| + - secrets:get:project/releng/shipit/deploy | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:github.com/mozilla-releng/shipit:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/shipit:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:releng-level-3-* | |
| + - generic-worker:cache:releng-level-3-* | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - index:insert-task:releng.cache.level-3.* | |
| + - index:insert-task:releng.v2.shipit.* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:cancel-task:releng-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:rerun-task:releng-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:index.releng.cache.level-3.* | |
| + - queue:route:index.releng.v2.shipit.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:releng-level-3 | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/level-3/* | |
| + - secrets:get:project/releng/level-any/* | |
| + - secrets:get:project/releng/shipit/ci | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/shipit:branch:production: | |
| roleId: repo:github.com/mozilla-releng/shipit:branch:production | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:project/releng/shipit/deploy | |
| + scopes: | |
| + - docker-worker:cache:releng-level-3-* | |
| + - generic-worker:cache:releng-level-3-* | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - index:insert-task:releng.cache.level-3.* | |
| + - index:insert-task:releng.v2.shipit.* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:cancel-task:releng-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:rerun-task:releng-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:index.releng.cache.level-3.* | |
| + - queue:route:index.releng.v2.shipit.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:releng-level-3 | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/level-3/* | |
| + - secrets:get:project/releng/level-any/* | |
| + - secrets:get:project/releng/shipit/ci | |
| + - secrets:get:project/releng/shipit/deploy | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/shipit:pull-request: | |
| roleId: repo:github.com/mozilla-releng/shipit:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -131912,19 +133112,19 @@ Role=repo:github.com/mozilla-releng/shipit:pull-request: | |
| - index:insert-task:releng.cache.level-1.* | |
| - index:insert-task:releng.cache.pr.* | |
| - index:insert-task:releng.v2.shipit-pr.* | |
| - notify:email:* | |
| - notify:irc-channel:* | |
| - notify:irc-user:* | |
| - queue:cancel-task-group:releng-level-1/* | |
| - queue:cancel-task:releng-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:releng-1/* | |
| - - queue:create-task:highest:releng-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:releng-1/* | |
| + - queue:create-task:low:releng-t/* | |
| - queue:rerun-task:releng-level-1/* | |
| - queue:route:checks | |
| - queue:route:garbage.* | |
| - queue:route:index.garbage.* | |
| - queue:route:index.releng.cache.head.* | |
| - queue:route:index.releng.cache.level-1.* | |
| - queue:route:index.releng.cache.pr.* | |
| - queue:route:index.releng.v2.shipit-pr.* | |
| @@ -131999,16 +133199,44 @@ Role=repo:github.com/mozilla-releng/simple-github:*: | |
| - queue:scheduler-id:mozilla-level-1 | |
| - secrets:get:project/mozilla/level-1/* | |
| - secrets:get:project/mozilla/level-any/* | |
| - secrets:get:project/mozilla/simple-github/level-1/* | |
| - secrets:get:project/mozilla/simple-github/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla-releng/simple-github:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/simple-github:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:mozilla-level-1-* | |
| + - docker-worker:cache:mozilla-project-simple-github-level-1-* | |
| + - generic-worker:cache:mozilla-level-1-* | |
| + - generic-worker:cache:mozilla-project-simple-github-level-1-* | |
| + - in-tree:hook-action:project-mozilla/in-tree-action-1-* | |
| + - index:insert-task:mozilla.v2.simple-github.* | |
| + - queue:cancel-task:mozilla-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozilla-1/* | |
| + - queue:create-task:low:mozilla-t/* | |
| + - queue:rerun-task:mozilla-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozilla.v2.simple-github.* | |
| + - queue:scheduler-id:mozilla-level-1 | |
| + - secrets:get:project/mozilla/level-1/* | |
| + - secrets:get:project/mozilla/level-any/* | |
| + - secrets:get:project/mozilla/simple-github/level-1/* | |
| + - secrets:get:project/mozilla/simple-github/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla-releng/simple-github:pull-request: | |
| roleId: repo:github.com/mozilla-releng/simple-github:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - index:insert-task:mozilla.v2.simple-github-pr.* | |
| @@ -132085,29 +133313,84 @@ Role=repo:github.com/mozilla-releng/staging-adhoc-signing:action:*: | |
| Role=repo:github.com/mozilla-releng/staging-adhoc-signing:branch:*: | |
| roleId: repo:github.com/mozilla-releng/staging-adhoc-signing:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| + - docker-worker:cache:adhoc-level-1-* | |
| + - generic-worker:cache:adhoc-level-1-* | |
| + - in-tree:hook-action:project-adhoc/in-tree-action-1-* | |
| + - index:insert-task:adhoc.cache.level-1.* | |
| + - index:insert-task:adhoc.v2.staging-adhoc-signing.* | |
| - project:adhoc:releng:signing:cert:dep-signing | |
| + - queue:cancel-task:adhoc-level-1/* | |
| - queue:create-task:highest:adhoc-1/* | |
| - queue:create-task:highest:adhoc-t/* | |
| - queue:create-task:highest:scriptworker-k8s/adhoc-1-* | |
| - queue:create-task:highest:scriptworker-k8s/adhoc-t-* | |
| - queue:create-task:highest:scriptworker-prov-v1/adhoc-1-* | |
| - queue:create-task:highest:scriptworker-prov-v1/adhoc-signing-mac-dev | |
| - queue:create-task:highest:scriptworker-prov-v1/adhoc-t-* | |
| + - queue:create-task:low:adhoc-1/* | |
| + - queue:create-task:low:adhoc-t/* | |
| + - queue:create-task:low:built-in/* | |
| - queue:get-artifact:releng/adhoc/* | |
| + - queue:rerun-task:adhoc-level-1/* | |
| + - queue:route:checks | |
| - queue:route:index.adhoc-signing.cache.level-1.* | |
| + - queue:route:index.adhoc.cache.level-1.* | |
| - queue:route:index.adhoc.v2.staging-adhoc-manifest.* | |
| - queue:route:index.adhoc.v2.staging-adhoc-signing.* | |
| - queue:route:notify.email.* | |
| + - queue:scheduler-id:adhoc-level-1 | |
| + - secrets:get:project/adhoc/level-1/* | |
| + - secrets:get:project/adhoc/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:github.com/mozilla-releng/staging-adhoc-signing:branch:master: | |
| + roleId: repo:github.com/mozilla-releng/staging-adhoc-signing:branch:master | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:adhoc-level-1-* | |
| + - generic-worker:cache:adhoc-level-1-* | |
| + - in-tree:hook-action:project-adhoc/in-tree-action-1-* | |
| + - index:insert-task:adhoc.cache.level-1.* | |
| + - index:insert-task:adhoc.v2.staging-adhoc-signing.* | |
| + - project:adhoc:releng:signing:cert:dep-signing | |
| + - queue:cancel-task:adhoc-level-1/* | |
| + - queue:create-task:highest:adhoc-1/* | |
| + - queue:create-task:highest:adhoc-t/* | |
| + - queue:create-task:highest:scriptworker-k8s/adhoc-1-* | |
| + - queue:create-task:highest:scriptworker-k8s/adhoc-t-* | |
| + - queue:create-task:highest:scriptworker-prov-v1/adhoc-1-* | |
| + - queue:create-task:highest:scriptworker-prov-v1/adhoc-signing-mac-dev | |
| + - queue:create-task:highest:scriptworker-prov-v1/adhoc-t-* | |
| + - queue:create-task:low:adhoc-1/* | |
| + - queue:create-task:low:adhoc-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:get-artifact:releng/adhoc/* | |
| + - queue:rerun-task:adhoc-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.adhoc-signing.cache.level-1.* | |
| + - queue:route:index.adhoc.cache.level-1.* | |
| + - queue:route:index.adhoc.v2.staging-adhoc-manifest.* | |
| + - queue:route:index.adhoc.v2.staging-adhoc-signing.* | |
| + - queue:route:notify.email.* | |
| + - queue:scheduler-id:adhoc-level-1 | |
| + - secrets:get:project/adhoc/level-1/* | |
| + - secrets:get:project/adhoc/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/staging-adhoc-signing:pull-request: | |
| roleId: repo:github.com/mozilla-releng/staging-adhoc-signing:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -132196,19 +133479,92 @@ Role=repo:github.com/mozilla-releng/staging-application-services:action:release-promotion: | |
| Role=repo:github.com/mozilla-releng/staging-application-services:branch:*: | |
| roleId: repo:github.com/mozilla-releng/staging-application-services:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - - queue:route:index.app-services.v2.staging-application-services.revision.* | |
| + - docker-worker:cache:app-services-level-1-* | |
| + - docker-worker:cache:application-services-* | |
| + - docker-worker:taskcluster-proxy:tooltool.download.internal | |
| + - generic-worker:cache:app-services-level-1-* | |
| + - in-tree:hook-action:project-app-services/in-tree-action-1-* | |
| + - index:insert-task:app-services.cache.level-1.* | |
| + - index:insert-task:app-services.v2.staging-application-services.* | |
| + - project:mozilla:app-services:releng:beetmover:action:direct-push-to-bucket | |
| + - project:mozilla:app-services:releng:beetmover:action:push-to-candidates | |
| + - project:mozilla:app-services:releng:beetmover:action:push-to-maven | |
| + - project:mozilla:app-services:releng:beetmover:bucket:dep | |
| + - project:mozilla:app-services:releng:beetmover:bucket:maven-staging | |
| + - project:mozilla:app-services:releng:signing:cert:dep-signing | |
| + - project:mozilla:app-services:releng:signing:format:* | |
| + - project:releng:services/tooltool/api/download/internal | |
| + - queue:cancel-task:app-services-level-1/* | |
| + - queue:create-task:highest:app-services-1/* | |
| + - queue:create-task:highest:releng-hardware/applicationservices-b-1-osx1015 | |
| + - queue:create-task:highest:scriptworker-k8s/app-services-1-* | |
| + - queue:create-task:highest:scriptworker-k8s/app-services-t-* | |
| + - queue:create-task:low:app-services-1/* | |
| + - queue:create-task:low:app-services-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:rerun-task:app-services-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.app-services.cache.level-1.* | |
| + - queue:route:index.app-services.v2.staging-application-services.* | |
| + - queue:route:index.project.staging-application-services.* | |
| + - queue:scheduler-id:app-services-level-1 | |
| + - secrets:get:project/app-services/level-1/* | |
| + - secrets:get:project/app-services/level-any/* | |
| + - secrets:get:project/staging-application-services/symbols-token | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:github.com/mozilla-releng/staging-application-services:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/staging-application-services:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:app-services-level-1-* | |
| + - docker-worker:cache:application-services-* | |
| + - docker-worker:taskcluster-proxy:tooltool.download.internal | |
| + - generic-worker:cache:app-services-level-1-* | |
| + - in-tree:hook-action:project-app-services/in-tree-action-1-* | |
| + - index:insert-task:app-services.cache.level-1.* | |
| + - index:insert-task:app-services.v2.staging-application-services.* | |
| + - project:mozilla:app-services:releng:beetmover:action:direct-push-to-bucket | |
| + - project:mozilla:app-services:releng:beetmover:action:push-to-candidates | |
| + - project:mozilla:app-services:releng:beetmover:action:push-to-maven | |
| + - project:mozilla:app-services:releng:beetmover:bucket:dep | |
| + - project:mozilla:app-services:releng:beetmover:bucket:maven-staging | |
| + - project:mozilla:app-services:releng:signing:cert:dep-signing | |
| + - project:mozilla:app-services:releng:signing:format:* | |
| + - project:releng:services/tooltool/api/download/internal | |
| + - queue:cancel-task:app-services-level-1/* | |
| + - queue:create-task:highest:app-services-1/* | |
| + - queue:create-task:highest:releng-hardware/applicationservices-b-1-osx1015 | |
| + - queue:create-task:highest:scriptworker-k8s/app-services-1-* | |
| + - queue:create-task:highest:scriptworker-k8s/app-services-t-* | |
| + - queue:create-task:low:app-services-1/* | |
| + - queue:create-task:low:app-services-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:rerun-task:app-services-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.app-services.cache.level-1.* | |
| + - queue:route:index.app-services.v2.staging-application-services.* | |
| - queue:route:index.project.staging-application-services.* | |
| + - queue:scheduler-id:app-services-level-1 | |
| + - secrets:get:project/app-services/level-1/* | |
| + - secrets:get:project/app-services/level-any/* | |
| - secrets:get:project/staging-application-services/symbols-token | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/staging-application-services:cron:*: | |
| roleId: repo:github.com/mozilla-releng/staging-application-services:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - secrets:get:project/releng/mobile/github-cron-token | |
| @@ -132309,29 +133665,122 @@ Role=repo:github.com/mozilla-releng/staging-firefox-ios:action:*: | |
| Role=repo:github.com/mozilla-releng/staging-firefox-ios:branch:*: | |
| roleId: repo:github.com/mozilla-releng/staging-firefox-ios:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| + - docker-worker:cache:mobile-level-1-* | |
| + - docker-worker:cache:mobile-project-firefox-ios-level-1-* | |
| + - generic-worker:cache:mobile-level-1-* | |
| + - generic-worker:cache:mobile-project-firefox-ios-level-1-* | |
| + - in-tree:hook-action:project-mobile/in-tree-action-1-* | |
| + - index:insert-task:mobile.cache.level-1.* | |
| + - index:insert-task:mobile.v2.firefox-ios.cache.level-1.* | |
| + - index:insert-task:mobile.v2.staging-firefox-ios.* | |
| + - notify:email:* | |
| + - notify:slack-channel:* | |
| + - project:mobile:firefox-ios:releng:bitrise:app:staging-firefox-ios | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:Bitrise_Performance_Test | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:Firebase_Performance_Test | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:L10nBuild | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:L10nScreenshotsTests | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:build_and_test_* | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:firefox_configure_build | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:focus_configure_build | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:focus_ui_test | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:focus_unit_test | |
| + - project:mobile:firefox-ios:releng:bitrise:workflow:klar_unit_test | |
| + - project:mobile:firefox-ios:releng:signing:cert:dep-signing | |
| + - project:mobile:firefox-ios:releng:signing:format:* | |
| + - queue:cancel-task:mobile-level-1/* | |
| + - queue:create-task:highest:mobile-1/* | |
| + - queue:create-task:highest:mobile-t/* | |
| + - queue:create-task:highest:scriptworker-k8s/mobile-1-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mobile-1/* | |
| + - queue:create-task:low:mobile-t/* | |
| + - queue:get-artifact:mobile/android-sdk/* | |
| + - queue:rerun-task:mobile-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mobile.cache.level-1.* | |
| + - queue:route:index.mobile.v2.firefox-ios.cache.level-1.* | |
| + - queue:route:index.mobile.v2.staging-firefox-ios.* | |
| + - queue:route:notify.* | |
| + - queue:route:tc-treeherder-stage.staging-firefox-ios.* | |
| + - queue:route:tc-treeherder-stage.v2.staging-firefox-ios.* | |
| + - queue:route:tc-treeherder.staging-firefox-ios.* | |
| + - queue:route:tc-treeherder.v2.staging-firefox-ios.* | |
| + - queue:scheduler-id:mobile-level-1 | |
| + - secrets:get:project/mobile/ci/testrail | |
| + - secrets:get:project/mobile/firefox-ios/level-1/* | |
| + - secrets:get:project/mobile/firefox-ios/level-any/* | |
| + - secrets:get:project/mobile/level-1/* | |
| + - secrets:get:project/mobile/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:github.com/mozilla-releng/staging-firefox-ios:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/staging-firefox-ios:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:mobile-level-1-* | |
| + - docker-worker:cache:mobile-project-firefox-ios-level-1-* | |
| + - generic-worker:cache:mobile-level-1-* | |
| + - generic-worker:cache:mobile-project-firefox-ios-level-1-* | |
| + - in-tree:hook-action:project-mobile/in-tree-action-1-* | |
| + - index:insert-task:mobile.cache.level-1.* | |
| + - index:insert-task:mobile.v2.firefox-ios.cache.level-1.* | |
| + - index:insert-task:mobile.v2.staging-firefox-ios.* | |
| + - notify:email:* | |
| + - notify:slack-channel:* | |
| - project:mobile:firefox-ios:releng:bitrise:app:staging-firefox-ios | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:Bitrise_Performance_Test | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:Firebase_Performance_Test | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:L10nBuild | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:L10nScreenshotsTests | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:build_and_test_* | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:firefox_configure_build | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:focus_configure_build | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:focus_ui_test | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:focus_unit_test | |
| - project:mobile:firefox-ios:releng:bitrise:workflow:klar_unit_test | |
| + - project:mobile:firefox-ios:releng:signing:cert:dep-signing | |
| + - project:mobile:firefox-ios:releng:signing:format:* | |
| + - queue:cancel-task:mobile-level-1/* | |
| + - queue:create-task:highest:mobile-1/* | |
| + - queue:create-task:highest:mobile-t/* | |
| - queue:create-task:highest:scriptworker-k8s/mobile-1-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mobile-1/* | |
| + - queue:create-task:low:mobile-t/* | |
| + - queue:get-artifact:mobile/android-sdk/* | |
| + - queue:rerun-task:mobile-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mobile.cache.level-1.* | |
| + - queue:route:index.mobile.v2.firefox-ios.cache.level-1.* | |
| + - queue:route:index.mobile.v2.staging-firefox-ios.* | |
| + - queue:route:notify.* | |
| + - queue:route:tc-treeherder-stage.staging-firefox-ios.* | |
| + - queue:route:tc-treeherder-stage.v2.staging-firefox-ios.* | |
| + - queue:route:tc-treeherder.staging-firefox-ios.* | |
| + - queue:route:tc-treeherder.v2.staging-firefox-ios.* | |
| + - queue:scheduler-id:mobile-level-1 | |
| - secrets:get:project/mobile/ci/testrail | |
| + - secrets:get:project/mobile/firefox-ios/level-1/* | |
| + - secrets:get:project/mobile/firefox-ios/level-any/* | |
| + - secrets:get:project/mobile/level-1/* | |
| + - secrets:get:project/mobile/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/staging-firefox-ios:pull-request: | |
| roleId: repo:github.com/mozilla-releng/staging-firefox-ios:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -132403,16 +133852,47 @@ Role=repo:github.com/mozilla-releng/staging-firefox-translations-training:*: | |
| - queue:route:tc-treeherder.staging-firefox-translations-training.* | |
| - queue:route:tc-treeherder.v2.staging-firefox-translations-training.* | |
| - queue:scheduler-id:translations-level-1 | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - secrets:get:project/translations/level-1/* | |
| - secrets:get:project/translations/level-any/* | |
| + Role=repo:github.com/mozilla-releng/staging-firefox-translations-training:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/staging-firefox-translations-training:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:translations-level-1-* | |
| + - generic-worker:cache:translations-level-1-* | |
| + - in-tree:hook-action:project-translations/in-tree-action-1-* | |
| + - index:insert-task:translations.cache.level-1.* | |
| + - index:insert-task:translations.v2.staging-firefox-translations-training.* | |
| + - project:translations:releng:beetmover:action:upload-translations-artifacts | |
| + - queue:cancel-task:translations-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:translations-1/* | |
| + - queue:create-task:low:translations-t/* | |
| + - queue:rerun-task:translations-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.translations.cache.level-1.* | |
| + - queue:route:index.translations.v2.staging-firefox-translations-training.* | |
| + - queue:route:tc-treeherder-stage.staging-firefox-translations-training.* | |
| + - queue:route:tc-treeherder-stage.v2.staging-firefox-translations-training.* | |
| + - queue:route:tc-treeherder.staging-firefox-translations-training.* | |
| + - queue:route:tc-treeherder.v2.staging-firefox-translations-training.* | |
| + - queue:scheduler-id:translations-level-1 | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/translations/level-1/* | |
| + - secrets:get:project/translations/level-any/* | |
| + | |
| Role=repo:github.com/mozilla-releng/staging-firefox-translations-training:pr-action:*: | |
| roleId: repo:github.com/mozilla-releng/staging-firefox-translations-training:pr-action:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - queue:route:tc-treeherder-stage.v2.staging-firefox-translations-training-pr.* | |
| @@ -132499,52 +133979,154 @@ Role=repo:github.com/mozilla-releng/staging-mozilla-vpn-client:action:release-promotion: | |
| Role=repo:github.com/mozilla-releng/staging-mozilla-vpn-client:branch:*: | |
| roleId: repo:github.com/mozilla-releng/staging-mozilla-vpn-client:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| + - docker-worker:cache:mozillavpn-level-1-* | |
| + - generic-worker:cache:mozillavpn-level-1-* | |
| + - in-tree:hook-action:project-mozillavpn/in-tree-action-1-* | |
| + - index:insert-task:mozillavpn.cache.level-1.* | |
| + - index:insert-task:mozillavpn.v2.staging-mozilla-vpn-client.* | |
| - project:mozillavpn:releng:beetmover:action:copy-artifacts | |
| - project:mozillavpn:releng:beetmover:action:direct-push-to-bucket | |
| - project:mozillavpn:releng:beetmover:action:import-from-gcs-to-artifact-registry | |
| - project:mozillavpn:releng:beetmover:action:push-to-candidates | |
| - project:mozillavpn:releng:beetmover:action:push-to-releases | |
| - project:mozillavpn:releng:beetmover:apt-repo:dep | |
| - project:mozillavpn:releng:beetmover:bucket:dep | |
| - project:mozillavpn:releng:signing:cert:dep-signing | |
| - project:mozillavpn:releng:signing:format:* | |
| - project:releng:services/tooltool/api/download/internal | |
| - project:releng:services/tooltool/api/download/public | |
| + - queue:cancel-task:mozillavpn-level-1/* | |
| - queue:create-task:highest:scriptworker-k8s/mozillavpn-1-* | |
| - queue:create-task:highest:scriptworker-k8s/mozillavpn-t-* | |
| - queue:create-task:highest:scriptworker-prov-v1/vpn-depsigning-mac-v1 | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozillavpn-1/* | |
| + - queue:create-task:low:mozillavpn-t/* | |
| - queue:create-task:low:releng-hardware/mozillavpn-b-1-* | |
| - queue:create-task:low:scriptworker-prov-v1/mozillavpn-t-signing-mac | |
| + - queue:create-task:project:none | |
| + - queue:rerun-task:mozillavpn-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozillavpn.cache.level-1.* | |
| + - queue:route:index.mozillavpn.v2.mozillavpn.cache.level-1.* | |
| + - queue:route:index.mozillavpn.v2.staging-mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder-stage.staging-mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder-stage.v2.staging-mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder.staging-mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder.v2.staging-mozilla-vpn-client.* | |
| + - queue:scheduler-id:mozillavpn-level-1 | |
| + - secrets:get:project/mozillavpn/level-1/* | |
| + - secrets:get:project/mozillavpn/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/staging-mozilla-vpn-client:branch:main: | |
| roleId: repo:github.com/mozilla-releng/staging-mozilla-vpn-client:branch:main | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| + - docker-worker:cache:mozillavpn-level-1-* | |
| + - generic-worker:cache:mozillavpn-level-1-* | |
| + - in-tree:hook-action:project-mozillavpn/in-tree-action-1-* | |
| + - index:insert-task:mozillavpn.cache.level-1.* | |
| + - index:insert-task:mozillavpn.v2.staging-mozilla-vpn-client.* | |
| + - project:mozillavpn:releng:beetmover:action:copy-artifacts | |
| + - project:mozillavpn:releng:beetmover:action:direct-push-to-bucket | |
| + - project:mozillavpn:releng:beetmover:action:import-from-gcs-to-artifact-registry | |
| + - project:mozillavpn:releng:beetmover:action:push-to-candidates | |
| + - project:mozillavpn:releng:beetmover:action:push-to-releases | |
| + - project:mozillavpn:releng:beetmover:apt-repo:dep | |
| + - project:mozillavpn:releng:beetmover:bucket:dep | |
| + - project:mozillavpn:releng:signing:cert:dep-signing | |
| + - project:mozillavpn:releng:signing:format:* | |
| + - project:releng:services/tooltool/api/download/internal | |
| + - project:releng:services/tooltool/api/download/public | |
| + - queue:cancel-task:mozillavpn-level-1/* | |
| + - queue:create-task:highest:scriptworker-k8s/mozillavpn-1-* | |
| + - queue:create-task:highest:scriptworker-k8s/mozillavpn-t-* | |
| + - queue:create-task:highest:scriptworker-prov-v1/vpn-depsigning-mac-v1 | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozillavpn-1/* | |
| + - queue:create-task:low:mozillavpn-t/* | |
| + - queue:create-task:low:releng-hardware/mozillavpn-b-1-* | |
| + - queue:create-task:low:scriptworker-prov-v1/mozillavpn-t-signing-mac | |
| + - queue:create-task:project:none | |
| + - queue:rerun-task:mozillavpn-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozillavpn.cache.level-1.* | |
| + - queue:route:index.mozillavpn.v2.mozillavpn.cache.level-1.* | |
| + - queue:route:index.mozillavpn.v2.staging-mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder-stage.staging-mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder-stage.v2.staging-mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder.staging-mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder.v2.staging-mozilla-vpn-client.* | |
| + - queue:scheduler-id:mozillavpn-level-1 | |
| - secrets:get:project/mozillavpn/level-1/* | |
| + - secrets:get:project/mozillavpn/level-any/* | |
| - secrets:get:project/mozillavpn/tokens | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/staging-mozilla-vpn-client:branch:releases/*: | |
| roleId: repo:github.com/mozilla-releng/staging-mozilla-vpn-client:branch:releases/* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| + - docker-worker:cache:mozillavpn-level-1-* | |
| + - generic-worker:cache:mozillavpn-level-1-* | |
| + - in-tree:hook-action:project-mozillavpn/in-tree-action-1-* | |
| + - index:insert-task:mozillavpn.cache.level-1.* | |
| + - index:insert-task:mozillavpn.v2.staging-mozilla-vpn-client.* | |
| + - project:mozillavpn:releng:beetmover:action:copy-artifacts | |
| + - project:mozillavpn:releng:beetmover:action:direct-push-to-bucket | |
| + - project:mozillavpn:releng:beetmover:action:import-from-gcs-to-artifact-registry | |
| + - project:mozillavpn:releng:beetmover:action:push-to-candidates | |
| + - project:mozillavpn:releng:beetmover:action:push-to-releases | |
| + - project:mozillavpn:releng:beetmover:apt-repo:dep | |
| + - project:mozillavpn:releng:beetmover:bucket:dep | |
| + - project:mozillavpn:releng:signing:cert:dep-signing | |
| + - project:mozillavpn:releng:signing:format:* | |
| + - project:releng:services/tooltool/api/download/internal | |
| + - project:releng:services/tooltool/api/download/public | |
| + - queue:cancel-task:mozillavpn-level-1/* | |
| + - queue:create-task:highest:scriptworker-k8s/mozillavpn-1-* | |
| + - queue:create-task:highest:scriptworker-k8s/mozillavpn-t-* | |
| + - queue:create-task:highest:scriptworker-prov-v1/vpn-depsigning-mac-v1 | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozillavpn-1/* | |
| + - queue:create-task:low:mozillavpn-t/* | |
| + - queue:create-task:low:releng-hardware/mozillavpn-b-1-* | |
| + - queue:create-task:low:scriptworker-prov-v1/mozillavpn-t-signing-mac | |
| + - queue:create-task:project:none | |
| + - queue:rerun-task:mozillavpn-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozillavpn.cache.level-1.* | |
| + - queue:route:index.mozillavpn.v2.mozillavpn.cache.level-1.* | |
| + - queue:route:index.mozillavpn.v2.staging-mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder-stage.staging-mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder-stage.v2.staging-mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder.staging-mozilla-vpn-client.* | |
| + - queue:route:tc-treeherder.v2.staging-mozilla-vpn-client.* | |
| + - queue:scheduler-id:mozillavpn-level-1 | |
| - secrets:get:project/mozillavpn/level-1/* | |
| + - secrets:get:project/mozillavpn/level-any/* | |
| - secrets:get:project/mozillavpn/tokens | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/staging-mozilla-vpn-client:pull-request: | |
| roleId: repo:github.com/mozilla-releng/staging-mozilla-vpn-client:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -132728,54 +134310,88 @@ Role=repo:github.com/mozilla-releng/staging-xpi-manifest:branch:*: | |
| Role=repo:github.com/mozilla-releng/staging-xpi-manifest:branch:*: | |
| roleId: repo:github.com/mozilla-releng/staging-xpi-manifest:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:xpi-level-1-* | |
| + - generic-worker:cache:xpi-level-1-* | |
| + - in-tree:hook-action:project-xpi/in-tree-action-1-* | |
| + - index:insert-task:xpi.cache.level-1.* | |
| + - index:insert-task:xpi.v2.staging-xpi-manifest.* | |
| - project:xpi:releng:signing:cert:dep-signing | |
| - queue:cancel-task-group:xpi-level-1/* | |
| + - queue:cancel-task:xpi-level-1/* | |
| - queue:create-task:low:built-in/* | |
| - queue:create-task:low:scriptworker-k8s/xpi-t-* | |
| - queue:create-task:low:xpi-1/* | |
| - queue:create-task:low:xpi-t/* | |
| - queue:get-artifact:xpi/* | |
| + - queue:rerun-task:xpi-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.xpi.cache.level-1.* | |
| - queue:route:index.xpi.v2.* | |
| - queue:route:index.xpi.xpi-manifest.cache.level-1.* | |
| - queue:route:notify.email.* | |
| - queue:scheduler-id:taskcluster-github | |
| - queue:scheduler-id:xpi-level-1 | |
| - queue:seal-task-group:xpi-level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/xpi/level-1/* | |
| + - secrets:get:project/xpi/level-any/* | |
| - secrets:get:project/xpi/xpi-github-clone-ssh | |
| Role=repo:github.com/mozilla-releng/staging-xpi-manifest:branch:main: | |
| roleId: repo:github.com/mozilla-releng/staging-xpi-manifest:branch:main | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| + - docker-worker:cache:xpi-level-1-* | |
| + - generic-worker:cache:xpi-level-1-* | |
| + - in-tree:hook-action:project-xpi/in-tree-action-1-* | |
| + - index:insert-task:xpi.cache.level-1.* | |
| + - index:insert-task:xpi.v2.staging-xpi-manifest.* | |
| - project:xpi:balrog:action:* | |
| - project:xpi:balrog:channel:* | |
| - project:xpi:balrog:server:staging | |
| - project:xpi:beetmover:action:* | |
| - project:xpi:beetmover:bucket:dep | |
| - project:xpi:releng:github:action:release | |
| - project:xpi:releng:github:project:mozilla-releng/staging-xpi-* | |
| - project:xpi:releng:signing:cert:dep-signing | |
| + - queue:cancel-task-group:xpi-level-1/* | |
| + - queue:cancel-task:xpi-level-1/* | |
| - queue:create-task:highest:scriptworker-k8s/xpi-1-* | |
| - queue:create-task:highest:scriptworker-k8s/xpi-t-* | |
| - queue:create-task:highest:xpi-1/* | |
| - queue:create-task:highest:xpi-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:scriptworker-k8s/xpi-t-* | |
| + - queue:create-task:low:xpi-1/* | |
| + - queue:create-task:low:xpi-t/* | |
| + - queue:get-artifact:xpi/* | |
| + - queue:rerun-task:xpi-level-1/* | |
| + - queue:route:checks | |
| - queue:route:index.xpi.cache.level-1.* | |
| - - queue:route:index.xpi.v2.xpi-manifest.* | |
| + - queue:route:index.xpi.v2.* | |
| + - queue:route:index.xpi.xpi-manifest.cache.level-1.* | |
| + - queue:route:notify.email.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + - queue:scheduler-id:xpi-level-1 | |
| + - queue:seal-task-group:xpi-level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/xpi/level-1/* | |
| + - secrets:get:project/xpi/level-any/* | |
| + - secrets:get:project/xpi/xpi-github-clone-ssh | |
| Role=repo:github.com/mozilla-releng/staging-xpi-manifest:cron:*: | |
| roleId: repo:github.com/mozilla-releng/staging-xpi-manifest:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -132883,31 +134499,74 @@ Role=repo:github.com/mozilla-releng/staging-xpi-private:branch:*: | |
| Role=repo:github.com/mozilla-releng/staging-xpi-private:branch:*: | |
| roleId: repo:github.com/mozilla-releng/staging-xpi-private:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:xpi-level-1-* | |
| + - generic-worker:cache:xpi-level-1-* | |
| + - index:insert-task:xpi.cache.level-1.* | |
| + - index:insert-task:xpi.v2.staging-xpi-private.* | |
| + - project:xpi:releng:signing:cert:dep-signing | |
| + - queue:cancel-task-group:xpi-level-1/* | |
| + - queue:cancel-task:xpi-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:scriptworker-k8s/xpi-t-* | |
| + - queue:create-task:low:xpi-1/* | |
| + - queue:create-task:low:xpi-t/* | |
| + - queue:get-artifact:xpi/* | |
| + - queue:rerun-task:xpi-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.xpi.cache.level-1.* | |
| + - queue:route:index.xpi.v2.* | |
| + - queue:route:index.xpi.xpi-manifest.cache.level-1.* | |
| + - queue:route:notify.email.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + - queue:scheduler-id:xpi-level-1 | |
| + - queue:seal-task-group:xpi-level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/xpi/level-1/* | |
| + - secrets:get:project/xpi/level-any/* | |
| + - secrets:get:project/xpi/xpi-github-clone-ssh | |
| + | |
| + Role=repo:github.com/mozilla-releng/staging-xpi-private:branch:master: | |
| + roleId: repo:github.com/mozilla-releng/staging-xpi-private:branch:master | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:xpi-level-1-* | |
| + - generic-worker:cache:xpi-level-1-* | |
| + - index:insert-task:xpi.cache.level-1.* | |
| + - index:insert-task:xpi.v2.staging-xpi-private.* | |
| - project:xpi:releng:signing:cert:dep-signing | |
| - queue:cancel-task-group:xpi-level-1/* | |
| + - queue:cancel-task:xpi-level-1/* | |
| - queue:create-task:low:built-in/* | |
| - queue:create-task:low:scriptworker-k8s/xpi-t-* | |
| - queue:create-task:low:xpi-1/* | |
| - queue:create-task:low:xpi-t/* | |
| - queue:get-artifact:xpi/* | |
| + - queue:rerun-task:xpi-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.xpi.cache.level-1.* | |
| - queue:route:index.xpi.v2.* | |
| - queue:route:index.xpi.xpi-manifest.cache.level-1.* | |
| - queue:route:notify.email.* | |
| - queue:scheduler-id:taskcluster-github | |
| - queue:scheduler-id:xpi-level-1 | |
| - queue:seal-task-group:xpi-level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/xpi/level-1/* | |
| + - secrets:get:project/xpi/level-any/* | |
| - secrets:get:project/xpi/xpi-github-clone-ssh | |
| Role=repo:github.com/mozilla-releng/staging-xpi-private:pull-request: | |
| roleId: repo:github.com/mozilla-releng/staging-xpi-private:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| @@ -132988,31 +134647,74 @@ Role=repo:github.com/mozilla-releng/staging-xpi-public:branch:*: | |
| Role=repo:github.com/mozilla-releng/staging-xpi-public:branch:*: | |
| roleId: repo:github.com/mozilla-releng/staging-xpi-public:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:xpi-level-1-* | |
| + - generic-worker:cache:xpi-level-1-* | |
| + - index:insert-task:xpi.cache.level-1.* | |
| + - index:insert-task:xpi.v2.staging-xpi-public.* | |
| + - project:xpi:releng:signing:cert:dep-signing | |
| + - queue:cancel-task-group:xpi-level-1/* | |
| + - queue:cancel-task:xpi-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:scriptworker-k8s/xpi-t-* | |
| + - queue:create-task:low:xpi-1/* | |
| + - queue:create-task:low:xpi-t/* | |
| + - queue:get-artifact:xpi/* | |
| + - queue:rerun-task:xpi-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.xpi.cache.level-1.* | |
| + - queue:route:index.xpi.v2.* | |
| + - queue:route:index.xpi.xpi-manifest.cache.level-1.* | |
| + - queue:route:notify.email.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + - queue:scheduler-id:xpi-level-1 | |
| + - queue:seal-task-group:xpi-level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/xpi/level-1/* | |
| + - secrets:get:project/xpi/level-any/* | |
| + - secrets:get:project/xpi/xpi-github-clone-ssh | |
| + | |
| + Role=repo:github.com/mozilla-releng/staging-xpi-public:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/staging-xpi-public:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:xpi-level-1-* | |
| + - generic-worker:cache:xpi-level-1-* | |
| + - index:insert-task:xpi.cache.level-1.* | |
| + - index:insert-task:xpi.v2.staging-xpi-public.* | |
| - project:xpi:releng:signing:cert:dep-signing | |
| - queue:cancel-task-group:xpi-level-1/* | |
| + - queue:cancel-task:xpi-level-1/* | |
| - queue:create-task:low:built-in/* | |
| - queue:create-task:low:scriptworker-k8s/xpi-t-* | |
| - queue:create-task:low:xpi-1/* | |
| - queue:create-task:low:xpi-t/* | |
| - queue:get-artifact:xpi/* | |
| + - queue:rerun-task:xpi-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.xpi.cache.level-1.* | |
| - queue:route:index.xpi.v2.* | |
| - queue:route:index.xpi.xpi-manifest.cache.level-1.* | |
| - queue:route:notify.email.* | |
| - queue:scheduler-id:taskcluster-github | |
| - queue:scheduler-id:xpi-level-1 | |
| - queue:seal-task-group:xpi-level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/xpi/level-1/* | |
| + - secrets:get:project/xpi/level-any/* | |
| - secrets:get:project/xpi/xpi-github-clone-ssh | |
| Role=repo:github.com/mozilla-releng/staging-xpi-public:pull-request: | |
| roleId: repo:github.com/mozilla-releng/staging-xpi-public:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| @@ -133141,33 +134843,164 @@ Role=repo:github.com/mozilla-releng/tooltool:branch:*: | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/tooltool:branch:dev: | |
| roleId: repo:github.com/mozilla-releng/tooltool:branch:dev | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:project/releng/tooltool/deploy | |
| + scopes: | |
| + - docker-worker:cache:releng-level-3-* | |
| + - docker-worker:cache:releng-project-tooltool-level-3-* | |
| + - generic-worker:cache:releng-level-3-* | |
| + - generic-worker:cache:releng-project-tooltool-level-3-* | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - index:insert-task:releng.v2.tooltool.* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:cancel-task:releng-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:rerun-task:releng-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:index.releng.v2.tooltool.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:releng-level-3 | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/level-3/* | |
| + - secrets:get:project/releng/level-any/* | |
| + - secrets:get:project/releng/tooltool/ci | |
| + - secrets:get:project/releng/tooltool/deploy | |
| + - secrets:get:project/releng/tooltool/level-3/* | |
| + - secrets:get:project/releng/tooltool/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:github.com/mozilla-releng/tooltool:branch:master: | |
| + roleId: repo:github.com/mozilla-releng/tooltool:branch:master | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:releng-level-3-* | |
| + - docker-worker:cache:releng-project-tooltool-level-3-* | |
| + - generic-worker:cache:releng-level-3-* | |
| + - generic-worker:cache:releng-project-tooltool-level-3-* | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - index:insert-task:releng.v2.tooltool.* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:cancel-task:releng-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:rerun-task:releng-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:index.releng.v2.tooltool.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:releng-level-3 | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/level-3/* | |
| + - secrets:get:project/releng/level-any/* | |
| + - secrets:get:project/releng/tooltool/ci | |
| + - secrets:get:project/releng/tooltool/level-3/* | |
| + - secrets:get:project/releng/tooltool/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/tooltool:branch:production: | |
| roleId: repo:github.com/mozilla-releng/tooltool:branch:production | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:project/releng/tooltool/deploy | |
| + scopes: | |
| + - docker-worker:cache:releng-level-3-* | |
| + - docker-worker:cache:releng-project-tooltool-level-3-* | |
| + - generic-worker:cache:releng-level-3-* | |
| + - generic-worker:cache:releng-project-tooltool-level-3-* | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - index:insert-task:releng.v2.tooltool.* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:cancel-task:releng-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:rerun-task:releng-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:index.releng.v2.tooltool.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:releng-level-3 | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/level-3/* | |
| + - secrets:get:project/releng/level-any/* | |
| + - secrets:get:project/releng/tooltool/ci | |
| + - secrets:get:project/releng/tooltool/deploy | |
| + - secrets:get:project/releng/tooltool/level-3/* | |
| + - secrets:get:project/releng/tooltool/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/tooltool:branch:staging: | |
| roleId: repo:github.com/mozilla-releng/tooltool:branch:staging | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:project/releng/tooltool/deploy | |
| + scopes: | |
| + - docker-worker:cache:releng-level-3-* | |
| + - docker-worker:cache:releng-project-tooltool-level-3-* | |
| + - generic-worker:cache:releng-level-3-* | |
| + - generic-worker:cache:releng-project-tooltool-level-3-* | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - index:insert-task:releng.v2.tooltool.* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:cancel-task:releng-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:rerun-task:releng-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:index.releng.v2.tooltool.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:releng-level-3 | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/level-3/* | |
| + - secrets:get:project/releng/level-any/* | |
| + - secrets:get:project/releng/tooltool/ci | |
| + - secrets:get:project/releng/tooltool/deploy | |
| + - secrets:get:project/releng/tooltool/level-3/* | |
| + - secrets:get:project/releng/tooltool/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:github.com/mozilla-releng/tooltool:pull-request: | |
| roleId: repo:github.com/mozilla-releng/tooltool:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -133180,19 +135013,19 @@ Role=repo:github.com/mozilla-releng/tooltool:pull-request: | |
| - index:insert-task:releng.v2.tooltool.cache.head.* | |
| - index:insert-task:releng.v2.tooltool.cache.level-1.* | |
| - index:insert-task:releng.v2.tooltool.cache.pr.* | |
| - notify:email:* | |
| - notify:irc-channel:* | |
| - notify:irc-user:* | |
| - queue:cancel-task-group:releng-level-1/* | |
| - queue:cancel-task:releng-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:releng-1/* | |
| - - queue:create-task:highest:releng-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:releng-1/* | |
| + - queue:create-task:low:releng-t/* | |
| - queue:rerun-task:releng-level-1/* | |
| - queue:route:checks | |
| - queue:route:garbage.* | |
| - queue:route:index.garbage.* | |
| - queue:route:index.releng.v2.tooltool-pr.* | |
| - queue:route:index.releng.v2.tooltool.cache.head.* | |
| - queue:route:index.releng.v2.tooltool.cache.level-1.* | |
| - queue:route:index.releng.v2.tooltool.cache.pr.* | |
| @@ -133291,47 +135124,114 @@ Role=repo:github.com/mozilla-releng/treestatus:branch:*: | |
| - secrets:get:project/releng/treestatus/ci | |
| Role=repo:github.com/mozilla-releng/treestatus:branch:dev: | |
| roleId: repo:github.com/mozilla-releng/treestatus:branch:dev | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:project/releng/treestatus/deploy | |
| + scopes: | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/treestatus/ci | |
| + - secrets:get:project/releng/treestatus/deploy | |
| + | |
| + Role=repo:github.com/mozilla-releng/treestatus:branch:master: | |
| + roleId: repo:github.com/mozilla-releng/treestatus:branch:master | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/treestatus/ci | |
| Role=repo:github.com/mozilla-releng/treestatus:branch:production: | |
| roleId: repo:github.com/mozilla-releng/treestatus:branch:production | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:project/releng/treestatus/deploy | |
| + scopes: | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/treestatus/ci | |
| + - secrets:get:project/releng/treestatus/deploy | |
| Role=repo:github.com/mozilla-releng/treestatus:branch:staging: | |
| roleId: repo:github.com/mozilla-releng/treestatus:branch:staging | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - secrets:get:project/releng/treestatus/deploy | |
| + scopes: | |
| + - in-tree:hook-action:project-releng/in-tree-action-3-* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:create-task:highest:releng-3/* | |
| + - queue:create-task:highest:releng-t/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + - secrets:get:project/releng/treestatus/ci | |
| + - secrets:get:project/releng/treestatus/deploy | |
| Role=repo:github.com/mozilla-releng/treestatus:pull-request: | |
| roleId: repo:github.com/mozilla-releng/treestatus:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - in-tree:hook-action:project-releng/in-tree-action-1-* | |
| - notify:email:* | |
| - notify:irc-channel:* | |
| - notify:irc-user:* | |
| - - queue:create-task:highest:releng-1/* | |
| - - queue:create-task:highest:releng-t/* | |
| + - queue:create-task:low:releng-1/* | |
| + - queue:create-task:low:releng-t/* | |
| - queue:route:checks | |
| - queue:route:garbage.* | |
| - queue:route:index.garbage.* | |
| - queue:route:notify.email.* | |
| - queue:route:notify.irc-channel.* | |
| - queue:route:notify.irc-user.* | |
| - queue:scheduler-id:taskcluster-github | |
| - secrets:get:project/releng/treestatus/ci | |
| @@ -133373,16 +135273,37 @@ Role=repo:github.com/mozilla-releng/winsign:*: | |
| - queue:route:checks | |
| - queue:route:garbage.* | |
| - queue:route:index.garbage.* | |
| - queue:route:notify.email.* | |
| - queue:route:notify.irc-channel.* | |
| - queue:route:notify.irc-user.* | |
| - queue:scheduler-id:taskcluster-github | |
| + Role=repo:github.com/mozilla-releng/winsign:branch:main: | |
| + roleId: repo:github.com/mozilla-releng/winsign:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - in-tree:hook-action:project-releng/in-tree-action-1-* | |
| + - notify:email:* | |
| + - notify:irc-channel:* | |
| + - notify:irc-user:* | |
| + - queue:create-task:low:releng-1/* | |
| + - queue:create-task:low:releng-t/* | |
| + - queue:route:checks | |
| + - queue:route:garbage.* | |
| + - queue:route:index.garbage.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.irc-channel.* | |
| + - queue:route:notify.irc-user.* | |
| + - queue:scheduler-id:taskcluster-github | |
| + | |
| Role=repo:github.com/mozilla/application-services:action:*: | |
| roleId: repo:github.com/mozilla/application-services:action:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:app-services-level-3-* | |
| @@ -133472,16 +135393,59 @@ Role=repo:github.com/mozilla/application-services:branch:*: | |
| - queue:route:notify.slack-channel.* | |
| - queue:scheduler-id:app-services-level-3 | |
| - secrets:get:project/app-services/level-3/* | |
| - secrets:get:project/app-services/level-any/* | |
| - secrets:get:project/application-services/symbols-token | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla/application-services:branch:main: | |
| + roleId: repo:github.com/mozilla/application-services:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:app-services-level-3-* | |
| + - docker-worker:cache:application-services-* | |
| + - docker-worker:taskcluster-proxy:tooltool.download.internal | |
| + - generic-worker:cache:app-services-level-3-* | |
| + - in-tree:hook-action:project-app-services/in-tree-action-3-* | |
| + - index:insert-task:app-services.cache.level-3.* | |
| + - index:insert-task:app-services.v2.application-services.* | |
| + - project:mozilla:app-services:releng:beetmover:action:direct-push-to-bucket | |
| + - project:mozilla:app-services:releng:beetmover:action:push-to-candidates | |
| + - project:mozilla:app-services:releng:beetmover:action:push-to-maven | |
| + - project:mozilla:app-services:releng:beetmover:bucket:dep | |
| + - project:mozilla:app-services:releng:beetmover:bucket:maven-staging | |
| + - project:mozilla:app-services:releng:signing:cert:dep-signing | |
| + - project:mozilla:app-services:releng:signing:format:* | |
| + - project:releng:services/tooltool/api/download/internal | |
| + - queue:cancel-task:app-services-level-3/* | |
| + - queue:create-task:highest:app-services-3/* | |
| + - queue:create-task:highest:app-services-t/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:releng-hardware/applicationservices-b-3-osx1015 | |
| + - queue:create-task:highest:scriptworker-k8s/app-services-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/app-services-t-* | |
| + - queue:rerun-task:app-services-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.app-services.cache.level-3.* | |
| + - queue:route:index.app-services.v2.application-services.* | |
| + - queue:route:index.project.application-services.* | |
| + - queue:route:notify.email.* | |
| + - queue:route:notify.slack-channel.* | |
| + - queue:scheduler-id:app-services-level-3 | |
| + - secrets:get:project/app-services/level-3/* | |
| + - secrets:get:project/app-services/level-any/* | |
| + - secrets:get:project/application-services/symbols-token | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla/application-services:cron:*: | |
| roleId: repo:github.com/mozilla/application-services:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:app-services-level-3-* | |
| @@ -133557,21 +135521,22 @@ Role=repo:github.com/mozilla/application-services:pull-request: | |
| - project:mozilla:app-services:releng:beetmover:bucket:dep | |
| - project:mozilla:app-services:releng:beetmover:bucket:maven-staging | |
| - project:mozilla:app-services:releng:signing:cert:dep-signing | |
| - project:mozilla:app-services:releng:signing:format:* | |
| - project:releng:services/tooltool/api/download/internal | |
| - queue:cancel-task-group:app-services-level-1/* | |
| - queue:cancel-task:app-services-level-1/* | |
| - queue:create-task:highest:app-services-1/* | |
| - - queue:create-task:highest:app-services-t/* | |
| - - queue:create-task:highest:built-in/* | |
| - queue:create-task:highest:releng-hardware/applicationservices-b-1-osx1015 | |
| - queue:create-task:highest:scriptworker-k8s/app-services-1-* | |
| - queue:create-task:highest:scriptworker-k8s/app-services-t-* | |
| + - queue:create-task:low:app-services-1/* | |
| + - queue:create-task:low:app-services-t/* | |
| + - queue:create-task:low:built-in/* | |
| - queue:rerun-task:app-services-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.app-services.cache.head.* | |
| - queue:route:index.app-services.cache.level-1.* | |
| - queue:route:index.app-services.cache.pr.* | |
| - queue:route:index.app-services.v2.application-services-pr.* | |
| - queue:route:notify.email.* | |
| - queue:route:notify.slack-channel.* | |
| @@ -133643,34 +135608,59 @@ Role=repo:github.com/mozilla/code-coverage:branch:*: | |
| - queue:route:index.code-analysis.cache.level-3.* | |
| - queue:route:index.code-analysis.v2.code-coverage.* | |
| - queue:scheduler-id:code-analysis-level-3 | |
| - secrets:get:project/code-analysis/level-3/* | |
| - secrets:get:project/code-analysis/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla/code-coverage:branch:master: | |
| + roleId: repo:github.com/mozilla/code-coverage:branch:master | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:code-analysis-level-3-* | |
| + - generic-worker:cache:code-analysis-level-3-* | |
| + - index:insert-task:code-analysis.cache.level-3.* | |
| + - index:insert-task:code-analysis.v2.code-coverage.* | |
| + - queue:cancel-task:code-analysis-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:code-analysis-3/* | |
| + - queue:create-task:highest:code-analysis-t/* | |
| + - queue:rerun-task:code-analysis-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.code-analysis.cache.level-3.* | |
| + - queue:route:index.code-analysis.v2.code-coverage.* | |
| + - queue:scheduler-id:code-analysis-level-3 | |
| + - secrets:get:project/code-analysis/level-3/* | |
| + - secrets:get:project/code-analysis/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla/code-coverage:pull-request: | |
| roleId: repo:github.com/mozilla/code-coverage:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:code-analysis-level-1-* | |
| - generic-worker:cache:code-analysis-level-1-* | |
| - index:insert-task:code-analysis.cache.head.* | |
| - index:insert-task:code-analysis.cache.level-1.* | |
| - index:insert-task:code-analysis.cache.pr.* | |
| - index:insert-task:code-analysis.v2.code-coverage-pr.* | |
| - queue:cancel-task-group:code-analysis-level-1/* | |
| - queue:cancel-task:code-analysis-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:code-analysis-1/* | |
| - - queue:create-task:highest:code-analysis-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:code-analysis-1/* | |
| + - queue:create-task:low:code-analysis-t/* | |
| - queue:rerun-task:code-analysis-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.code-analysis.cache.head.* | |
| - queue:route:index.code-analysis.cache.level-1.* | |
| - queue:route:index.code-analysis.cache.pr.* | |
| - queue:route:index.code-analysis.v2.code-coverage-pr.* | |
| - queue:scheduler-id:code-analysis-level-1 | |
| - queue:seal-task-group:code-analysis-level-1/* | |
| @@ -133724,34 +135714,59 @@ Role=repo:github.com/mozilla/code-review:branch:*: | |
| - queue:route:index.code-analysis.cache.level-3.* | |
| - queue:route:index.code-analysis.v2.code-review.* | |
| - queue:scheduler-id:code-analysis-level-3 | |
| - secrets:get:project/code-analysis/level-3/* | |
| - secrets:get:project/code-analysis/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla/code-review:branch:master: | |
| + roleId: repo:github.com/mozilla/code-review:branch:master | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:code-analysis-level-3-* | |
| + - generic-worker:cache:code-analysis-level-3-* | |
| + - index:insert-task:code-analysis.cache.level-3.* | |
| + - index:insert-task:code-analysis.v2.code-review.* | |
| + - queue:cancel-task:code-analysis-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:code-analysis-3/* | |
| + - queue:create-task:highest:code-analysis-t/* | |
| + - queue:rerun-task:code-analysis-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.code-analysis.cache.level-3.* | |
| + - queue:route:index.code-analysis.v2.code-review.* | |
| + - queue:scheduler-id:code-analysis-level-3 | |
| + - secrets:get:project/code-analysis/level-3/* | |
| + - secrets:get:project/code-analysis/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla/code-review:pull-request: | |
| roleId: repo:github.com/mozilla/code-review:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:code-analysis-level-1-* | |
| - generic-worker:cache:code-analysis-level-1-* | |
| - index:insert-task:code-analysis.cache.head.* | |
| - index:insert-task:code-analysis.cache.level-1.* | |
| - index:insert-task:code-analysis.cache.pr.* | |
| - index:insert-task:code-analysis.v2.code-review-pr.* | |
| - queue:cancel-task-group:code-analysis-level-1/* | |
| - queue:cancel-task:code-analysis-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:code-analysis-1/* | |
| - - queue:create-task:highest:code-analysis-t/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:code-analysis-1/* | |
| + - queue:create-task:low:code-analysis-t/* | |
| - queue:rerun-task:code-analysis-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.code-analysis.cache.head.* | |
| - queue:route:index.code-analysis.cache.level-1.* | |
| - queue:route:index.code-analysis.cache.pr.* | |
| - queue:route:index.code-analysis.v2.code-review-pr.* | |
| - queue:scheduler-id:code-analysis-level-1 | |
| - queue:seal-task-group:code-analysis-level-1/* | |
| @@ -133820,18 +135835,78 @@ Role=repo:github.com/mozilla/firefox-translations-training:*: | |
| Role=repo:github.com/mozilla/firefox-translations-training:branch:*: | |
| roleId: repo:github.com/mozilla/firefox-translations-training:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| + - docker-worker:cache:translations-level-1-* | |
| + - generic-worker:cache:translations-level-1-* | |
| + - in-tree:hook-action:project-translations/in-tree-action-1-* | |
| + - index:insert-task:translations.cache.level-1.* | |
| + - index:insert-task:translations.v2.firefox-translations-training.* | |
| + - project:translations:releng:beetmover:action:upload-translations-artifacts | |
| - project:translations:releng:beetmover:bucket:dep | |
| - project:translations:releng:beetmover:bucket:release | |
| + - queue:cancel-task:translations-level-1/* | |
| + - queue:create-task:highest:scriptworker-k8s/translations-1-* | |
| + - queue:create-task:highest:scriptworker-k8s/translations-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:translations-1/* | |
| + - queue:create-task:low:translations-t/* | |
| + - queue:rerun-task:translations-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.translations.cache.level-1.* | |
| + - queue:route:index.translations.v2.firefox-translations-training.* | |
| + - queue:route:tc-treeherder-stage.firefox-translations-training.* | |
| + - queue:route:tc-treeherder-stage.v2.firefox-translations-training.* | |
| + - queue:route:tc-treeherder.firefox-translations-training.* | |
| + - queue:route:tc-treeherder.v2.firefox-translations-training.* | |
| + - queue:scheduler-id:translations-level-1 | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/translations/level-1/* | |
| + - secrets:get:project/translations/level-any/* | |
| + | |
| + Role=repo:github.com/mozilla/firefox-translations-training:branch:main: | |
| + roleId: repo:github.com/mozilla/firefox-translations-training:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:translations-level-1-* | |
| + - generic-worker:cache:translations-level-1-* | |
| + - in-tree:hook-action:project-translations/in-tree-action-1-* | |
| + - index:insert-task:translations.cache.level-1.* | |
| + - index:insert-task:translations.v2.firefox-translations-training.* | |
| + - project:translations:releng:beetmover:action:upload-translations-artifacts | |
| + - project:translations:releng:beetmover:bucket:dep | |
| + - project:translations:releng:beetmover:bucket:release | |
| + - queue:cancel-task:translations-level-1/* | |
| + - queue:create-task:highest:scriptworker-k8s/translations-1-* | |
| + - queue:create-task:highest:scriptworker-k8s/translations-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:translations-1/* | |
| + - queue:create-task:low:translations-t/* | |
| + - queue:rerun-task:translations-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.translations.cache.level-1.* | |
| + - queue:route:index.translations.v2.firefox-translations-training.* | |
| + - queue:route:tc-treeherder-stage.firefox-translations-training.* | |
| + - queue:route:tc-treeherder-stage.v2.firefox-translations-training.* | |
| + - queue:route:tc-treeherder.firefox-translations-training.* | |
| + - queue:route:tc-treeherder.v2.firefox-translations-training.* | |
| + - queue:scheduler-id:translations-level-1 | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/translations/level-1/* | |
| + - secrets:get:project/translations/level-any/* | |
| Role=repo:github.com/mozilla/firefox-translations-training:pr-action:*: | |
| roleId: repo:github.com/mozilla/firefox-translations-training:pr-action:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -133883,16 +135958,46 @@ Role=repo:github.com/mozilla/fx-desktop-qa-automation:*: | |
| - queue:scheduler-id:mozilla-level-1 | |
| - secrets:get:project/mozilla/fx-desktop-qa-automation/level-1/* | |
| - secrets:get:project/mozilla/fx-desktop-qa-automation/level-any/* | |
| - secrets:get:project/mozilla/level-1/* | |
| - secrets:get:project/mozilla/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla/fx-desktop-qa-automation:branch:main: | |
| + roleId: repo:github.com/mozilla/fx-desktop-qa-automation:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:mozilla-level-1-* | |
| + - docker-worker:cache:mozilla-project-fx-desktop-qa-automation-level-1-* | |
| + - generic-worker:cache:mozilla-level-1-* | |
| + - generic-worker:cache:mozilla-project-fx-desktop-qa-automation-level-1-* | |
| + - in-tree:hook-action:project-mozilla/in-tree-action-1-* | |
| + - index:insert-task:mozilla.v2.fx-desktop-qa-automation.* | |
| + - notify:slack-channel:* | |
| + - queue:cancel-task:mozilla-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozilla-1/* | |
| + - queue:create-task:low:mozilla-t/* | |
| + - queue:rerun-task:mozilla-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozilla.v2.fx-desktop-qa-automation.* | |
| + - queue:route:notify.slack-channel.* | |
| + - queue:scheduler-id:mozilla-level-1 | |
| + - secrets:get:project/mozilla/fx-desktop-qa-automation/level-1/* | |
| + - secrets:get:project/mozilla/fx-desktop-qa-automation/level-any/* | |
| + - secrets:get:project/mozilla/level-1/* | |
| + - secrets:get:project/mozilla/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla/fx-desktop-qa-automation:pull-request: | |
| roleId: repo:github.com/mozilla/fx-desktop-qa-automation:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - index:insert-task:mozilla.v2.fx-desktop-qa-automation-pr.* | |
| @@ -133974,16 +136079,54 @@ Role=repo:github.com/mozilla/glean:branch:*: | |
| - queue:scheduler-id:glean-level-3 | |
| - secrets:get:project/glean/glean/level-3/* | |
| - secrets:get:project/glean/glean/level-any/* | |
| - secrets:get:project/glean/level-3/* | |
| - secrets:get:project/glean/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla/glean:branch:main: | |
| + roleId: repo:github.com/mozilla/glean:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:glean-level-3-* | |
| + - docker-worker:cache:glean-project-glean-level-3-* | |
| + - generic-worker:cache:glean-level-3-* | |
| + - generic-worker:cache:glean-project-glean-level-3-* | |
| + - in-tree:hook-action:project-glean/in-tree-action-3-* | |
| + - index:insert-task:glean.v2.glean.* | |
| + - project:mozilla:glean:releng:beetmover:action:push-to-maven | |
| + - project:mozilla:glean:releng:beetmover:bucket:maven-staging | |
| + - project:mozilla:glean:releng:signing:cert:dep-signing | |
| + - project:mozilla:glean:releng:signing:format:* | |
| + - project:releng:services/tooltool/api/download/internal | |
| + - queue:cancel-task:glean-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:glean-3/* | |
| + - queue:create-task:highest:glean-t/* | |
| + - queue:create-task:highest:scriptworker-k8s/glean-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/glean-t-* | |
| + - queue:get-artifact:project/gecko/mac-sdk/* | |
| + - queue:rerun-task:glean-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.glean.v2.glean.* | |
| + - queue:route:index.project.glean.cache.level-3.* | |
| + - queue:route:index.project.glean.v2.branch.* | |
| + - queue:scheduler-id:glean-level-3 | |
| + - secrets:get:project/glean/glean/level-3/* | |
| + - secrets:get:project/glean/glean/level-any/* | |
| + - secrets:get:project/glean/level-3/* | |
| + - secrets:get:project/glean/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla/glean:pull-request: | |
| roleId: repo:github.com/mozilla/glean:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:glean-level-1-* | |
| @@ -133999,21 +136142,22 @@ Role=repo:github.com/mozilla/glean:pull-request: | |
| - index:insert-task:project.glean.cache.pr.* | |
| - project:mozilla:glean:releng:beetmover:action:push-to-maven | |
| - project:mozilla:glean:releng:beetmover:bucket:maven-staging | |
| - project:mozilla:glean:releng:signing:cert:dep-signing | |
| - project:mozilla:glean:releng:signing:format:* | |
| - project:releng:services/tooltool/api/download/internal | |
| - queue:cancel-task-group:glean-level-1/* | |
| - queue:cancel-task:glean-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - queue:create-task:highest:glean-1/* | |
| - - queue:create-task:highest:glean-t/* | |
| - queue:create-task:highest:scriptworker-k8s/glean-1-* | |
| - queue:create-task:highest:scriptworker-k8s/glean-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:glean-1/* | |
| + - queue:create-task:low:glean-t/* | |
| - queue:get-artifact:project/gecko/mac-sdk/* | |
| - queue:rerun-task:glean-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.glean.v2.glean-pr.* | |
| - queue:route:index.glean.v2.glean.cache.head.* | |
| - queue:route:index.glean.v2.glean.cache.level-1.* | |
| - queue:route:index.glean.v2.glean.cache.pr.* | |
| - queue:route:index.project.glean.cache.head.* | |
| @@ -134092,16 +136236,44 @@ Role=repo:github.com/mozilla/neqo:*: | |
| - queue:scheduler-id:mozilla-level-1 | |
| - secrets:get:project/mozilla/level-1/* | |
| - secrets:get:project/mozilla/level-any/* | |
| - secrets:get:project/mozilla/neqo/level-1/* | |
| - secrets:get:project/mozilla/neqo/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:github.com/mozilla/neqo:branch:main: | |
| + roleId: repo:github.com/mozilla/neqo:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:mozilla-level-1-* | |
| + - docker-worker:cache:mozilla-project-neqo-level-1-* | |
| + - generic-worker:cache:mozilla-level-1-* | |
| + - generic-worker:cache:mozilla-project-neqo-level-1-* | |
| + - in-tree:hook-action:project-mozilla/in-tree-action-1-* | |
| + - index:insert-task:mozilla.v2.neqo.* | |
| + - queue:cancel-task:mozilla-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:mozilla-1/* | |
| + - queue:create-task:low:mozilla-t/* | |
| + - queue:rerun-task:mozilla-level-1/* | |
| + - queue:route:checks | |
| + - queue:route:index.mozilla.v2.neqo.* | |
| + - queue:scheduler-id:mozilla-level-1 | |
| + - secrets:get:project/mozilla/level-1/* | |
| + - secrets:get:project/mozilla/level-any/* | |
| + - secrets:get:project/mozilla/neqo/level-1/* | |
| + - secrets:get:project/mozilla/neqo/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:github.com/mozilla/neqo:pull-request: | |
| roleId: repo:github.com/mozilla/neqo:pull-request | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - index:insert-task:mozilla.v2.neqo-pr.* | |
| @@ -134176,34 +136348,68 @@ Role=repo:github.com/taskcluster/taskgraph:branch:*: | |
| - queue:route:tc-treeherder.v2.taskgraph.* | |
| - queue:scheduler-id:taskgraph-level-3 | |
| - secrets:get:project/releng/taskgraph/ci | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| - secrets:get:project/taskgraph/level-3/* | |
| - secrets:get:project/taskgraph/level-any/* | |
| + Role=repo:github.com/taskcluster/taskgraph:branch:main: | |
| + roleId: repo:github.com/taskcluster/taskgraph:branch:main | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:taskgraph-level-3-* | |
| + - generic-worker:cache:taskgraph-level-3-* | |
| + - in-tree:hook-action:project-taskgraph/in-tree-action-3-* | |
| + - index:insert-task:taskgraph.cache.level-3.* | |
| + - index:insert-task:taskgraph.v2.taskgraph.* | |
| + - queue:cancel-task:taskgraph-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:taskgraph-3/* | |
| + - queue:create-task:highest:taskgraph-t/* | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-3-decision | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-3-images | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| + - queue:rerun-task:taskgraph-level-3/* | |
| + - queue:route:checks | |
| + - queue:route:index.taskgraph.cache.level-3.* | |
| + - queue:route:index.taskgraph.v2.taskgraph.* | |
| + - queue:route:tc-treeherder-stage.taskgraph.* | |
| + - queue:route:tc-treeherder-stage.v2.taskgraph.* | |
| + - queue:route:tc-treeherder.taskgraph.* | |
| + - queue:route:tc-treeherder.v2.taskgraph.* | |
| + - queue:scheduler-id:taskgraph-level-3 | |
| + - secrets:get:project/releng/taskgraph/ci | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/taskgraph/level-3/* | |
| + - secrets:get:project/taskgraph/level-any/* | |
| + | |
| Role=repo:github.com/taskcluster/taskgraph:pr-action:*: | |
| roleId: repo:github.com/taskcluster/taskgraph:pr-action:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:taskgraph-level-1-* | |
| - generic-worker:cache:taskgraph-level-1-* | |
| - in-tree:hook-action:project-taskgraph/in-tree-action-1-* | |
| - index:insert-task:taskgraph.cache.level-1.* | |
| - queue:cancel-task:taskgraph-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:taskgraph-1/* | |
| - - queue:create-task:highest:taskgraph-t/* | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-decision | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-images | |
| - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:taskgraph-1/* | |
| + - queue:create-task:low:taskgraph-t/* | |
| - queue:rerun-task:taskgraph-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.taskgraph.cache.level-1.* | |
| - queue:route:tc-treeherder-stage.v2.taskgraph-pr.* | |
| - queue:route:tc-treeherder.v2.taskgraph-pr.* | |
| - queue:scheduler-id:taskgraph-level-1 | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| @@ -134222,22 +136428,22 @@ Role=repo:github.com/taskcluster/taskgraph:pull-request: | |
| - in-tree:hook-action:project-taskgraph/in-tree-action-1-* | |
| - in-tree:hook-action:project-taskgraph/in-tree-pr-action-1-* | |
| - index:insert-task:taskgraph.cache.head.* | |
| - index:insert-task:taskgraph.cache.level-1.* | |
| - index:insert-task:taskgraph.cache.pr.* | |
| - index:insert-task:taskgraph.v2.taskgraph-pr.* | |
| - queue:cancel-task-group:taskgraph-level-1/* | |
| - queue:cancel-task:taskgraph-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:taskgraph-1/* | |
| - - queue:create-task:highest:taskgraph-t/* | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-decision | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-images | |
| - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:taskgraph-1/* | |
| + - queue:create-task:low:taskgraph-t/* | |
| - queue:rerun-task:taskgraph-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.taskgraph.cache.head.* | |
| - queue:route:index.taskgraph.cache.level-1.* | |
| - queue:route:index.taskgraph.cache.pr.* | |
| - queue:route:index.taskgraph.v2.taskgraph-pr.* | |
| - queue:route:tc-treeherder-stage.v2.taskgraph-pr.* | |
| - queue:route:tc-treeherder.v2.taskgraph-pr.* | |
| @@ -134261,22 +136467,22 @@ Role=repo:github.com/taskcluster/taskgraph:pull-request-untrusted: | |
| - in-tree:hook-action:project-taskgraph/in-tree-action-1-* | |
| - in-tree:hook-action:project-taskgraph/in-tree-pr-action-1-* | |
| - index:insert-task:taskgraph.cache.head.* | |
| - index:insert-task:taskgraph.cache.level-1.* | |
| - index:insert-task:taskgraph.cache.pr.* | |
| - index:insert-task:taskgraph.v2.taskgraph-pr.* | |
| - queue:cancel-task-group:taskgraph-level-1/* | |
| - queue:cancel-task:taskgraph-level-1/* | |
| - - queue:create-task:highest:built-in/* | |
| - - queue:create-task:highest:taskgraph-1/* | |
| - - queue:create-task:highest:taskgraph-t/* | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-decision | |
| - queue:create-task:low:aws-provisioner-v1/gecko-1-images | |
| - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:taskgraph-1/* | |
| + - queue:create-task:low:taskgraph-t/* | |
| - queue:rerun-task:taskgraph-level-1/* | |
| - queue:route:checks | |
| - queue:route:index.taskgraph.cache.head.* | |
| - queue:route:index.taskgraph.cache.level-1.* | |
| - queue:route:index.taskgraph.cache.pr.* | |
| - queue:route:index.taskgraph.v2.taskgraph-pr.* | |
| - queue:route:tc-treeherder-stage.v2.taskgraph-pr.* | |
| - queue:route:tc-treeherder.v2.taskgraph-pr.* | |
| @@ -134349,16 +136555,49 @@ Role=repo:hg.mozilla.org/ci/ci-configuration-try:*: | |
| - queue:route:tc-treeherder.ci-configuration-try.* | |
| - queue:route:tc-treeherder.v2.ci-configuration-try.* | |
| - queue:scheduler-id:ci-level-1 | |
| - secrets:get:project/ci/level-1/* | |
| - secrets:get:project/ci/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:hg.mozilla.org/ci/ci-configuration-try:branch:default: | |
| + roleId: repo:hg.mozilla.org/ci/ci-configuration-try:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:ci-level-1-* | |
| + - generic-worker:cache:ci-level-1-* | |
| + - in-tree:hook-action:project-ci/in-tree-action-1-* | |
| + - index:insert-task:ci.cache.level-1.* | |
| + - index:insert-task:ci.v2.ci-configuration-try.* | |
| + - queue:cancel-task:ci-level-1/* | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-1-decision | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-1-images | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:ci-1/* | |
| + - queue:create-task:low:ci-t/* | |
| + - queue:rerun-task:ci-level-1/* | |
| + - queue:route:index.ci.cache.level-1.* | |
| + - queue:route:index.ci.v2.ci-configuration-try.* | |
| + - queue:route:project.relman.codereview.* | |
| + - queue:route:tc-treeherder-stage.ci-configuration-try.* | |
| + - queue:route:tc-treeherder-stage.v2.ci-configuration-try.* | |
| + - queue:route:tc-treeherder.ci-configuration-try.* | |
| + - queue:route:tc-treeherder.v2.ci-configuration-try.* | |
| + - queue:scheduler-id:ci-level-1 | |
| + - secrets:get:project/ci/level-1/* | |
| + - secrets:get:project/ci/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:hg.mozilla.org/ci/ci-configuration:*: | |
| roleId: repo:hg.mozilla.org/ci/ci-configuration:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:ci-level-3-* | |
| @@ -134381,16 +136620,48 @@ Role=repo:hg.mozilla.org/ci/ci-configuration:*: | |
| - queue:route:tc-treeherder.ci-configuration.* | |
| - queue:route:tc-treeherder.v2.ci-configuration.* | |
| - queue:scheduler-id:ci-level-3 | |
| - secrets:get:project/ci/level-3/* | |
| - secrets:get:project/ci/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:hg.mozilla.org/ci/ci-configuration:branch:default: | |
| + roleId: repo:hg.mozilla.org/ci/ci-configuration:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:ci-level-3-* | |
| + - generic-worker:cache:ci-level-3-* | |
| + - in-tree:hook-action:project-ci/in-tree-action-3-* | |
| + - index:insert-task:ci.cache.level-3.* | |
| + - index:insert-task:ci.v2.ci-configuration.* | |
| + - queue:cancel-task:ci-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:ci-3/* | |
| + - queue:create-task:highest:ci-t/* | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-3-decision | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-3-images | |
| + - queue:create-task:low:aws-provisioner-v1/gecko-misc | |
| + - queue:rerun-task:ci-level-3/* | |
| + - queue:route:index.ci.cache.level-3.* | |
| + - queue:route:index.ci.v2.ci-configuration.* | |
| + - queue:route:tc-treeherder-stage.ci-configuration.* | |
| + - queue:route:tc-treeherder-stage.v2.ci-configuration.* | |
| + - queue:route:tc-treeherder.ci-configuration.* | |
| + - queue:route:tc-treeherder.v2.ci-configuration.* | |
| + - queue:scheduler-id:ci-level-3 | |
| + - secrets:get:project/ci/level-3/* | |
| + - secrets:get:project/ci/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:hg.mozilla.org/comm-central:*: | |
| roleId: repo:hg.mozilla.org/comm-central:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - assume:project:taskcluster:comm:level-3-sccache-buckets | |
| @@ -134498,17 +136769,85 @@ Role=repo:hg.mozilla.org/comm-central:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| Role=repo:hg.mozilla.org/comm-central:branch:*: | |
| roleId: repo:hg.mozilla.org/comm-central:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-3-sccache-buckets | |
| + - docker-worker:cache:comm-level-3-* | |
| + - generic-worker:cache:comm-level-3-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| + - index:insert-task:comm.cache.level-3.* | |
| + - index:insert-task:comm.v2.comm-central.* | |
| + - project:comm:thunderbird:releng:signing:cert:nightly-signing | |
| + - project:comm:thunderbird:releng:signing:cert:release-apple-notarization | |
| + - queue:cancel-task:comm-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:comm-3/* | |
| + - queue:create-task:highest:comm-t/* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-3/* | |
| + - queue:route:coalesce.v1.comm-central.* | |
| + - queue:route:index.comm.cache.level-3.* | |
| + - queue:route:index.comm.v2.comm-central.* | |
| + - queue:route:index.comm.v2.trunk.revision.* | |
| + - queue:route:tc-treeherder-stage.comm-central.* | |
| + - queue:route:tc-treeherder-stage.v2.comm-central.* | |
| + - queue:route:tc-treeherder.comm-central.* | |
| + - queue:route:tc-treeherder.v2.comm-central.* | |
| + - queue:scheduler-id:comm-level-3 | |
| + - secrets:get:project/comm/level-3/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/comm-central:branch:default: | |
| + roleId: repo:hg.mozilla.org/comm-central:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-3-sccache-buckets | |
| + - docker-worker:cache:comm-level-3-* | |
| + - generic-worker:cache:comm-level-3-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| + - index:insert-task:comm.cache.level-3.* | |
| + - index:insert-task:comm.v2.comm-central.* | |
| + - project:comm:thunderbird:releng:signing:cert:nightly-signing | |
| + - project:comm:thunderbird:releng:signing:cert:release-apple-notarization | |
| + - queue:cancel-task:comm-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:comm-3/* | |
| + - queue:create-task:highest:comm-t/* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-3/* | |
| + - queue:route:coalesce.v1.comm-central.* | |
| + - queue:route:index.comm.cache.level-3.* | |
| + - queue:route:index.comm.v2.comm-central.* | |
| + - queue:route:index.comm.v2.trunk.revision.* | |
| + - queue:route:tc-treeherder-stage.comm-central.* | |
| + - queue:route:tc-treeherder-stage.v2.comm-central.* | |
| + - queue:route:tc-treeherder.comm-central.* | |
| + - queue:route:tc-treeherder.v2.comm-central.* | |
| + - queue:scheduler-id:comm-level-3 | |
| + - secrets:get:project/comm/level-3/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/comm-central:cron:*: | |
| roleId: repo:hg.mozilla.org/comm-central:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| @@ -134690,17 +137029,91 @@ Role=repo:hg.mozilla.org/integration/autoland:action:scriptworker-canary: | |
| scopes: - secrets:get:project/releng/scriptworker/scriptworker-canary-sshkey | |
| Role=repo:hg.mozilla.org/integration/autoland:branch:*: | |
| roleId: repo:hg.mozilla.org/integration/autoland:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.autoland.* | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.autoland.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.autoland.* | |
| + - queue:route:index.gecko.v2.trunk.revision.* | |
| + - queue:route:tc-treeherder-stage.autoland.* | |
| + - queue:route:tc-treeherder-stage.v2.autoland.* | |
| + - queue:route:tc-treeherder.autoland.* | |
| + - queue:route:tc-treeherder.v2.autoland.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/integration/autoland:branch:default: | |
| + roleId: repo:hg.mozilla.org/integration/autoland:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.autoland.* | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.autoland.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.autoland.* | |
| + - queue:route:index.gecko.v2.trunk.revision.* | |
| + - queue:route:tc-treeherder-stage.autoland.* | |
| + - queue:route:tc-treeherder-stage.v2.autoland.* | |
| + - queue:route:tc-treeherder.autoland.* | |
| + - queue:route:tc-treeherder.v2.autoland.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/integration/autoland:cron:*: | |
| roleId: repo:hg.mozilla.org/integration/autoland:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| @@ -134915,17 +137328,105 @@ Role=repo:hg.mozilla.org/mozilla-central:action:scriptworker-canary: | |
| scopes: - secrets:get:project/releng/scriptworker/scriptworker-canary-sshkey | |
| Role=repo:hg.mozilla.org/mozilla-central:branch:*: | |
| roleId: repo:hg.mozilla.org/mozilla-central:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - hooks:trigger-hook:project-releng/cron-task-comm-central/tb-rust-vendor-check | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.mozilla-central.* | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.mozilla-central.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.mozilla-central.* | |
| + - queue:route:index.gecko.v2.trunk.revision.* | |
| + - queue:route:tc-treeherder-stage.mozilla-central.* | |
| + - queue:route:tc-treeherder-stage.v2.mozilla-central.* | |
| + - queue:route:tc-treeherder.mozilla-central.* | |
| + - queue:route:tc-treeherder.v2.mozilla-central.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:gecko/gfx-github-sync/token | |
| + - secrets:get:gecko/rlbox-github-sync/token | |
| + - secrets:get:project/engwf/gecko/3/tokens | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/mobile/firefox-android/fenix/nightly | |
| + - secrets:get:project/mobile/firefox-android/focus-android/nightly | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/webrender-ci/wrupdater-github-token | |
| + | |
| + Role=repo:hg.mozilla.org/mozilla-central:branch:default: | |
| + roleId: repo:hg.mozilla.org/mozilla-central:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - hooks:trigger-hook:project-releng/cron-task-comm-central/tb-rust-vendor-check | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.mozilla-central.* | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.mozilla-central.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.mozilla-central.* | |
| + - queue:route:index.gecko.v2.trunk.revision.* | |
| + - queue:route:tc-treeherder-stage.mozilla-central.* | |
| + - queue:route:tc-treeherder-stage.v2.mozilla-central.* | |
| + - queue:route:tc-treeherder.mozilla-central.* | |
| + - queue:route:tc-treeherder.v2.mozilla-central.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:gecko/gfx-github-sync/token | |
| + - secrets:get:gecko/rlbox-github-sync/token | |
| + - secrets:get:project/engwf/gecko/3/tokens | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/mobile/firefox-android/fenix/nightly | |
| + - secrets:get:project/mobile/firefox-android/focus-android/nightly | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + - secrets:get:project/webrender-ci/wrupdater-github-token | |
| Role=repo:hg.mozilla.org/mozilla-central:cron:*: | |
| roleId: repo:hg.mozilla.org/mozilla-central:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| @@ -135072,17 +137573,79 @@ Role=repo:hg.mozilla.org/projects/ash:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| Role=repo:hg.mozilla.org/projects/ash:branch:*: | |
| roleId: repo:hg.mozilla.org/projects/ash:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-comm/in-tree-action-2-* | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-2-sccache-buckets | |
| + - docker-worker:cache:comm-level-2-* | |
| + - generic-worker:cache:comm-level-2-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-2-* | |
| + - index:insert-task:comm.cache.level-2.* | |
| + - index:insert-task:comm.v2.ash.* | |
| + - queue:cancel-task:comm-level-2/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:comm-2/* | |
| + - queue:create-task:low:comm-t/* | |
| + - queue:create-task:low:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:low:scriptworker-k8s/comm-2-* | |
| + - queue:create-task:low:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-2/* | |
| + - queue:route:coalesce.v1.ash.* | |
| + - queue:route:index.comm.cache.level-2.* | |
| + - queue:route:index.comm.v2.ash.* | |
| + - queue:route:tc-treeherder-stage.ash.* | |
| + - queue:route:tc-treeherder-stage.v2.ash.* | |
| + - queue:route:tc-treeherder.ash.* | |
| + - queue:route:tc-treeherder.v2.ash.* | |
| + - queue:scheduler-id:comm-level-2 | |
| + - secrets:get:project/comm/level-2/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/projects/ash:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/ash:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-2-sccache-buckets | |
| + - docker-worker:cache:comm-level-2-* | |
| + - generic-worker:cache:comm-level-2-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-2-* | |
| + - index:insert-task:comm.cache.level-2.* | |
| + - index:insert-task:comm.v2.ash.* | |
| + - queue:cancel-task:comm-level-2/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:comm-2/* | |
| + - queue:create-task:low:comm-t/* | |
| + - queue:create-task:low:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:low:scriptworker-k8s/comm-2-* | |
| + - queue:create-task:low:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-2/* | |
| + - queue:route:coalesce.v1.ash.* | |
| + - queue:route:index.comm.cache.level-2.* | |
| + - queue:route:index.comm.v2.ash.* | |
| + - queue:route:tc-treeherder-stage.ash.* | |
| + - queue:route:tc-treeherder-stage.v2.ash.* | |
| + - queue:route:tc-treeherder.ash.* | |
| + - queue:route:tc-treeherder.v2.ash.* | |
| + - queue:scheduler-id:comm-level-2 | |
| + - secrets:get:project/comm/level-2/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/projects/birch:*: | |
| roleId: repo:hg.mozilla.org/projects/birch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -135218,17 +137781,89 @@ Role=repo:hg.mozilla.org/projects/birch:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| Role=repo:hg.mozilla.org/projects/birch:branch:*: | |
| roleId: repo:hg.mozilla.org/projects/birch:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-2-sccache-buckets | |
| + - docker-worker:cache:gecko-level-2-* | |
| + - generic-worker:cache:gecko-level-2-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + - index:insert-task:gecko.cache.level-2.* | |
| + - index:insert-task:gecko.v2.birch.* | |
| + - queue:cancel-task:gecko-level-2/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-2/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-2-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-2-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-2/* | |
| + - queue:route:coalesce.v1.birch.* | |
| + - queue:route:index.gecko.cache.level-2.* | |
| + - queue:route:index.gecko.v2.birch.* | |
| + - queue:route:tc-treeherder-stage.birch.* | |
| + - queue:route:tc-treeherder-stage.v2.birch.* | |
| + - queue:route:tc-treeherder.birch.* | |
| + - queue:route:tc-treeherder.v2.birch.* | |
| + - queue:scheduler-id:gecko-level-2 | |
| + - secrets:get:project/gecko/level-2/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/projects/birch:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/birch:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-2-sccache-buckets | |
| + - docker-worker:cache:gecko-level-2-* | |
| + - generic-worker:cache:gecko-level-2-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + - index:insert-task:gecko.cache.level-2.* | |
| + - index:insert-task:gecko.v2.birch.* | |
| + - queue:cancel-task:gecko-level-2/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-2/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-2-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-2-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-2/* | |
| + - queue:route:coalesce.v1.birch.* | |
| + - queue:route:index.gecko.cache.level-2.* | |
| + - queue:route:index.gecko.v2.birch.* | |
| + - queue:route:tc-treeherder-stage.birch.* | |
| + - queue:route:tc-treeherder-stage.v2.birch.* | |
| + - queue:route:tc-treeherder.birch.* | |
| + - queue:route:tc-treeherder.v2.birch.* | |
| + - queue:scheduler-id:gecko-level-2 | |
| + - secrets:get:project/gecko/level-2/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/projects/birch:cron:*: | |
| roleId: repo:hg.mozilla.org/projects/birch:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| @@ -135374,17 +138009,93 @@ Role=repo:hg.mozilla.org/projects/cedar:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| Role=repo:hg.mozilla.org/projects/cedar:branch:*: | |
| roleId: repo:hg.mozilla.org/projects/cedar:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-2-sccache-buckets | |
| + - docker-worker:cache:gecko-level-2-* | |
| + - generic-worker:cache:gecko-level-2-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + - index:insert-task:gecko.cache.level-2.* | |
| + - index:insert-task:gecko.v2.cedar.* | |
| + - project:releng:balrog:server:nightly | |
| + - project:releng:beetmover:bucket:nightly | |
| + - queue:cancel-task:gecko-level-2/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-2/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-2-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-2-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-2/* | |
| + - queue:route:coalesce.v1.cedar.* | |
| + - queue:route:index.gecko.cache.level-2.* | |
| + - queue:route:index.gecko.v2.cedar.* | |
| + - queue:route:tc-treeherder-stage.cedar.* | |
| + - queue:route:tc-treeherder-stage.v2.cedar.* | |
| + - queue:route:tc-treeherder.cedar.* | |
| + - queue:route:tc-treeherder.v2.cedar.* | |
| + - queue:scheduler-id:gecko-level-2 | |
| + - secrets:get:project/gecko/level-2/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/projects/cedar:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/cedar:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-2-sccache-buckets | |
| + - docker-worker:cache:gecko-level-2-* | |
| + - generic-worker:cache:gecko-level-2-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + - index:insert-task:gecko.cache.level-2.* | |
| + - index:insert-task:gecko.v2.cedar.* | |
| + - project:releng:balrog:server:nightly | |
| + - project:releng:beetmover:bucket:nightly | |
| + - queue:cancel-task:gecko-level-2/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-2/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-2-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-2-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-2/* | |
| + - queue:route:coalesce.v1.cedar.* | |
| + - queue:route:index.gecko.cache.level-2.* | |
| + - queue:route:index.gecko.v2.cedar.* | |
| + - queue:route:tc-treeherder-stage.cedar.* | |
| + - queue:route:tc-treeherder-stage.v2.cedar.* | |
| + - queue:route:tc-treeherder.cedar.* | |
| + - queue:route:tc-treeherder.v2.cedar.* | |
| + - queue:scheduler-id:gecko-level-2 | |
| + - secrets:get:project/gecko/level-2/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/projects/cedar:cron:*: | |
| roleId: repo:hg.mozilla.org/projects/cedar:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| @@ -135528,17 +138239,89 @@ Role=repo:hg.mozilla.org/projects/cypress:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| Role=repo:hg.mozilla.org/projects/cypress:branch:*: | |
| roleId: repo:hg.mozilla.org/projects/cypress:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-2-sccache-buckets | |
| + - docker-worker:cache:gecko-level-2-* | |
| + - generic-worker:cache:gecko-level-2-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + - index:insert-task:gecko.cache.level-2.* | |
| + - index:insert-task:gecko.v2.cypress.* | |
| + - queue:cancel-task:gecko-level-2/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-2/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-2-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-2-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-2/* | |
| + - queue:route:coalesce.v1.cypress.* | |
| + - queue:route:index.gecko.cache.level-2.* | |
| + - queue:route:index.gecko.v2.cypress.* | |
| + - queue:route:tc-treeherder-stage.cypress.* | |
| + - queue:route:tc-treeherder-stage.v2.cypress.* | |
| + - queue:route:tc-treeherder.cypress.* | |
| + - queue:route:tc-treeherder.v2.cypress.* | |
| + - queue:scheduler-id:gecko-level-2 | |
| + - secrets:get:project/gecko/level-2/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/projects/cypress:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/cypress:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-2-sccache-buckets | |
| + - docker-worker:cache:gecko-level-2-* | |
| + - generic-worker:cache:gecko-level-2-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + - index:insert-task:gecko.cache.level-2.* | |
| + - index:insert-task:gecko.v2.cypress.* | |
| + - queue:cancel-task:gecko-level-2/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-2/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-2-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-2-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-2/* | |
| + - queue:route:coalesce.v1.cypress.* | |
| + - queue:route:index.gecko.cache.level-2.* | |
| + - queue:route:index.gecko.v2.cypress.* | |
| + - queue:route:tc-treeherder-stage.cypress.* | |
| + - queue:route:tc-treeherder-stage.v2.cypress.* | |
| + - queue:route:tc-treeherder.cypress.* | |
| + - queue:route:tc-treeherder.v2.cypress.* | |
| + - queue:scheduler-id:gecko-level-2 | |
| + - secrets:get:project/gecko/level-2/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/projects/cypress:cron:*: | |
| roleId: repo:hg.mozilla.org/projects/cypress:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| @@ -135682,17 +138465,89 @@ Role=repo:hg.mozilla.org/projects/elm:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| Role=repo:hg.mozilla.org/projects/elm:branch:*: | |
| roleId: repo:hg.mozilla.org/projects/elm:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-2-sccache-buckets | |
| + - docker-worker:cache:gecko-level-2-* | |
| + - generic-worker:cache:gecko-level-2-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + - index:insert-task:gecko.cache.level-2.* | |
| + - index:insert-task:gecko.v2.elm.* | |
| + - queue:cancel-task:gecko-level-2/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-2/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-2-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-2-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-2/* | |
| + - queue:route:coalesce.v1.elm.* | |
| + - queue:route:index.gecko.cache.level-2.* | |
| + - queue:route:index.gecko.v2.elm.* | |
| + - queue:route:tc-treeherder-stage.elm.* | |
| + - queue:route:tc-treeherder-stage.v2.elm.* | |
| + - queue:route:tc-treeherder.elm.* | |
| + - queue:route:tc-treeherder.v2.elm.* | |
| + - queue:scheduler-id:gecko-level-2 | |
| + - secrets:get:project/gecko/level-2/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/projects/elm:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/elm:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-2-sccache-buckets | |
| + - docker-worker:cache:gecko-level-2-* | |
| + - generic-worker:cache:gecko-level-2-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + - index:insert-task:gecko.cache.level-2.* | |
| + - index:insert-task:gecko.v2.elm.* | |
| + - queue:cancel-task:gecko-level-2/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-2/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-2-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-2-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-2/* | |
| + - queue:route:coalesce.v1.elm.* | |
| + - queue:route:index.gecko.cache.level-2.* | |
| + - queue:route:index.gecko.v2.elm.* | |
| + - queue:route:tc-treeherder-stage.elm.* | |
| + - queue:route:tc-treeherder-stage.v2.elm.* | |
| + - queue:route:tc-treeherder.elm.* | |
| + - queue:route:tc-treeherder.v2.elm.* | |
| + - queue:scheduler-id:gecko-level-2 | |
| + - secrets:get:project/gecko/level-2/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/projects/elm:cron:*: | |
| roleId: repo:hg.mozilla.org/projects/elm:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| @@ -135844,17 +138699,89 @@ Role=repo:hg.mozilla.org/projects/holly:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| Role=repo:hg.mozilla.org/projects/holly:branch:*: | |
| roleId: repo:hg.mozilla.org/projects/holly:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-2-sccache-buckets | |
| + - docker-worker:cache:gecko-level-2-* | |
| + - generic-worker:cache:gecko-level-2-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + - index:insert-task:gecko.cache.level-2.* | |
| + - index:insert-task:gecko.v2.holly.* | |
| + - queue:cancel-task:gecko-level-2/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-2/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-2-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-2-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-2/* | |
| + - queue:route:coalesce.v1.holly.* | |
| + - queue:route:index.gecko.cache.level-2.* | |
| + - queue:route:index.gecko.v2.holly.* | |
| + - queue:route:tc-treeherder-stage.holly.* | |
| + - queue:route:tc-treeherder-stage.v2.holly.* | |
| + - queue:route:tc-treeherder.holly.* | |
| + - queue:route:tc-treeherder.v2.holly.* | |
| + - queue:scheduler-id:gecko-level-2 | |
| + - secrets:get:project/gecko/level-2/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/projects/holly:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/holly:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-2-sccache-buckets | |
| + - docker-worker:cache:gecko-level-2-* | |
| + - generic-worker:cache:gecko-level-2-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + - index:insert-task:gecko.cache.level-2.* | |
| + - index:insert-task:gecko.v2.holly.* | |
| + - queue:cancel-task:gecko-level-2/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-2/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-2-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-2-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-2/* | |
| + - queue:route:coalesce.v1.holly.* | |
| + - queue:route:index.gecko.cache.level-2.* | |
| + - queue:route:index.gecko.v2.holly.* | |
| + - queue:route:tc-treeherder-stage.holly.* | |
| + - queue:route:tc-treeherder-stage.v2.holly.* | |
| + - queue:route:tc-treeherder.holly.* | |
| + - queue:route:tc-treeherder.v2.holly.* | |
| + - queue:scheduler-id:gecko-level-2 | |
| + - secrets:get:project/gecko/level-2/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/projects/jamun:*: | |
| roleId: repo:hg.mozilla.org/projects/jamun:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -135954,17 +138881,79 @@ Role=repo:hg.mozilla.org/projects/jamun:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| Role=repo:hg.mozilla.org/projects/jamun:branch:*: | |
| roleId: repo:hg.mozilla.org/projects/jamun:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-comm/in-tree-action-2-* | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-2-sccache-buckets | |
| + - docker-worker:cache:comm-level-2-* | |
| + - generic-worker:cache:comm-level-2-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-2-* | |
| + - index:insert-task:comm.cache.level-2.* | |
| + - index:insert-task:comm.v2.jamun.* | |
| + - queue:cancel-task:comm-level-2/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:comm-2/* | |
| + - queue:create-task:low:comm-t/* | |
| + - queue:create-task:low:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:low:scriptworker-k8s/comm-2-* | |
| + - queue:create-task:low:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-2/* | |
| + - queue:route:coalesce.v1.jamun.* | |
| + - queue:route:index.comm.cache.level-2.* | |
| + - queue:route:index.comm.v2.jamun.* | |
| + - queue:route:tc-treeherder-stage.jamun.* | |
| + - queue:route:tc-treeherder-stage.v2.jamun.* | |
| + - queue:route:tc-treeherder.jamun.* | |
| + - queue:route:tc-treeherder.v2.jamun.* | |
| + - queue:scheduler-id:comm-level-2 | |
| + - secrets:get:project/comm/level-2/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/projects/jamun:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/jamun:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-2-sccache-buckets | |
| + - docker-worker:cache:comm-level-2-* | |
| + - generic-worker:cache:comm-level-2-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-2-* | |
| + - index:insert-task:comm.cache.level-2.* | |
| + - index:insert-task:comm.v2.jamun.* | |
| + - queue:cancel-task:comm-level-2/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:comm-2/* | |
| + - queue:create-task:low:comm-t/* | |
| + - queue:create-task:low:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:low:scriptworker-k8s/comm-2-* | |
| + - queue:create-task:low:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-2/* | |
| + - queue:route:coalesce.v1.jamun.* | |
| + - queue:route:index.comm.cache.level-2.* | |
| + - queue:route:index.comm.v2.jamun.* | |
| + - queue:route:tc-treeherder-stage.jamun.* | |
| + - queue:route:tc-treeherder-stage.v2.jamun.* | |
| + - queue:route:tc-treeherder.jamun.* | |
| + - queue:route:tc-treeherder.v2.jamun.* | |
| + - queue:scheduler-id:comm-level-2 | |
| + - secrets:get:project/comm/level-2/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/projects/larch:*: | |
| roleId: repo:hg.mozilla.org/projects/larch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -136116,17 +139105,93 @@ Role=repo:hg.mozilla.org/projects/larch:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| Role=repo:hg.mozilla.org/projects/larch:branch:*: | |
| roleId: repo:hg.mozilla.org/projects/larch:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.larch.* | |
| + - project:releng:balrog:server:nightly | |
| + - project:releng:beetmover:bucket:nightly | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.larch.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.larch.* | |
| + - queue:route:tc-treeherder-stage.larch.* | |
| + - queue:route:tc-treeherder-stage.v2.larch.* | |
| + - queue:route:tc-treeherder.larch.* | |
| + - queue:route:tc-treeherder.v2.larch.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/projects/larch:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/larch:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.larch.* | |
| + - project:releng:balrog:server:nightly | |
| + - project:releng:beetmover:bucket:nightly | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.larch.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.larch.* | |
| + - queue:route:tc-treeherder-stage.larch.* | |
| + - queue:route:tc-treeherder-stage.v2.larch.* | |
| + - queue:route:tc-treeherder.larch.* | |
| + - queue:route:tc-treeherder.v2.larch.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/projects/larch:cron:*: | |
| roleId: repo:hg.mozilla.org/projects/larch:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| @@ -136285,17 +139350,91 @@ Role=repo:hg.mozilla.org/projects/maple:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| Role=repo:hg.mozilla.org/projects/maple:branch:*: | |
| roleId: repo:hg.mozilla.org/projects/maple:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.maple.* | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-1-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.maple.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.maple.* | |
| + - queue:route:tc-treeherder-stage.maple.* | |
| + - queue:route:tc-treeherder-stage.v2.maple.* | |
| + - queue:route:tc-treeherder.maple.* | |
| + - queue:route:tc-treeherder.v2.maple.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/projects/maple:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/maple:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.maple.* | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-1-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.maple.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.maple.* | |
| + - queue:route:tc-treeherder-stage.maple.* | |
| + - queue:route:tc-treeherder-stage.v2.maple.* | |
| + - queue:route:tc-treeherder.maple.* | |
| + - queue:route:tc-treeherder.v2.maple.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/projects/maple:cron:*: | |
| roleId: repo:hg.mozilla.org/projects/maple:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| @@ -136333,16 +139472,54 @@ Role=repo:hg.mozilla.org/projects/nss-try:*: | |
| - queue:route:tc-treeherder.nss-try.* | |
| - queue:route:tc-treeherder.v2.nss-try.* | |
| - queue:scheduler-id:nss-level-1 | |
| - secrets:get:project/nss/level-1/* | |
| - secrets:get:project/nss/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:hg.mozilla.org/projects/nss-try:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/nss-try:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:nss-level-1-* | |
| + - docker-worker:feature:allowPtrace | |
| + - generic-worker:cache:nss-level-1-* | |
| + - in-tree:hook-action:project-nss/in-tree-action-1-* | |
| + - index:insert-task:nss.cache.level-1.* | |
| + - index:insert-task:nss.v2.nss-try.* | |
| + - project:releng:services/tooltool/api/download/internal | |
| + - project:releng:services/tooltool/api/download/public | |
| + - queue:cancel-task:nss-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:localprovisioner/nss-aarch64 | |
| + - queue:create-task:low:localprovisioner/nss-macos-10-12 | |
| + - queue:create-task:low:localprovisioner/nss-macos-m1 | |
| + - queue:create-task:low:localprovisioner/nss-rpi | |
| + - queue:create-task:low:nss-1/* | |
| + - queue:create-task:low:nss-t/* | |
| + - queue:create-task:low:releng-hardware/nss-1-b-* | |
| + - queue:rerun-task:nss-level-1/* | |
| + - queue:route:index.docker.images.v1.nss-try.* | |
| + - queue:route:index.nss.cache.level-1.* | |
| + - queue:route:index.nss.v2.nss-try.* | |
| + - queue:route:tc-treeherder-stage.nss-try.* | |
| + - queue:route:tc-treeherder-stage.v2.nss-try.* | |
| + - queue:route:tc-treeherder.nss-try.* | |
| + - queue:route:tc-treeherder.v2.nss-try.* | |
| + - queue:scheduler-id:nss-level-1 | |
| + - secrets:get:project/nss/level-1/* | |
| + - secrets:get:project/nss/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:hg.mozilla.org/projects/nss:*: | |
| roleId: repo:hg.mozilla.org/projects/nss:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - docker-worker:cache:nss-level-3-* | |
| @@ -136370,16 +139547,53 @@ Role=repo:hg.mozilla.org/projects/nss:*: | |
| - queue:route:tc-treeherder.nss.* | |
| - queue:route:tc-treeherder.v2.nss.* | |
| - queue:scheduler-id:nss-level-3 | |
| - secrets:get:project/nss/level-3/* | |
| - secrets:get:project/nss/level-any/* | |
| - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + Role=repo:hg.mozilla.org/projects/nss:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/nss:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - docker-worker:cache:nss-level-3-* | |
| + - docker-worker:feature:allowPtrace | |
| + - generic-worker:cache:nss-level-3-* | |
| + - index:insert-task:nss.cache.level-3.* | |
| + - index:insert-task:nss.v2.nss.* | |
| + - project:releng:services/tooltool/api/download/internal | |
| + - project:releng:services/tooltool/api/download/public | |
| + - queue:cancel-task:nss-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:localprovisioner/nss-aarch64 | |
| + - queue:create-task:highest:localprovisioner/nss-macos-10-12 | |
| + - queue:create-task:highest:localprovisioner/nss-macos-m1 | |
| + - queue:create-task:highest:localprovisioner/nss-rpi | |
| + - queue:create-task:highest:nss-3/* | |
| + - queue:create-task:highest:nss-t/* | |
| + - queue:create-task:highest:releng-hardware/nss-3-b-* | |
| + - queue:rerun-task:nss-level-3/* | |
| + - queue:route:index.docker.images.v1.nss.* | |
| + - queue:route:index.nss.cache.level-3.* | |
| + - queue:route:index.nss.v2.nss.* | |
| + - queue:route:tc-treeherder-stage.nss.* | |
| + - queue:route:tc-treeherder-stage.v2.nss.* | |
| + - queue:route:tc-treeherder.nss.* | |
| + - queue:route:tc-treeherder.v2.nss.* | |
| + - queue:scheduler-id:nss-level-3 | |
| + - secrets:get:project/nss/level-3/* | |
| + - secrets:get:project/nss/level-any/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| Role=repo:hg.mozilla.org/projects/oak:*: | |
| roleId: repo:hg.mozilla.org/projects/oak:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| - assume:project:taskcluster:gecko:level-1-sccache-buckets | |
| @@ -136512,17 +139726,93 @@ Role=repo:hg.mozilla.org/projects/oak:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-1-* | |
| Role=repo:hg.mozilla.org/projects/oak:branch:*: | |
| roleId: repo:hg.mozilla.org/projects/oak:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-1-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-1-sccache-buckets | |
| + - docker-worker:cache:gecko-level-1-* | |
| + - generic-worker:cache:gecko-level-1-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-1-* | |
| + - index:insert-task:gecko.cache.level-1.* | |
| + - index:insert-task:gecko.v2.oak.* | |
| + - project:releng:balrog:server:nightly | |
| + - project:releng:beetmover:bucket:nightly | |
| + - queue:cancel-task:gecko-level-1/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-1/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-1-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-1-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-1/* | |
| + - queue:route:coalesce.v1.oak.* | |
| + - queue:route:index.gecko.cache.level-1.* | |
| + - queue:route:index.gecko.v2.oak.* | |
| + - queue:route:tc-treeherder-stage.oak.* | |
| + - queue:route:tc-treeherder-stage.v2.oak.* | |
| + - queue:route:tc-treeherder.oak.* | |
| + - queue:route:tc-treeherder.v2.oak.* | |
| + - queue:scheduler-id:gecko-level-1 | |
| + - secrets:get:project/gecko/level-1/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/projects/oak:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/oak:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-1-sccache-buckets | |
| + - docker-worker:cache:gecko-level-1-* | |
| + - generic-worker:cache:gecko-level-1-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-1-* | |
| + - index:insert-task:gecko.cache.level-1.* | |
| + - index:insert-task:gecko.v2.oak.* | |
| + - project:releng:balrog:server:nightly | |
| + - project:releng:beetmover:bucket:nightly | |
| + - queue:cancel-task:gecko-level-1/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-1/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-1-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-1-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-1/* | |
| + - queue:route:coalesce.v1.oak.* | |
| + - queue:route:index.gecko.cache.level-1.* | |
| + - queue:route:index.gecko.v2.oak.* | |
| + - queue:route:tc-treeherder-stage.oak.* | |
| + - queue:route:tc-treeherder-stage.v2.oak.* | |
| + - queue:route:tc-treeherder.oak.* | |
| + - queue:route:tc-treeherder.v2.oak.* | |
| + - queue:scheduler-id:gecko-level-1 | |
| + - secrets:get:project/gecko/level-1/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/projects/oak:cron:*: | |
| roleId: repo:hg.mozilla.org/projects/oak:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-1-* | |
| @@ -136682,17 +139972,93 @@ Role=repo:hg.mozilla.org/projects/pine:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| Role=repo:hg.mozilla.org/projects/pine:branch:*: | |
| roleId: repo:hg.mozilla.org/projects/pine:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.pine.* | |
| + - project:releng:balrog:server:nightly | |
| + - project:releng:beetmover:bucket:nightly | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.pine.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.pine.* | |
| + - queue:route:tc-treeherder-stage.pine.* | |
| + - queue:route:tc-treeherder-stage.v2.pine.* | |
| + - queue:route:tc-treeherder.pine.* | |
| + - queue:route:tc-treeherder.v2.pine.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/projects/pine:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/pine:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.pine.* | |
| + - project:releng:balrog:server:nightly | |
| + - project:releng:beetmover:bucket:nightly | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.pine.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.pine.* | |
| + - queue:route:tc-treeherder-stage.pine.* | |
| + - queue:route:tc-treeherder-stage.v2.pine.* | |
| + - queue:route:tc-treeherder.pine.* | |
| + - queue:route:tc-treeherder.v2.pine.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/projects/pine:cron:*: | |
| roleId: repo:hg.mozilla.org/projects/pine:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| @@ -136836,17 +140202,89 @@ Role=repo:hg.mozilla.org/projects/toolchains:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| Role=repo:hg.mozilla.org/projects/toolchains:branch:*: | |
| roleId: repo:hg.mozilla.org/projects/toolchains:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-2-sccache-buckets | |
| + - docker-worker:cache:gecko-level-2-* | |
| + - generic-worker:cache:gecko-level-2-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + - index:insert-task:gecko.cache.level-2.* | |
| + - index:insert-task:gecko.v2.toolchains.* | |
| + - queue:cancel-task:gecko-level-2/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-2/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-2-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-2-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-2/* | |
| + - queue:route:coalesce.v1.toolchains.* | |
| + - queue:route:index.gecko.cache.level-2.* | |
| + - queue:route:index.gecko.v2.toolchains.* | |
| + - queue:route:tc-treeherder-stage.toolchains.* | |
| + - queue:route:tc-treeherder-stage.v2.toolchains.* | |
| + - queue:route:tc-treeherder.toolchains.* | |
| + - queue:route:tc-treeherder.v2.toolchains.* | |
| + - queue:scheduler-id:gecko-level-2 | |
| + - secrets:get:project/gecko/level-2/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/projects/toolchains:branch:default: | |
| + roleId: repo:hg.mozilla.org/projects/toolchains:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-2-sccache-buckets | |
| + - docker-worker:cache:gecko-level-2-* | |
| + - generic-worker:cache:gecko-level-2-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-2-* | |
| + - index:insert-task:gecko.cache.level-2.* | |
| + - index:insert-task:gecko.v2.toolchains.* | |
| + - queue:cancel-task:gecko-level-2/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-2/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-2-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-2-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-2/* | |
| + - queue:route:coalesce.v1.toolchains.* | |
| + - queue:route:index.gecko.cache.level-2.* | |
| + - queue:route:index.gecko.v2.toolchains.* | |
| + - queue:route:tc-treeherder-stage.toolchains.* | |
| + - queue:route:tc-treeherder-stage.v2.toolchains.* | |
| + - queue:route:tc-treeherder.toolchains.* | |
| + - queue:route:tc-treeherder.v2.toolchains.* | |
| + - queue:scheduler-id:gecko-level-2 | |
| + - secrets:get:project/gecko/level-2/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-2/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/releases/comm-beta:*: | |
| roleId: repo:hg.mozilla.org/releases/comm-beta:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -136962,17 +140400,79 @@ Role=repo:hg.mozilla.org/releases/comm-beta:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| Role=repo:hg.mozilla.org/releases/comm-beta:branch:*: | |
| roleId: repo:hg.mozilla.org/releases/comm-beta:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-3-sccache-buckets | |
| + - docker-worker:cache:comm-level-3-* | |
| + - generic-worker:cache:comm-level-3-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| + - index:insert-task:comm.cache.level-3.* | |
| + - index:insert-task:comm.v2.comm-beta.* | |
| + - queue:cancel-task:comm-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:comm-3/* | |
| + - queue:create-task:highest:comm-t/* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-3/* | |
| + - queue:route:coalesce.v1.comm-beta.* | |
| + - queue:route:index.comm.cache.level-3.* | |
| + - queue:route:index.comm.v2.comm-beta.* | |
| + - queue:route:tc-treeherder-stage.comm-beta.* | |
| + - queue:route:tc-treeherder-stage.v2.comm-beta.* | |
| + - queue:route:tc-treeherder.comm-beta.* | |
| + - queue:route:tc-treeherder.v2.comm-beta.* | |
| + - queue:scheduler-id:comm-level-3 | |
| + - secrets:get:project/comm/level-3/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/releases/comm-beta:branch:default: | |
| + roleId: repo:hg.mozilla.org/releases/comm-beta:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-3-sccache-buckets | |
| + - docker-worker:cache:comm-level-3-* | |
| + - generic-worker:cache:comm-level-3-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| + - index:insert-task:comm.cache.level-3.* | |
| + - index:insert-task:comm.v2.comm-beta.* | |
| + - queue:cancel-task:comm-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:comm-3/* | |
| + - queue:create-task:highest:comm-t/* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-3/* | |
| + - queue:route:coalesce.v1.comm-beta.* | |
| + - queue:route:index.comm.cache.level-3.* | |
| + - queue:route:index.comm.v2.comm-beta.* | |
| + - queue:route:tc-treeherder-stage.comm-beta.* | |
| + - queue:route:tc-treeherder-stage.v2.comm-beta.* | |
| + - queue:route:tc-treeherder.comm-beta.* | |
| + - queue:route:tc-treeherder.v2.comm-beta.* | |
| + - queue:scheduler-id:comm-level-3 | |
| + - secrets:get:project/comm/level-3/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/releases/comm-beta:cron:*: | |
| roleId: repo:hg.mozilla.org/releases/comm-beta:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| @@ -137097,17 +140597,79 @@ Role=repo:hg.mozilla.org/releases/comm-esr115:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| Role=repo:hg.mozilla.org/releases/comm-esr115:branch:*: | |
| roleId: repo:hg.mozilla.org/releases/comm-esr115:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-3-sccache-buckets | |
| + - docker-worker:cache:comm-level-3-* | |
| + - generic-worker:cache:comm-level-3-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| + - index:insert-task:comm.cache.level-3.* | |
| + - index:insert-task:comm.v2.comm-esr115.* | |
| + - queue:cancel-task:comm-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:comm-3/* | |
| + - queue:create-task:highest:comm-t/* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-3/* | |
| + - queue:route:coalesce.v1.comm-esr115.* | |
| + - queue:route:index.comm.cache.level-3.* | |
| + - queue:route:index.comm.v2.comm-esr115.* | |
| + - queue:route:tc-treeherder-stage.comm-esr115.* | |
| + - queue:route:tc-treeherder-stage.v2.comm-esr115.* | |
| + - queue:route:tc-treeherder.comm-esr115.* | |
| + - queue:route:tc-treeherder.v2.comm-esr115.* | |
| + - queue:scheduler-id:comm-level-3 | |
| + - secrets:get:project/comm/level-3/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/releases/comm-esr115:branch:default: | |
| + roleId: repo:hg.mozilla.org/releases/comm-esr115:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-3-sccache-buckets | |
| + - docker-worker:cache:comm-level-3-* | |
| + - generic-worker:cache:comm-level-3-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| + - index:insert-task:comm.cache.level-3.* | |
| + - index:insert-task:comm.v2.comm-esr115.* | |
| + - queue:cancel-task:comm-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:comm-3/* | |
| + - queue:create-task:highest:comm-t/* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-3/* | |
| + - queue:route:coalesce.v1.comm-esr115.* | |
| + - queue:route:index.comm.cache.level-3.* | |
| + - queue:route:index.comm.v2.comm-esr115.* | |
| + - queue:route:tc-treeherder-stage.comm-esr115.* | |
| + - queue:route:tc-treeherder-stage.v2.comm-esr115.* | |
| + - queue:route:tc-treeherder.comm-esr115.* | |
| + - queue:route:tc-treeherder.v2.comm-esr115.* | |
| + - queue:scheduler-id:comm-level-3 | |
| + - secrets:get:project/comm/level-3/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/releases/comm-esr115:cron:*: | |
| roleId: repo:hg.mozilla.org/releases/comm-esr115:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| @@ -137231,17 +140793,79 @@ Role=repo:hg.mozilla.org/releases/comm-release:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| Role=repo:hg.mozilla.org/releases/comm-release:branch:*: | |
| roleId: repo:hg.mozilla.org/releases/comm-release:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-3-sccache-buckets | |
| + - docker-worker:cache:comm-level-3-* | |
| + - generic-worker:cache:comm-level-3-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| + - index:insert-task:comm.cache.level-3.* | |
| + - index:insert-task:comm.v2.comm-release.* | |
| + - queue:cancel-task:comm-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:comm-3/* | |
| + - queue:create-task:highest:comm-t/* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-3/* | |
| + - queue:route:coalesce.v1.comm-release.* | |
| + - queue:route:index.comm.cache.level-3.* | |
| + - queue:route:index.comm.v2.comm-release.* | |
| + - queue:route:tc-treeherder-stage.comm-release.* | |
| + - queue:route:tc-treeherder-stage.v2.comm-release.* | |
| + - queue:route:tc-treeherder.comm-release.* | |
| + - queue:route:tc-treeherder.v2.comm-release.* | |
| + - queue:scheduler-id:comm-level-3 | |
| + - secrets:get:project/comm/level-3/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/releases/comm-release:branch:default: | |
| + roleId: repo:hg.mozilla.org/releases/comm-release:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-3-sccache-buckets | |
| + - docker-worker:cache:comm-level-3-* | |
| + - generic-worker:cache:comm-level-3-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| + - index:insert-task:comm.cache.level-3.* | |
| + - index:insert-task:comm.v2.comm-release.* | |
| + - queue:cancel-task:comm-level-3/* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:comm-3/* | |
| + - queue:create-task:highest:comm-t/* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-3/* | |
| + - queue:route:coalesce.v1.comm-release.* | |
| + - queue:route:index.comm.cache.level-3.* | |
| + - queue:route:index.comm.v2.comm-release.* | |
| + - queue:route:tc-treeherder-stage.comm-release.* | |
| + - queue:route:tc-treeherder-stage.v2.comm-release.* | |
| + - queue:route:tc-treeherder.comm-release.* | |
| + - queue:route:tc-treeherder.v2.comm-release.* | |
| + - queue:scheduler-id:comm-level-3 | |
| + - secrets:get:project/comm/level-3/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/releases/comm-release:cron:*: | |
| roleId: repo:hg.mozilla.org/releases/comm-release:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-comm/in-tree-action-3-* | |
| @@ -137422,17 +141046,89 @@ Role=repo:hg.mozilla.org/releases/mozilla-beta:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| Role=repo:hg.mozilla.org/releases/mozilla-beta:branch:*: | |
| roleId: repo:hg.mozilla.org/releases/mozilla-beta:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.mozilla-beta.* | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.mozilla-beta.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.mozilla-beta.* | |
| + - queue:route:tc-treeherder-stage.mozilla-beta.* | |
| + - queue:route:tc-treeherder-stage.v2.mozilla-beta.* | |
| + - queue:route:tc-treeherder.mozilla-beta.* | |
| + - queue:route:tc-treeherder.v2.mozilla-beta.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/releases/mozilla-beta:branch:default: | |
| + roleId: repo:hg.mozilla.org/releases/mozilla-beta:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.mozilla-beta.* | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.mozilla-beta.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.mozilla-beta.* | |
| + - queue:route:tc-treeherder-stage.mozilla-beta.* | |
| + - queue:route:tc-treeherder-stage.v2.mozilla-beta.* | |
| + - queue:route:tc-treeherder.mozilla-beta.* | |
| + - queue:route:tc-treeherder.v2.mozilla-beta.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/releases/mozilla-beta:cron:*: | |
| roleId: repo:hg.mozilla.org/releases/mozilla-beta:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| @@ -137627,17 +141323,89 @@ Role=repo:hg.mozilla.org/releases/mozilla-esr115:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| Role=repo:hg.mozilla.org/releases/mozilla-esr115:branch:*: | |
| roleId: repo:hg.mozilla.org/releases/mozilla-esr115:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.mozilla-esr115.* | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.mozilla-esr115.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.mozilla-esr115.* | |
| + - queue:route:tc-treeherder-stage.mozilla-esr115.* | |
| + - queue:route:tc-treeherder-stage.v2.mozilla-esr115.* | |
| + - queue:route:tc-treeherder.mozilla-esr115.* | |
| + - queue:route:tc-treeherder.v2.mozilla-esr115.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/releases/mozilla-esr115:branch:default: | |
| + roleId: repo:hg.mozilla.org/releases/mozilla-esr115:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.mozilla-esr115.* | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.mozilla-esr115.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.mozilla-esr115.* | |
| + - queue:route:tc-treeherder-stage.mozilla-esr115.* | |
| + - queue:route:tc-treeherder-stage.v2.mozilla-esr115.* | |
| + - queue:route:tc-treeherder.mozilla-esr115.* | |
| + - queue:route:tc-treeherder.v2.mozilla-esr115.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/releases/mozilla-esr115:cron:*: | |
| roleId: repo:hg.mozilla.org/releases/mozilla-esr115:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| @@ -137816,17 +141584,89 @@ Role=repo:hg.mozilla.org/releases/mozilla-esr128:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| Role=repo:hg.mozilla.org/releases/mozilla-esr128:branch:*: | |
| roleId: repo:hg.mozilla.org/releases/mozilla-esr128:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.mozilla-esr128.* | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.mozilla-esr128.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.mozilla-esr128.* | |
| + - queue:route:tc-treeherder-stage.mozilla-esr128.* | |
| + - queue:route:tc-treeherder-stage.v2.mozilla-esr128.* | |
| + - queue:route:tc-treeherder.mozilla-esr128.* | |
| + - queue:route:tc-treeherder.v2.mozilla-esr128.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/releases/mozilla-esr128:branch:default: | |
| + roleId: repo:hg.mozilla.org/releases/mozilla-esr128:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.mozilla-esr128.* | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.mozilla-esr128.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.mozilla-esr128.* | |
| + - queue:route:tc-treeherder-stage.mozilla-esr128.* | |
| + - queue:route:tc-treeherder-stage.v2.mozilla-esr128.* | |
| + - queue:route:tc-treeherder.mozilla-esr128.* | |
| + - queue:route:tc-treeherder.v2.mozilla-esr128.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/releases/mozilla-esr128:cron:*: | |
| roleId: repo:hg.mozilla.org/releases/mozilla-esr128:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| @@ -138009,18 +141849,90 @@ Role=repo:hg.mozilla.org/releases/mozilla-release:action:retrigger-decision: | |
| Role=repo:hg.mozilla.org/releases/mozilla-release:branch:*: | |
| roleId: repo:hg.mozilla.org/releases/mozilla-release:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.mozilla-release.* | |
| - project:releng:beetmover:bucket:maven-production | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.mozilla-release.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.mozilla-release.* | |
| + - queue:route:tc-treeherder-stage.mozilla-release.* | |
| + - queue:route:tc-treeherder-stage.v2.mozilla-release.* | |
| + - queue:route:tc-treeherder.mozilla-release.* | |
| + - queue:route:tc-treeherder.v2.mozilla-release.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/releases/mozilla-release:branch:default: | |
| + roleId: repo:hg.mozilla.org/releases/mozilla-release:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-3-sccache-buckets | |
| + - docker-worker:cache:gecko-level-3-* | |
| + - generic-worker:cache:gecko-level-3-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| + - index:insert-task:gecko.cache.level-3.* | |
| + - index:insert-task:gecko.v2.mozilla-release.* | |
| + - project:releng:beetmover:bucket:maven-production | |
| + - queue:cancel-task:gecko-level-3/* | |
| + - queue:create-task:highest:bitbar/gecko-t-* | |
| + - queue:create-task:highest:built-in/* | |
| + - queue:create-task:highest:gecko-3/* | |
| + - queue:create-task:highest:gecko-t/* | |
| + - queue:create-task:highest:performance-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/gecko-3-* | |
| + - queue:create-task:highest:releng-hardware/gecko-t-* | |
| + - queue:create-task:highest:releng-hardware/win11-64-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-3-* | |
| + - queue:create-task:highest:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:rerun-task:gecko-level-3/* | |
| + - queue:route:coalesce.v1.mozilla-release.* | |
| + - queue:route:index.gecko.cache.level-3.* | |
| + - queue:route:index.gecko.v2.mozilla-release.* | |
| + - queue:route:tc-treeherder-stage.mozilla-release.* | |
| + - queue:route:tc-treeherder-stage.v2.mozilla-release.* | |
| + - queue:route:tc-treeherder.mozilla-release.* | |
| + - queue:route:tc-treeherder.v2.mozilla-release.* | |
| + - queue:scheduler-id:gecko-level-3 | |
| + - secrets:get:project/gecko/level-3/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-3/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/releases/mozilla-release:cron:*: | |
| roleId: repo:hg.mozilla.org/releases/mozilla-release:cron:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: - in-tree:hook-action:project-gecko/in-tree-action-3-* | |
| @@ -138134,17 +142046,81 @@ Role=repo:hg.mozilla.org/try-comm-central:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-1-* | |
| Role=repo:hg.mozilla.org/try-comm-central:branch:*: | |
| roleId: repo:hg.mozilla.org/try-comm-central:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-comm/in-tree-action-1-* | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-1-sccache-buckets | |
| + - docker-worker:cache:comm-level-1-* | |
| + - generic-worker:cache:comm-level-1-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-1-* | |
| + - index:insert-task:comm.cache.level-1.* | |
| + - index:insert-task:comm.v2.try-comm-central.* | |
| + - queue:cancel-task:comm-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:comm-1/* | |
| + - queue:create-task:low:comm-t/* | |
| + - queue:create-task:low:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:low:scriptworker-k8s/comm-1-* | |
| + - queue:create-task:low:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-1/* | |
| + - queue:route:coalesce.v1.try-comm-central.* | |
| + - queue:route:index.comm.cache.level-1.* | |
| + - queue:route:index.comm.v2.try-comm-central.* | |
| + - queue:route:project.relman.codereview.* | |
| + - queue:route:tc-treeherder-stage.try-comm-central.* | |
| + - queue:route:tc-treeherder-stage.v2.try-comm-central.* | |
| + - queue:route:tc-treeherder.try-comm-central.* | |
| + - queue:route:tc-treeherder.v2.try-comm-central.* | |
| + - queue:scheduler-id:comm-level-1 | |
| + - secrets:get:project/comm/level-1/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/try-comm-central:branch:default: | |
| + roleId: repo:hg.mozilla.org/try-comm-central:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:comm:level-1-sccache-buckets | |
| + - docker-worker:cache:comm-level-1-* | |
| + - generic-worker:cache:comm-level-1-* | |
| + - in-tree:hook-action:project-comm/in-tree-action-1-* | |
| + - index:insert-task:comm.cache.level-1.* | |
| + - index:insert-task:comm.v2.try-comm-central.* | |
| + - queue:cancel-task:comm-level-1/* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:comm-1/* | |
| + - queue:create-task:low:comm-t/* | |
| + - queue:create-task:low:releng-hardware/gecko-t-osx-* | |
| + - queue:create-task:low:scriptworker-k8s/comm-1-* | |
| + - queue:create-task:low:scriptworker-k8s/comm-t-* | |
| + - queue:rerun-task:comm-level-1/* | |
| + - queue:route:coalesce.v1.try-comm-central.* | |
| + - queue:route:index.comm.cache.level-1.* | |
| + - queue:route:index.comm.v2.try-comm-central.* | |
| + - queue:route:project.relman.codereview.* | |
| + - queue:route:tc-treeherder-stage.try-comm-central.* | |
| + - queue:route:tc-treeherder-stage.v2.try-comm-central.* | |
| + - queue:route:tc-treeherder.try-comm-central.* | |
| + - queue:route:tc-treeherder.v2.try-comm-central.* | |
| + - queue:scheduler-id:comm-level-1 | |
| + - secrets:get:project/comm/level-1/* | |
| + - secrets:get:project/comm/level-any/* | |
| + - secrets:get:project/releng/comm/build/level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=repo:hg.mozilla.org/try:*: | |
| roleId: repo:hg.mozilla.org/try:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
| @@ -138280,17 +142256,97 @@ Role=repo:hg.mozilla.org/try:action:retrigger-decision: | |
| - in-tree:hook-action:project-gecko/in-tree-action-1-* | |
| Role=repo:hg.mozilla.org/try:branch:*: | |
| roleId: repo:hg.mozilla.org/try:branch:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| - scopes: - in-tree:hook-action:project-gecko/in-tree-action-1-* | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-1-sccache-buckets | |
| + - docker-worker:cache:gecko-level-1-* | |
| + - generic-worker:cache:gecko-level-1-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-1-* | |
| + - index:insert-task:gecko.cache.level-1.* | |
| + - index:insert-task:gecko.v2.try.* | |
| + - queue:cancel-task:gecko-level-1/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-1/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-1-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-1-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:get-artifact:project/civet/* | |
| + - queue:rerun-task:gecko-level-1/* | |
| + - queue:route:coalesce.v1.try.* | |
| + - queue:route:index.gecko.cache.level-1.* | |
| + - queue:route:index.gecko.v2.try.* | |
| + - queue:route:project.relman.codereview.* | |
| + - queue:route:tc-treeherder-stage.try.* | |
| + - queue:route:tc-treeherder-stage.v2.try.* | |
| + - queue:route:tc-treeherder.try.* | |
| + - queue:route:tc-treeherder.v2.try.* | |
| + - queue:scheduler-id:gecko-level-1 | |
| + - secrets:get:project/civet/github-deploy-key | |
| + - secrets:get:project/engwf/gecko/1/tokens | |
| + - secrets:get:project/gecko/level-1/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| + | |
| + Role=repo:hg.mozilla.org/try:branch:default: | |
| + roleId: repo:hg.mozilla.org/try:branch:default | |
| + description: | |
| + *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| + | |
| + Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| + scopes: | |
| + - assume:project:taskcluster:gecko:level-1-sccache-buckets | |
| + - docker-worker:cache:gecko-level-1-* | |
| + - generic-worker:cache:gecko-level-1-* | |
| + - in-tree:hook-action:project-gecko/in-tree-action-1-* | |
| + - index:insert-task:gecko.cache.level-1.* | |
| + - index:insert-task:gecko.v2.try.* | |
| + - queue:cancel-task:gecko-level-1/* | |
| + - queue:create-task:low:bitbar/gecko-t-* | |
| + - queue:create-task:low:built-in/* | |
| + - queue:create-task:low:gecko-1/* | |
| + - queue:create-task:low:gecko-t/* | |
| + - queue:create-task:low:performance-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/gecko-1-* | |
| + - queue:create-task:low:releng-hardware/gecko-t-* | |
| + - queue:create-task:low:releng-hardware/win11-64-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-1-* | |
| + - queue:create-task:low:scriptworker-k8s/gecko-t-* | |
| + - queue:get-artifact:private/openh264/* | |
| + - queue:get-artifact:project/civet/* | |
| + - queue:rerun-task:gecko-level-1/* | |
| + - queue:route:coalesce.v1.try.* | |
| + - queue:route:index.gecko.cache.level-1.* | |
| + - queue:route:index.gecko.v2.try.* | |
| + - queue:route:project.relman.codereview.* | |
| + - queue:route:tc-treeherder-stage.try.* | |
| + - queue:route:tc-treeherder-stage.v2.try.* | |
| + - queue:route:tc-treeherder.try.* | |
| + - queue:route:tc-treeherder.v2.try.* | |
| + - queue:scheduler-id:gecko-level-1 | |
| + - secrets:get:project/civet/github-deploy-key | |
| + - secrets:get:project/engwf/gecko/1/tokens | |
| + - secrets:get:project/gecko/level-1/* | |
| + - secrets:get:project/gecko/level-any/* | |
| + - secrets:get:project/releng/gecko/build/level-1/* | |
| + - secrets:get:project/taskcluster/gecko/hgfingerprint | |
| + - secrets:get:project/taskcluster/gecko/hgmointernal | |
| Role=worker-type:*: | |
| roleId: worker-type:* | |
| description: | |
| *DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration). | |
| Scopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml). | |
| scopes: | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment