taskcluster/infrastructure/tooling/static-clients.yml at master · audreyn/taskcluster · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
---
web-server:
  - assume:mozilla-group:*
  - assume:mozilla-user:*
  - assume:mozillians-group:*
  - assume:mozillians-user:*
  - auth:create-client:mozilla-auth0/*
  - auth:delete-client:mozilla-auth0/*
  - auth:disable-client:mozilla-auth0/*
  - auth:enable-client:mozilla-auth0/*
  - auth:reset-access-token:mozilla-auth0/*
  - auth:update-client:mozilla-auth0/*
  - auth:create-client:github/*
  - auth:delete-client:github/*
  - auth:disable-client:github/*
  - auth:enable-client:github/*
  - auth:reset-access-token:github/*
  - auth:update-client:github/*
  - auth:azure-table:read-write:${azureAccountId}/AccessTokenTable
  - auth:azure-table:read-write:${azureAccountId}/AuthorizationCodesTable
  - auth:azure-table:read-write:${azureAccountId}/GithubAccessTokenTable
  - assume:login-identity:*
secrets:
  - auth:azure-table-access:${azureAccountId}/Secrets
  - auth:azure-table:read-write:${azureAccountId}/Secrets
index:
  - auth:azure-table-access:${azureAccountId}/IndexedTasks
  - auth:azure-table-access:${azureAccountId}/Namespaces
  - auth:azure-table:read-write:${azureAccountId}/IndexedTasks
  - auth:azure-table:read-write:${azureAccountId}/Namespaces
  - queue:get-artifact:*
worker-manager:
  - auth:create-client:worker/*
  - assume:worker-type:*
  - assume:worker-pool:*
  - assume:worker-id:*
  - auth:azure-table:read-write:${azureAccountId}/WM*
  - notify:email:*
  - secrets:get:worker-type:*
  - secrets:get:worker-pool:*
  - queue:claim-work:*
  - queue:worker-id:*
github:
  - assume:repo:github.com/*
  - assume:scheduler-id:taskcluster-github/*
  - auth:azure-table-access:${azureAccountId}/TaskclusterGithubBuilds
  - auth:azure-table-access:${azureAccountId}/TaskclusterIntegrationOwners
  - auth:azure-table:read-write:${azureAccountId}/TaskclusterGithubBuilds
  - auth:azure-table:read-write:${azureAccountId}/TaskclusterIntegrationOwners
  - auth:azure-table:read-write:${azureAccountId}/TaskclusterChecksToTasks
  - auth:azure-table:read-write:${azureAccountId}/TaskclusterCheckRuns
hooks:
  - auth:azure-table:read-write:${azureAccountId}/Hooks
  - auth:azure-table:read-write:${azureAccountId}/Queue
  - auth:azure-table:read-write:${azureAccountId}/LastFire3
  - assume:hook-id:*
  - notify:email:*
  - queue:create-task:*
notify:
  - auth:azure-table:read-write:${azureAccountId}/DenylistedNotification
  - auth:azure-table:read-write:${azureAccountId}/Denylist
purge-cache:
  - auth:azure-table:read-write:${azureAccountId}/CachePurges
built-in-workers:
  - queue:claim-work:built-in/*
  - assume:worker-id:built-in/*
  - queue:worker-id:built-in/*
  - queue:resolve-task
queue:
  - '*'
root:
  - '*'