blallo
/
fenix
1
0
Fork 0
Code Releases Activity

Fixes #896 - Fetch leanplum secret from taskcluster

master
Jeff Boek 2019-03-07 22:15:01 -08:00
parent 82fd77e136
commit 7bd49a05c9
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.taskcluster.yml
View File

@ -56,6 +56,7 @@ tasks:
- project:mobile:fenix:releng:googleplay:product:fenix
- queue:route:index.project.mobile.fenix.signed-nightly.*
- secrets:get:project/mobile/fenix/sentry
- secrets:get:project/mobile/fenix/leanplum
else:
- queue:create-task:highest:scriptworker-prov-v1/mobile-signing-dep-v1
- queue:create-task:highest:scriptworker-prov-v1/mobile-pushapk-dep-v1
@ -63,6 +64,7 @@ tasks:
- project:mobile:fenix:releng:googleplay:product:fenix:dep
- queue:route:index.project.mobile.fenix.staging-signed-nightly.*
- secrets:get:garbage/staging/project/mobile/fenix/sentry
- secrets:get:garbage/staging/project/mobile/fenix/leanplum
payload:
maxRunTime: 600 # Decision should remain fast enough to schedule a handful of tasks
image: mozillamobile/fenix:1.3

4
automation/taskcluster/decision_task_nightly.py
View File

@ -45,6 +45,7 @@ def generate_build_task(apks, is_staging):
)
)
sentry_secret = '{}project/mobile/fenix/sentry'.format('garbage/staging/' if is_staging else '')
leanplum_secret = '{}project/mobile/fenix/leanplum'.format('garbage/staging/' if is_staging else '')
return taskcluster.slugId(), BUILDER.build_task(
name="(Fenix) Build task",
@ -53,6 +54,8 @@ def generate_build_task(apks, is_staging):
checkout +
' && python automation/taskcluster/helper/get-secret.py'
' -s {} -k dsn -f .sentry_token'.format(sentry_secret) +
' && python automation/taskcluster/helper/get-secret.py'
' -s {} -k production -f .leanplum_token'.format(leanplum_token) +
' && ./gradlew --no-daemon -PcrashReports=true clean test assembleRelease'),
features={
"chainOfTrust": True,
@ -61,6 +64,7 @@ def generate_build_task(apks, is_staging):
artifacts=artifacts,
scopes=[
"secrets:get:{}".format(sentry_secret)
"secrets:get:{}".format(leanplum_secret)
]
)