blob: 4c14c1ea42ab75cac42b0cfc1edec6eaf013dded (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
|
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
---
loader: gecko_taskgraph.loader.transform:loader
transforms:
- gecko_taskgraph.transforms.repo_update:transforms
- gecko_taskgraph.transforms.task:transforms
job-defaults:
worker:
env:
DO_HSTS:
by-project:
mozilla-(central|beta|esr.*): "1"
default: ""
DO_HPKP:
by-project:
mozilla-(central|beta|esr.*): "1"
default: ""
DO_REMOTE_SETTINGS:
by-project:
mozilla-(central|beta|release|esr.*): "1"
default: ""
DO_SUFFIX_LIST:
by-project:
mozilla-(central|beta|esr.*): "1"
default: ""
USE_MOZILLA_CENTRAL:
by-project:
mozilla-central: "1"
default: ""
jobs:
hsts-hpkp-blocklist:
name: periodic_file_update
description: HSTS, HPKP and remote settings update
run-on-projects: [] # Only run via cron
treeherder:
kind: build
platform: linux64/opt
symbol: pfu
tier: 1
worker-type: b-linux-xlarge-gcp
worker:
implementation: docker-worker
os: linux
docker-image: {in-tree: periodic-updates}
max-run-time: 14400 # Takes up to 4 hours
env:
PRODUCT: firefox
REVIEWERS: "#release-managers"
command:
- /runme.sh
taskcluster-proxy: true
artifacts:
- name: 'public/build/nsSTSPreloadList.diff'
path: '/home/worker/artifacts/nsSTSPreloadList.diff'
type: file
- name: 'public/build/StaticHPKPins.h.diff'
path: '/home/worker/artifacts/StaticHPKPins.h.diff'
type: file
- name: 'public/build/remote-settings.diff'
path: '/home/worker/artifacts/remote-settings.diff'
type: file
scopes:
- secrets:get:project/releng/gecko/build/level-{level}/arc-phabricator-token
|