blallo
/
fenix
1
0
Fork 0
Code Releases Activity

Puts all secrets for a track in a single TC secret (#3187)

master
Mitchell Hentges 2019-06-06 19:43:07 +02:00 committed by GitHub
parent 605a552f16
commit ac278e579c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
automation/taskcluster/lib/tasks.py
View File

@ -51,27 +51,19 @@ class TaskBuilder(object):
for arch in architectures for arch in architectures
} }
def secret_index(name): if is_staging:
if is_staging: secret_index = 'garbage/staging/project/mobile/fenix'
return 'garbage/staging/project/mobile/fenix/{}'.format(name) else:
elif channel == 'nightly': secret_index = 'project/mobile/fenix/{}'.format(channel)
# TODO: Move nightly secrets to "project/mobile/fenix/nightly/..."
return 'project/mobile/fenix/{}'.format(name)
else:
return 'project/mobile/fenix/{}/{}'.format(channel, name)
sentry_secret = secret_index('sentry')
leanplum_secret = secret_index('leanplum')
adjust_secret = secret_index('adjust')
pre_gradle_commands = ( pre_gradle_commands = (
'python automation/taskcluster/helper/get-secret.py -s {} -k {} -f {}'.format( 'python automation/taskcluster/helper/get-secret.py -s {} -k {} -f {}'.format(
secret, key, target_file secret_index, key, target_file
) )
for secret, key, target_file in ( for key, target_file in (
(sentry_secret, 'dsn', '.sentry_token'), ('sentry_dsn', '.sentry_token'),
(leanplum_secret, 'production', '.leanplum_token'), ('leanplum', '.leanplum_token'),
(adjust_secret, 'adjust', '.adjust_token'), ('adjust', '.adjust_token'),
) )
) )
@ -97,7 +89,7 @@ class TaskBuilder(object):
description='Build Fenix {} from source code'.format(capitalized_channel), description='Build Fenix {} from source code'.format(capitalized_channel),
command=command, command=command,
scopes=[ scopes=[
"secrets:get:{}".format(secret) for secret in (sentry_secret, leanplum_secret, adjust_secret) "secrets:get:{}".format(secret_index)
], ],
artifacts=artifacts, artifacts=artifacts,
routes=routes, routes=routes,