1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
|
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
"""
Apply some defaults and minor modifications to the jobs defined in the
APK and AAB signing kinds.
"""
from taskgraph.transforms.base import TransformSequence
from taskgraph.util.schema import resolve_keyed_by
transforms = TransformSequence()
PRODUCTION_SIGNING_BUILD_TYPES = [
"focus-nightly",
"focus-beta",
"focus-release",
"klar-release",
"fenix-nightly",
"fenix-beta",
"fenix-release",
"fenix-beta-mozillaonline",
"fenix-release-mozillaonline",
]
@transforms.add
def resolve_keys(config, tasks):
for task in tasks:
for key in (
"index",
"signing-format",
"notify",
"treeherder.platform",
):
resolve_keyed_by(
task,
key,
item_name=task["name"],
**{
"build-type": task["attributes"]["build-type"],
"level": config.params["level"],
},
)
yield task
@transforms.add
def set_worker_type(config, tasks):
for task in tasks:
worker_type = "linux-depsigning"
if (
str(config.params["level"]) == "3"
and task["attributes"]["build-type"] in PRODUCTION_SIGNING_BUILD_TYPES
):
worker_type = "linux-signing"
task["worker-type"] = worker_type
yield task
@transforms.add
def add_signing_cert_scope(config, tasks):
scope_prefix = config.graph_config["scriptworker"]["scope-prefix"]
for task in tasks:
cert = "dep-signing"
if str(config.params["level"]) == "3":
if task["attributes"]["build-type"] in ("fenix-beta", "fenix-release"):
cert = "fennec-production-signing"
elif task["attributes"]["build-type"] in PRODUCTION_SIGNING_BUILD_TYPES:
cert = "production-signing"
task.setdefault("scopes", []).append(f"{scope_prefix}:signing:cert:{cert}")
yield task
@transforms.add
def set_index_job_name(config, tasks):
for task in tasks:
if task.get("index"):
task["index"]["job-name"] = task["attributes"]["build-type"]
yield task
@transforms.add
def set_signing_attributes(config, tasks):
for task in tasks:
task["attributes"]["signed"] = True
yield task
@transforms.add
def set_signing_format(config, tasks):
for task in tasks:
signing_format = task.pop("signing-format")
for upstream_artifact in task["worker"]["upstream-artifacts"]:
upstream_artifact["formats"] = [signing_format]
yield task
@transforms.add
def format_email(config, tasks):
version = config.params["version"]
for task in tasks:
if "notify" in task:
email = task["notify"].get("email")
if email:
email["subject"] = email["subject"].format(version=version)
email["content"] = email["content"].format(version=version)
yield task
|
