Bug 1321614 - fix android_stuff kind to use build secrets, because it uses the same mozharness stuff as build jobs. r=dustin
MozReview-Commit-ID: D6wV1KSa6mp
--- a/taskcluster/taskgraph/transforms/android_stuff.py
+++ b/taskcluster/taskgraph/transforms/android_stuff.py
@@ -3,16 +3,17 @@
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
"""
Set dynamic task description properties of the android stuff. Temporary!
"""
from __future__ import absolute_import, print_function, unicode_literals
from taskgraph.transforms.base import TransformSequence
+from taskgraph.transforms.job.common import SECRET_SCOPE
transforms = TransformSequence()
@transforms.add
def setup_task(config, tasks):
for task in tasks:
task['label'] = task['name']
@@ -37,10 +38,15 @@ def setup_task(config, tasks):
if int(config.params['level']) > 1:
task['worker'].setdefault('caches', []).append({
'type': 'persistent',
'name': 'level-{}-{}-build-{}-workspace'.format(
config.params['level'], config.params['project'], task['name']),
'mount-point': "/home/worker/workspace",
})
+ # Need appropriate scopes for secrets, from the 'build' section
+ task['worker']['taskcluster-proxy'] = True
+ task['scopes'].append(SECRET_SCOPE.format(
+ 'build', config.params['level'], '*'))
+
del task['name']
yield task