1# This Source Code Form is subject to the terms of the Mozilla Public
2# License, v. 2.0. If a copy of the MPL was not distributed with this
3# file, You can obtain one at http://mozilla.org/MPL/2.0/.
4---
5loader: taskgraph.loader.transform:loader
6
7transforms:
8    - taskgraph.transforms.repo_update:transforms
9    - taskgraph.transforms.task:transforms
10
11
12job-defaults:
13    worker:
14        env:
15            DO_HSTS:
16                by-project:
17                    mozilla-(central|beta|esr.*): "1"
18                    default: ""
19            DO_HPKP:
20                by-project:
21                    mozilla-(central|beta|esr.*): "1"
22                    default: ""
23            DO_REMOTE_SETTINGS:
24                by-project:
25                    mozilla-(central|beta|release|esr.*): "1"
26                    default: ""
27            DO_SUFFIX_LIST:
28                by-project:
29                    mozilla-(central|beta|esr.*): "1"
30                    default: ""
31            USE_MOZILLA_CENTRAL:
32                by-project:
33                    mozilla-central: "1"
34                    default: ""
35
36
37jobs:
38    hsts-hpkp-blocklist:
39        name: periodic_file_update
40        description: HSTS, HPKP and remote settings update
41        run-on-projects: []  # Only run via cron
42        treeherder:
43            kind: build
44            platform: linux64/opt
45            symbol: pfu
46            tier: 1
47        worker-type: b-linux
48        worker:
49            implementation: docker-worker
50            os: linux
51            docker-image: {in-tree: periodic-updates}
52            max-run-time: 18000  # Takes 4+ hours
53            env:
54                PRODUCT: firefox
55                REVIEWERS: "ryanvm"
56            command:
57                - /runme.sh
58            taskcluster-proxy: true
59            artifacts:
60                - name: 'public/build/nsSTSPreloadList.diff'
61                  path: '/home/worker/artifacts/nsSTSPreloadList.diff'
62                  type: file
63                - name: 'public/build/StaticHPKPins.h.diff'
64                  path: '/home/worker/artifacts/StaticHPKPins.h.diff'
65                  type: file
66                - name: 'public/build/remote-settings.diff'
67                  path: '/home/worker/artifacts/remote-settings.diff'
68                  type: file
69        scopes:
70            - secrets:get:project/releng/gecko/build/level-{level}/arc-phabricator-token
71