1431948 - Move gecko-only scopes out of moz-tree:level:3:*

Status: NEW

(Firefox Build System :: Task Configuration, task)

Description

[Dustin J. Mitchell [:dustin] (he/him)]

https://tools.taskcluster.net/auth/roles/moz-tree:level:3:*

has a lot of scopes like

queue:create-task:highest:scriptworker-prov-v1/dep-pushapk
queue:create-task:highest:scriptworker-prov-v1/depsigning

which I suspect are best not available to comm-central builds.  Given a list of such scopes, I can move them to moz-tree:level:3:gecko.  As an example, we're adding a tb-depsigning-related scope to comm-central only in bug 1424254.

Comment 1

[Aki Sasaki (not active)]

The dep scopes especially aren't that concerning, but sure, it does make sense to separate them. I don't think it's urgent.

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

I'll wait until a time when nothing big has broken for a while.. which is to say, not this week.

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

Bug 1415868 will probably move these to action-specific roles anyway.  I'll check back.

Comment 4

[Dustin J. Mitchell [:dustin] (he/him)]

Note that https://phabricator.services.mozilla.com/D2438 has quite a few comments as to what should be moved where (that were not addressed in that bug to avoid scope-creep).

Comment 5

[Dustin J. Mitchell [:dustin] (he/him)]

Also, I won't be working on this myself.  Once bug 1465842 lands, it will be a matter of some refactoring in grants.yml.

Comment 6

[Aki Sasaki (not active)]

In https://hg.mozilla.org/ci/ci-configuration/file/f6e8b613e3489c233c6fe29e4319cce6b2fb6afa/grants.yml#l402, we may only need to move 6 more scopes. (These may need to go into both gecko and comm, or just gecko, not sure.)