From 79dfc22016a79f26d7fa9eea47c3a9f8f7ed83de Mon Sep 17 00:00:00 2001 From: Simon Sapin Date: Tue, 11 Sep 2018 15:11:16 +0200 Subject: [PATCH] Centralize role/scopes comments --- .taskcluster.yml | 2 ++ decision-task/run.py | 7 ------- 2 files changed, 2 insertions(+), 7 deletions(-) diff --git a/.taskcluster.yml b/.taskcluster.yml index 954866a4433..ac230c1290d 100644 --- a/.taskcluster.yml +++ b/.taskcluster.yml @@ -18,6 +18,8 @@ tasks: source: ${event.compare} scopes: - "queue:scheduler-id:taskcluster-github" + + # Granted to role "repo:github.com/servo/servo-taskcluster-experiments:branch:master" - "queue:create-task:highest:aws-provisioner-v1/servo-*" - "docker-worker:cache:cargo-registry-cache" - "docker-worker:cache:cargo-git-cache" diff --git a/decision-task/run.py b/decision-task/run.py index 9c623dafe82..a2f8caf83e3 100644 --- a/decision-task/run.py +++ b/decision-task/run.py @@ -25,9 +25,6 @@ def create_task(name, command, artifacts=None, dependencies=None, env=None, cach "dependencies": [decision_task_id] + (dependencies or []), "schedulerId": "taskcluster-github", "provisionerId": "aws-provisioner-v1", - - # Granted scope queue:create-task:highest:aws-provisioner-v1/servo-* - # to role repo:github.com/servo/servo-taskcluster-experiments:branch:master "workerType": "servo-docker-worker", "created": taskcluster.fromNowJSON(""), @@ -96,10 +93,6 @@ build_task = create_task( ], # https://docs.taskcluster.net/docs/reference/workers/docker-worker/docs/caches - # For this to be allowed, I created role - # "repo:github.com/servo/servo-taskcluster-experiments:branch:master" - # with scope "assume:project:servo:grants/cargo-caches" - # at https://tools.taskcluster.net/auth/roles/ scopes=[ "docker-worker:cache:cargo-registry-cache", "docker-worker:cache:cargo-git-cache",