iceraven-browser/.taskcluster.yml

# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
version: 1
policy:
  # XXX We restrict taskcluster to collaborators so priviledged tests (like UI tests) can run on PRs
  pullRequests: collaborators
tasks:
  $let:
    decision_task_id: {$eval: as_slugid("decision_task")}
    expires_in: {$fromNow: '1 year'}
    user: ${event.sender.login}
    project_name: fenix

    # We define the following variable at the very top, because they are used in the
    # default definition
    head_branch:
      $if: 'tasks_for == "github-pull-request"'
      then: ${event.pull_request.head.ref}
      else:
        $if: 'tasks_for == "github-push"'
        then: ${event.ref}
        else: ${event.release.target_commitish}

    head_rev:
      $if: 'tasks_for == "github-pull-request"'
      then: ${event.pull_request.head.sha}
      else:
        $if: 'tasks_for == "github-push"'
        then: ${event.after}
        else: ${event.release.tag_name}

    repository:
      $if: 'tasks_for == "github-pull-request"'
      then: ${event.pull_request.head.repo.html_url}
      else: ${event.repository.html_url}

    scheduler_id:
      $if: 'tasks_for == "cron"'
      then: focus-nightly-sched  # TODO: Rename to mobile-nightly-sched
      else: taskcluster-github

    github_repository_full_name:
      $if: 'tasks_for == "github-pull-request"'
      then: ${event.pull_request.base.repo.full_name}
      else: ${event.repository.full_name}

    trust_level:
      # Pull requests on main repository can't be trusted because anybody can open a PR on it, without a review
      $if: 'tasks_for in ["github-push", "github-release", "cron"] && event.repository.html_url == "https://github.com/mozilla-mobile/fenix"'
      then: 3
      else: 1
  in:
    $let:
      # TODO: revisit once bug 1533314 is done to possibly infer better priorities
      tasks_priority: highest

      short_head_branch:
        $if: 'head_branch[:10] == "refs/tags/"'
        then: {$eval: 'head_branch[10:]'}
        else:
          $if: 'head_branch[:11] == "refs/heads/"'
          then: {$eval: 'head_branch[11:]'}
          else: ${head_branch}

      assume_scope_prefix: assume:repo:github.com/${github_repository_full_name}
    in:
      $let:
        default_task_definition:
          taskId: ${decision_task_id}
          taskGroupId: ${decision_task_id}  # Must be explicit because of Chain of Trust
          schedulerId: ${scheduler_id}
          created: {$fromNow: ''}
          deadline: {$fromNow: '2 hours'}
          expires: ${expires_in}
          provisionerId: aws-provisioner-v1
          workerType: mobile-${trust_level}-decision
          priority: ${tasks_priority}
          requires: all-completed   # Must be explicit because of Chain of Trust
          retries: 5
          routes:
            $flatten:
              - statuses  # Automatically added by taskcluster-github. It must be explicit because of Chain of Trust
              - $if: 'trust_level == 3'
                then:
                  - tc-treeherder.v2.${project_name}.${head_rev}
                else: []
          payload:
            maxRunTime: 600   # Decision should remain fast enough to schedule a handful of tasks
            image: mozillamobile/${project_name}:1.4
            command:
              - /bin/bash
              - --login
              - -cx
              # The rest of the command must be defined below
            env:
              BUILD_DATE: ${now}
              MOBILE_HEAD_BRANCH: ${head_branch}
              MOBILE_HEAD_REPOSITORY: ${repository}
              MOBILE_HEAD_REV: ${head_rev}
              MOBILE_TRIGGERED_BY: ${user}
              SCHEDULER_ID: ${scheduler_id}
              SHORT_HEAD_BRANCH: ${short_head_branch}
              TASK_ID: ${decision_task_id}
              TASKS_PRIORITY: ${tasks_priority}
              TRUST_LEVEL: ${trust_level}
            features:
              chainOfTrust: true
              taskclusterProxy: true
            artifacts:
              public/task-graph.json:
                type: file
                path: /opt/${project_name}/task-graph.json
                expires: ${expires_in}
              public/actions.json:
                type: file
                path: /opt/${project_name}/actions.json
                expires: ${expires_in}
              public/parameters.yml:
                type: file
                path: /opt/${project_name}/parameters.yml
                expires: ${expires_in}
          extra:
            tasks_for: ${tasks_for}
            treeherder:
              machine:
                platform: mobile-decision
          metadata:
            owner: ${user}@users.noreply.github.com
            source: ${repository}/raw/${head_rev}/.taskcluster.yml
      in:
        $flatten:
          - $if: 'tasks_for == "github-pull-request" && event["action"] in ["opened", "reopened", "edited", "synchronize"]'
            then:
              $let:
                pull_request_title: ${event.pull_request.title}
                pull_request_number: ${event.pull_request.number}
                pull_request_url: ${event.pull_request.html_url}
              in:
                $mergeDeep:
                  - {$eval: 'default_task_definition'}
                  - scopes:
                      - ${assume_scope_prefix}:pull-request
                    payload:
                      command:
                        - >-
                          git fetch ${repository} ${head_branch}
                          && git config advice.detachedHead false
                          && git checkout FETCH_HEAD
                          && python automation/taskcluster/decision_task.py pull-request
                      env:
                        GITHUB_PULL_TITLE: ${pull_request_title}
                        MOBILE_PULL_REQUEST_NUMBER: ${pull_request_number}
                    extra:
                      treeherder:
                        symbol: D-PR
                    metadata:
                      name: '${project_name} - Decision task (Pull Request #${pull_request_number})'
                      description: 'Building and testing ${project_name} - triggered by [#${pull_request_number}](${pull_request_url})'
          - $if: 'tasks_for == "github-push" && head_branch[:10] != "refs/tags/"'
            then:
              $mergeDeep:
                - {$eval: 'default_task_definition'}
                - scopes:
                    - ${assume_scope_prefix}:branch:${short_head_branch}
                  payload:
                    command:
                      - >-
                        git fetch ${repository} ${head_branch}
                        && git config advice.detachedHead false
                        && git checkout FETCH_HEAD
                        && python automation/taskcluster/decision_task.py push
                  extra:
                    treeherder:
                      symbol: D
                  metadata:
                    name: ${project_name} VCS-Push Decision task
                    description: Schedules the build and test tasks for ${project_name}.
          - $if: 'tasks_for == "github-release" && event["action"] == "published"'
            then:
              $mergeDeep:
                - {$eval: 'default_task_definition'}
                - scopes:
                  - ${assume_scope_prefix}:release
                  payload:
                    command:
                      - >-
                        git fetch ${repository} refs/tags/${head_rev}
                        && git config advice.detachedHead false
                        && git checkout FETCH_HEAD
                        && python automation/taskcluster/decision_task.py github-release ${event.release.tag_name}
                  extra:
                    treeherder:
                      symbol: D-github-release
                  metadata:
                    name: ${project_name} Github Release Decision Task
                    description: Building and releasing ${project_name} ${event.release.tag_name}
          - $if: 'tasks_for == "cron"'
            then:
              $let:
                staging_flag:
                  $if: 'trust_level == 3'
                  then: ''
                  else: '--staging'
              in:
              - $if: 'cron.name == "nightly"'
                then:
                  $mergeDeep:
                    - {$eval: 'default_task_definition'}
                    - scopes:
                        - $if: 'trust_level == 3'
                          then: assume:hook-id:project-mobile/${project_name}-nightly
                          else: assume:hook-id:project-mobile/${project_name}-nightly-staging
                      routes:
                        $if: 'trust_level == 3'
                        then:
                          - notify.email.fenix-eng-notifications@mozilla.com.on-failed
                      payload:
                        command:
                          - >-
                            git fetch ${repository} ${head_branch}
                            && git config advice.detachedHead false
                            && git checkout FETCH_HEAD
                            && python automation/taskcluster/decision_task.py nightly ${staging_flag}
                      extra:
                        cron: {$json: {$eval: 'cron'}}
                        treeherder:
                          symbol: nightly-D
                      metadata:
                        name: ${project_name} Nightly Decision Task
                        description: Decision task scheduled by cron task [${cron.task_id}](https://tools.taskcluster.net/tasks/${cron.task_id})
              - $if: 'cron.name == "raptor"'
                then:
                  $mergeDeep:
                    - {$eval: 'default_task_definition'}
                    - scopes:
                        - $if: 'trust_level == 3'
                          then: assume:hook-id:project-mobile/${project_name}-raptor
                          else: assume:hook-id:project-mobile/${project_name}-raptor-staging
                      routes:
                        $if: 'trust_level == 3'
                        then:
                          - notify.email.fenix-eng-notifications@mozilla.com.on-failed
                          - notify.email.perftest-alerts@mozilla.com.on-failed
                      payload:
                        command:
                          - >-
                            git fetch ${repository} ${head_branch}
                            && git config advice.detachedHead false
                            && git checkout FETCH_HEAD
                            && python automation/taskcluster/decision_task.py raptor ${staging_flag}
                      extra:
                        cron: {$json: {$eval: 'cron'}}
                        treeherder:
                          symbol: raptor-D
                        notify:
                          email:
                            link:
                              text: Treeherder Job
                              href: "https://treeherder.mozilla.org/#/jobs?repo=${project_name}&revision=${head_rev}"
                            subject: "[${project_name}] Raptor decision task failed"
                            content: "This calls for an action of the development team. If needed, escalate to the release engineering team in #releaseduty-mobile on Slack. Use the link to view it on Treeherder."
                      metadata:
                        name: ${project_name} Raptor Decision Task
                        description: Decision task scheduled by cron task [${cron.task_id}](https://tools.taskcluster.net/tasks/${cron.task_id})