# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
---
loader: taskgraph.loader.transform:loader

transforms:
    - taskgraph.transforms.task_context
    - gecko_taskgraph.transforms.repo_update:transforms
    - gecko_taskgraph.transforms.job:transforms
    - gecko_taskgraph.transforms.task:transforms


task-defaults:
    run-on-repo-type: [hg]
    run-on-projects: []  # Only run via cron
    worker-type: b-linux-xlarge
    run:
        using: run-task
        checkout: true
        sparse-profile: periodic-updates
        command: /runme.sh
    worker:
        os: linux
        docker-image: {in-tree: periodic-updates}
        env:
            PRODUCT: firefox
            REVIEWERS: "#release-managers"
        taskcluster-proxy: true
    treeherder:
        kind: build
        platform: linux64/opt
        tier: 1
    scopes:
        - secrets:get:project/releng/gecko/build/level-{level}/arc-phabricator-token


tasks:
    pinning-update:
        description: HSTS and HPKP pinning update
        task-context:
            from-parameters:
                project: project
            substitution-fields:
                - worker.env.DO_HSTS
                - worker.env.DO_HPKP
                - worker.env.USE_MOZILLA_CENTRAL
        treeherder:
            symbol: hfu
        worker:
            max-run-time: 14400  # Takes up to 4 hours
            env:
                DO_HSTS:
                    by-project:
                        mozilla-(central|beta|esr.*): "1"
                        default: ""
                DO_HPKP:
                    by-project:
                        mozilla-(central|beta|esr.*): "1"
                        default: ""
                USE_MOZILLA_CENTRAL:
                    by-project:
                        mozilla-central|try: "1"
                        default: ""
            artifacts:
                - name: 'public/build/nsSTSPreloadList.diff'
                  path: '/home/worker/artifacts/nsSTSPreloadList.diff'
                  type: file
                - name: 'public/build/StaticHPKPins.h.diff'
                  path: '/home/worker/artifacts/StaticHPKPins.h.diff'
                  type: file

    periodic-file-update:
        description: Remote settings, suffix list, mobile experiments, mobile merino manifest, and CT log update
        worker-type: b-linux
        task-context:
            from-parameters:
                project: project
            substitution-fields:
                - worker.env.DO_REMOTE_SETTINGS
                - worker.env.DO_SUFFIX_LIST
                - worker.env.DO_MOBILE_EXPERIMENTS
                - worker.env.DO_MOBILE_MERINO_MANIFEST
                - worker.env.DO_CT_LOGS
        treeherder:
            symbol: pfu
        worker:
            max-run-time: 1800
            env:
                DO_REMOTE_SETTINGS:
                    by-project:
                        mozilla-(central|beta|release|esr.*): "1"
                        default: ""
                DO_SUFFIX_LIST:
                    by-project:
                        mozilla-(central|beta|esr.*): "1"
                        default: ""
                DO_MOBILE_EXPERIMENTS:
                    by-project:
                        mozilla-(central|beta|release): "1"
                        default: ""
                DO_MOBILE_MERINO_MANIFEST:
                    by-project:
                        mozilla-(central|beta|release): "1"
                        default: ""
                DO_CT_LOGS:
                    by-project:
                        mozilla-(central|beta|esr.*): "1"
                        default: ""
            artifacts:
                - name: 'public/build/remote-settings.diff'
                  path: '/home/worker/artifacts/remote-settings.diff'
                  type: file
                - name: 'public/build/effective_tld_names.diff'
                  path: '/home/worker/artifacts/effective_tld_names.diff'
                  type: file
                - name: 'public/build/initial_experiments.diff'
                  path: '/home/worker/artifacts/initial_experiments.diff'
                  type: file
                - name: 'public/build/merino_manifest.diff'
                  path: '/home/worker/artifacts/merino_manifest.diff'
                  type: file