1595589 - Missing scopes in bugbug tasks

Status: VERIFIED FIXED

(Taskcluster :: Operations and Service Requests, task)

Description

[Marco Castelluccio [:marco]]

E.g. https://community-tc.services.mozilla.com/tasks/exSFppl5RICcfoxnnMvBwg/runs/0/logs/live/https%3A%2F%2Fcommunity-tc.services.mozilla.com%2Fapi%2Fqueue%2Fv1%2Ftask%2FexSFppl5RICcfoxnnMvBwg%2Fruns%2F0%2Fartifacts%2Fpublic%2Flogs%2Flive.log
or
https://community-tc.services.mozilla.com/tasks/JSX6HWmGR9Gdoyq6842m4w/runs/0/logs/https%3A%2F%2Fcommunity-tc.services.mozilla.com%2Fapi%2Fqueue%2Fv1%2Ftask%2FJSX6HWmGR9Gdoyq6842m4w%2Fruns%2F0%2Fartifacts%2Fpublic%2Flogs%2Flive.log

Comment 1

[Marco Castelluccio [:marco]]

The bugbug hook needs:
assume:project:relman:bugbug/build
queue:create-task:aws-provisioner-v1/github-worker
queue:create-task:aws-provisioner-v1/taskcluster-generic
queue:route:index.project.relman.bugbug.*
queue:route:[e-mail].*
queue:route:[e-mail].*
queue:route:notify.irc-channel.#bugbug.*
secrets:get:project/relman/bugbug/deploy
secrets:get:project/relman/bugbug/production

The bugbug-annotate hook needs:
docker-worker:cache:bugbug-mercurial-repository
hooks:trigger-hook:project-relman/bugbug-annotate
queue:create-task:aws-provisioner-v1/relman-svc
queue:create-task:aws-provisioner-v1/relman-svc-compute
queue:create-task:aws-provisioner-v1/taskcluster-generic
queue:route:index.project.relman.bugbug_annotate.*
queue:route:[e-mail].*
queue:route:notify.irc-channel.#bugbug.*
secrets:get:project/relman/bugbug/production

The bugbug check hook needs:
queue:create-task:aws-provisioner-v1/taskcluster-generic
queue:route:[e-mail].*
queue:route:notify.irc-channel.#bugbug.*

THe bugbug classify patch hook needs:
docker-worker:cache:bugbug-mercurial-repository
queue:create-task:aws-provisioner-v1/relman-svc-compute
queue:route:index.project.relman.bugbug.*
queue:route:[e-mail].*
queue:route:[e-mail].*
queue:route:notify.irc-channel.#bugbug.*
secrets:get:project/relman/bugbug/production

I guess:

• queue:create-task:aws-provisioner-v1/taskcluster-generic should be queue:create-task:proj-relman/ci;
• queue:create-task:aws-provisioner-v1/github-worker should be queue:create-task:proj-relman/ci;
• queue:create-task:aws-provisioner-v1/relman-svc should be queue:create-task:proj-relman/ci;
• queue:create-task:aws-provisioner-v1/relman-svc-compute should be queue:create-task:proj-relman/ci-compute.

Comment 2

[Marco Castelluccio [:marco]]

(In reply to Marco Castelluccio [:marco] from comment #1)

assume:project:relman:bugbug/build

This doesn't exist anymore in Community-TC, but it was:
docker-worker:cache:bugbug-build
docker-worker:cache:bugbug-mercurial-repository
docker-worker:capability:privileged
queue:create-task:aws-provisioner-v1/relman-svc
queue:create-task:aws-provisioner-v1/relman-svc-compute
queue:create-task:aws-provisioner-v1/relman-svc-memory
queue:route:notify.pulse.route.project.relman.bugbug.deploy_ending.*
queue:route:project.relman.bugbug.deploy_ending
queue:route:project.relman.bugbug.deploy_ending.*
secrets:get:project/relman/bugbug/integration

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

I think we agreed that Marco will create a PR for me to r+ and land. If I'm mis-remembering, please correct me. I do that!

Comment 4

[Marco Castelluccio [:marco]]

https://github.com/mozilla/community-tc-config/pull/114

Comment 5

[Marco Castelluccio [:marco]]

The latest run was all sucessful.