Audit report: 2024-06-21 07:45:06

Hooks/project-translations/in-tree-action-1-generic⁄9b7fc9feeb → Hooks/project-translations/in-tree-action-1-generic⁄68704a542e

@@ -1,10 +1,10 @@
 {
   "hookGroupId": "project-translations",
-  "hookId": "in-tree-action-1-generic/9b7fc9feeb",
+  "hookId": "in-tree-action-1-generic/68704a542e",
   "metadata": {
-    "description": "*DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration).\n\nAction task generic at level 1, with `.taskcluster.yml` hash 9b7fc9feeb.\n\nFor project(s) firefox-translations-training\n\nThis hook is fired in response to actions defined in a\nGecko decision task's `actions.json`.\n",
+    "description": "*DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration).\n\nAction task generic at level 1, with `.taskcluster.yml` hash 68704a542e.\n\nFor project(s) firefox-translations-training\n\nThis hook is fired in response to actions defined in a\nGecko decision task's `actions.json`.\n",
     "emailOnError": true,
-    "name": "project-translations/in-tree-action-1-generic/9b7fc9feeb",
+    "name": "project-translations/in-tree-action-1-generic/68704a542e",
     "owner": "taskcluster-notifications@mozilla.com"
   },
   "schedule": [],
@@ -217,7 +217,7 @@
                   "cache": {
                     "${trustDomain}-level-${level}-checkouts-sparse-v2": "/builds/worker/checkouts"
                   },
-                  "image": "mozillareleases/taskgraph:decision-v8.2.0@sha256:86c8f0d2e9558707b393edc0b9feb9869e6d41659c1592e94192d24856c97949",
+                  "image": "mozillareleases/taskgraph:decision-v9.0.0@sha256:e56c7e5cd467c2ce497c344b358f68cc84a4f73f3422e507a97b397d4e617fbd",
                   "command": [
                     "run-task",
                     "--${normProject}-checkout=/builds/worker/checkouts/src",

Hooks/project-translations/in-tree-action-1-train⁄9b7fc9feeb → Hooks/project-translations/in-tree-action-1-train⁄68704a542e

@@ -1,10 +1,10 @@
 {
   "hookGroupId": "project-translations",
-  "hookId": "in-tree-action-1-train/9b7fc9feeb",
+  "hookId": "in-tree-action-1-train/68704a542e",
   "metadata": {
-    "description": "*DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration).\n\nAction task train at level 1, with `.taskcluster.yml` hash 9b7fc9feeb.\n\nFor project(s) firefox-translations-training\n\nThis hook is fired in response to actions defined in a\nGecko decision task's `actions.json`.\n",
+    "description": "*DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration).\n\nAction task train at level 1, with `.taskcluster.yml` hash 68704a542e.\n\nFor project(s) firefox-translations-training\n\nThis hook is fired in response to actions defined in a\nGecko decision task's `actions.json`.\n",
     "emailOnError": true,
-    "name": "project-translations/in-tree-action-1-train/9b7fc9feeb",
+    "name": "project-translations/in-tree-action-1-train/68704a542e",
     "owner": "taskcluster-notifications@mozilla.com"
   },
   "schedule": [],
@@ -217,7 +217,7 @@
                   "cache": {
                     "${trustDomain}-level-${level}-checkouts-sparse-v2": "/builds/worker/checkouts"
                   },
-                  "image": "mozillareleases/taskgraph:decision-v8.2.0@sha256:86c8f0d2e9558707b393edc0b9feb9869e6d41659c1592e94192d24856c97949",
+                  "image": "mozillareleases/taskgraph:decision-v9.0.0@sha256:e56c7e5cd467c2ce497c344b358f68cc84a4f73f3422e507a97b397d4e617fbd",
                   "command": [
                     "run-task",
                     "--${normProject}-checkout=/builds/worker/checkouts/src",

Hooks/project-translations/in-tree-pr-action-1-generic⁄9b7fc9feeb → Hooks/project-translations/in-tree-pr-action-1-generic⁄68704a542e

@@ -1,10 +1,10 @@
 {
   "hookGroupId": "project-translations",
-  "hookId": "in-tree-pr-action-1-generic/9b7fc9feeb",
+  "hookId": "in-tree-pr-action-1-generic/68704a542e",
   "metadata": {
-    "description": "*DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration).\n\nPR action task generic at level 1, with `.taskcluster.yml` hash 9b7fc9feeb.\n\nFor project(s) firefox-translations-training\n\nThis hook is fired in response to actions defined in a\nGecko decision task's `actions.json`.\n",
+    "description": "*DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration).\n\nPR action task generic at level 1, with `.taskcluster.yml` hash 68704a542e.\n\nFor project(s) firefox-translations-training\n\nThis hook is fired in response to actions defined in a\nGecko decision task's `actions.json`.\n",
     "emailOnError": true,
-    "name": "project-translations/in-tree-pr-action-1-generic/9b7fc9feeb",
+    "name": "project-translations/in-tree-pr-action-1-generic/68704a542e",
     "owner": "taskcluster-notifications@mozilla.com"
   },
   "schedule": [],
@@ -217,7 +217,7 @@
                   "cache": {
                     "${trustDomain}-level-${level}-checkouts-sparse-v2": "/builds/worker/checkouts"
                   },
-                  "image": "mozillareleases/taskgraph:decision-v8.2.0@sha256:86c8f0d2e9558707b393edc0b9feb9869e6d41659c1592e94192d24856c97949",
+                  "image": "mozillareleases/taskgraph:decision-v9.0.0@sha256:e56c7e5cd467c2ce497c344b358f68cc84a4f73f3422e507a97b397d4e617fbd",
                   "command": [
                     "run-task",
                     "--${normProject}-checkout=/builds/worker/checkouts/src",

Hooks/project-translations/in-tree-pr-action-1-train⁄9b7fc9feeb → Hooks/project-translations/in-tree-pr-action-1-train⁄68704a542e

@@ -1,10 +1,10 @@
 {
   "hookGroupId": "project-translations",
-  "hookId": "in-tree-pr-action-1-train/9b7fc9feeb",
+  "hookId": "in-tree-pr-action-1-train/68704a542e",
   "metadata": {
-    "description": "*DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration).\n\nPR action task train at level 1, with `.taskcluster.yml` hash 9b7fc9feeb.\n\nFor project(s) firefox-translations-training\n\nThis hook is fired in response to actions defined in a\nGecko decision task's `actions.json`.\n",
+    "description": "*DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration).\n\nPR action task train at level 1, with `.taskcluster.yml` hash 68704a542e.\n\nFor project(s) firefox-translations-training\n\nThis hook is fired in response to actions defined in a\nGecko decision task's `actions.json`.\n",
     "emailOnError": true,
-    "name": "project-translations/in-tree-pr-action-1-train/9b7fc9feeb",
+    "name": "project-translations/in-tree-pr-action-1-train/68704a542e",
     "owner": "taskcluster-notifications@mozilla.com"
   },
   "schedule": [],
@@ -217,7 +217,7 @@
                   "cache": {
                     "${trustDomain}-level-${level}-checkouts-sparse-v2": "/builds/worker/checkouts"
                   },
-                  "image": "mozillareleases/taskgraph:decision-v8.2.0@sha256:86c8f0d2e9558707b393edc0b9feb9869e6d41659c1592e94192d24856c97949",
+                  "image": "mozillareleases/taskgraph:decision-v9.0.0@sha256:e56c7e5cd467c2ce497c344b358f68cc84a4f73f3422e507a97b397d4e617fbd",
                   "command": [
                     "run-task",
                     "--${normProject}-checkout=/builds/worker/checkouts/src",

Roles/mozilla-group:team_moco

@@ -9,6 +9,7 @@
     "queue:create-task:low:mozilla-1/*",
     "queue:create-task:low:mozilla-t/*",
     "queue:get-artifact:private/docker-worker/shell.html",
+    "queue:get-artifact:private/generic-worker/shell.html",
     "queue:get-artifact:private/openh264/*",
     "queue:get-artifact:xpi/*",
     "queue:scheduler-id:mozilla-level-1"

Roles/project:releng:ci-group:team_moco

@@ -8,18 +8,20 @@
     "queue:create-task:low:mozilla-1/*",
     "queue:create-task:low:mozilla-t/*",
     "queue:get-artifact:private/docker-worker/shell.html",
+    "queue:get-artifact:private/generic-worker/shell.html",
     "queue:get-artifact:private/openh264/*",
     "queue:get-artifact:xpi/*",
     "queue:scheduler-id:mozilla-level-1"
   ],
-  "lastModified": "2024-06-11T14:19:53.983Z",
+  "lastModified": "2024-06-20T19:47:03.189Z",
   "roleId": "project:releng:ci-group:team_moco",
   "scopes": [
     "project:releng:services/tooltool/api/download/internal",
     "project:releng:services/tooltool/api/download/public",
     "queue:create-task:low:mozilla-1/*",
     "queue:create-task:low:mozilla-t/*",
     "queue:get-artifact:private/docker-worker/shell.html",
+    "queue:get-artifact:private/generic-worker/shell.html",
     "queue:get-artifact:private/openh264/*",
     "queue:get-artifact:xpi/*",
     "queue:scheduler-id:mozilla-level-1"

Roles/repo:github.com⁄mozilla-releng⁄redo:pull-request

@@ -0,0 +1,53 @@
+{
+  "created": "2024-06-20T23:11:45.985Z",
+  "description": "*DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration).\n\nScopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml).",
+  "expandedScopes": [
+    "assume:repo:github.com/mozilla-releng/redo:pull-request",
+    "docker-worker:cache:mozilla-level-1-*",
+    "docker-worker:cache:mozilla-project-redo-level-1-*",
+    "generic-worker:cache:mozilla-level-1-*",
+    "generic-worker:cache:mozilla-project-redo-level-1-*",
+    "in-tree:hook-action:project-mozilla/in-tree-action-1-*",
+    "index:insert-task:mozilla.cache.head.*",
+    "index:insert-task:mozilla.cache.level-1.*",
+    "index:insert-task:mozilla.cache.pr.*",
+    "index:insert-task:mozilla.v2.mozilla-releng-pr.*",
+    "index:insert-task:mozilla.v2.mozilla-releng.*",
+    "index:insert-task:mozilla.v2.redo-pr.*",
+    "index:insert-task:mozilla.v2.redo.*",
+    "queue:cancel-task-group:mozilla-level-1/*",
+    "queue:cancel-task:mozilla-level-1/*",
+    "queue:create-task:low:built-in/*",
+    "queue:create-task:low:mozilla-1/*",
+    "queue:create-task:low:mozilla-t/*",
+    "queue:rerun-task:mozilla-level-1/*",
+    "queue:route:checks",
+    "queue:route:index.mozilla.cache.head.*",
+    "queue:route:index.mozilla.cache.level-1.*",
+    "queue:route:index.mozilla.cache.pr.*",
+    "queue:route:index.mozilla.v2.mozilla-releng-pr.*",
+    "queue:route:index.mozilla.v2.mozilla-releng.*",
+    "queue:route:index.mozilla.v2.redo-pr.*",
+    "queue:route:index.mozilla.v2.redo.*",
+    "queue:scheduler-id:mozilla-level-1",
+    "queue:seal-task-group:mozilla-level-1/*",
+    "secrets:get:project/mozilla/level-1/*",
+    "secrets:get:project/mozilla/level-any/*",
+    "secrets:get:project/mozilla/redo/level-1/*",
+    "secrets:get:project/mozilla/redo/level-any/*",
+    "secrets:get:project/taskcluster/gecko/hgfingerprint",
+    "secrets:get:project/taskcluster/gecko/hgmointernal"
+  ],
+  "lastModified": "2024-06-20T23:11:45.985Z",
+  "roleId": "repo:github.com/mozilla-releng/redo:pull-request",
+  "scopes": [
+    "index:insert-task:mozilla.v2.redo-pr.*",
+    "index:insert-task:mozilla.v2.redo.cache.head.*",
+    "index:insert-task:mozilla.v2.redo.cache.pr.*",
+    "queue:cancel-task-group:mozilla-level-1/*",
+    "queue:route:index.mozilla.v2.redo-pr.*",
+    "queue:route:index.mozilla.v2.redo.cache.head.*",
+    "queue:route:index.mozilla.v2.redo.cache.pr.*",
+    "queue:seal-task-group:mozilla-level-1/*"
+  ]
+}

Roles/repo:github.com⁄mozilla-releng⁄redo:★

@@ -0,0 +1,65 @@
+{
+  "created": "2024-06-20T23:11:50.221Z",
+  "description": "*DO NOT EDIT* - This resource is configured automatically by [ci-admin](https://hg.mozilla.org/ci/ci-configuration).\n\nScopes in this role are defined in [ci-configuration/grants.yml](https://hg.mozilla.org/ci/ci-configuration/file/tip/grants.yml).",
+  "expandedScopes": [
+    "assume:repo:github.com/mozilla-releng/redo:*",
+    "docker-worker:cache:mozilla-level-1-*",
+    "docker-worker:cache:mozilla-project-redo-level-1-*",
+    "generic-worker:cache:mozilla-level-1-*",
+    "generic-worker:cache:mozilla-project-redo-level-1-*",
+    "in-tree:hook-action:project-mozilla/in-tree-action-1-*",
+    "index:insert-task:mozilla.cache.head.*",
+    "index:insert-task:mozilla.cache.level-1.*",
+    "index:insert-task:mozilla.cache.pr.*",
+    "index:insert-task:mozilla.v2.mozilla-releng-pr.*",
+    "index:insert-task:mozilla.v2.mozilla-releng.*",
+    "index:insert-task:mozilla.v2.redo-pr.*",
+    "index:insert-task:mozilla.v2.redo.*",
+    "queue:cancel-task-group:mozilla-level-1/*",
+    "queue:cancel-task:mozilla-level-1/*",
+    "queue:create-task:low:built-in/*",
+    "queue:create-task:low:mozilla-1/*",
+    "queue:create-task:low:mozilla-t/*",
+    "queue:rerun-task:mozilla-level-1/*",
+    "queue:route:checks",
+    "queue:route:index.mozilla.cache.head.*",
+    "queue:route:index.mozilla.cache.level-1.*",
+    "queue:route:index.mozilla.cache.pr.*",
+    "queue:route:index.mozilla.v2.mozilla-releng-pr.*",
+    "queue:route:index.mozilla.v2.mozilla-releng.*",
+    "queue:route:index.mozilla.v2.redo-pr.*",
+    "queue:route:index.mozilla.v2.redo.*",
+    "queue:scheduler-id:mozilla-level-1",
+    "queue:seal-task-group:mozilla-level-1/*",
+    "secrets:get:project/mozilla/level-1/*",
+    "secrets:get:project/mozilla/level-any/*",
+    "secrets:get:project/mozilla/redo/level-1/*",
+    "secrets:get:project/mozilla/redo/level-any/*",
+    "secrets:get:project/taskcluster/gecko/hgfingerprint",
+    "secrets:get:project/taskcluster/gecko/hgmointernal"
+  ],
+  "lastModified": "2024-06-20T23:11:50.221Z",
+  "roleId": "repo:github.com/mozilla-releng/redo:*",
+  "scopes": [
+    "docker-worker:cache:mozilla-level-1-*",
+    "docker-worker:cache:mozilla-project-redo-level-1-*",
+    "generic-worker:cache:mozilla-level-1-*",
+    "generic-worker:cache:mozilla-project-redo-level-1-*",
+    "in-tree:hook-action:project-mozilla/in-tree-action-1-*",
+    "index:insert-task:mozilla.v2.redo.*",
+    "queue:cancel-task:mozilla-level-1/*",
+    "queue:create-task:low:built-in/*",
+    "queue:create-task:low:mozilla-1/*",
+    "queue:create-task:low:mozilla-t/*",
+    "queue:rerun-task:mozilla-level-1/*",
+    "queue:route:checks",
+    "queue:route:index.mozilla.v2.redo.*",
+    "queue:scheduler-id:mozilla-level-1",
+    "secrets:get:project/mozilla/level-1/*",
+    "secrets:get:project/mozilla/level-any/*",
+    "secrets:get:project/mozilla/redo/level-1/*",
+    "secrets:get:project/mozilla/redo/level-any/*",
+    "secrets:get:project/taskcluster/gecko/hgfingerprint",
+    "secrets:get:project/taskcluster/gecko/hgmointernal"
+  ]
+}

Roles/repo:github.com⁄mozilla-releng⁄★

@@ -14,6 +14,7 @@
     "docker-worker:cache:mozilla-level-1-*",
     "docker-worker:cache:mozilla-project-firefox-ci-playground-level-1-*",
     "docker-worker:cache:mozilla-project-mozilla-linux-pkg-manager-level-1-*",
+    "docker-worker:cache:mozilla-project-redo-level-1-*",
     "docker-worker:cache:mozilla-project-reps-level-1-*",
     "docker-worker:cache:mozilla-project-simple-github-level-1-*",
     "docker-worker:cache:mozillavpn-level-1-*",
@@ -40,6 +41,7 @@
     "generic-worker:cache:mozilla-level-1-*",
     "generic-worker:cache:mozilla-project-firefox-ci-playground-level-1-*",
     "generic-worker:cache:mozilla-project-mozilla-linux-pkg-manager-level-1-*",
+    "generic-worker:cache:mozilla-project-redo-level-1-*",
     "generic-worker:cache:mozilla-project-reps-level-1-*",
     "generic-worker:cache:mozilla-project-simple-github-level-1-*",
     "generic-worker:cache:mozillavpn-level-1-*",
@@ -109,6 +111,8 @@
     "index:insert-task:mozilla.v2.mozilla-linux-pkg-manager.*",
     "index:insert-task:mozilla.v2.mozilla-releng-pr.*",
     "index:insert-task:mozilla.v2.mozilla-releng.*",
+    "index:insert-task:mozilla.v2.redo-pr.*",
+    "index:insert-task:mozilla.v2.redo.*",
     "index:insert-task:mozilla.v2.reps-pr.*",
     "index:insert-task:mozilla.v2.reps.*",
     "index:insert-task:mozilla.v2.simple-github-pr.*",
@@ -360,6 +364,8 @@
     "queue:route:index.mozilla.v2.mozilla-linux-pkg-manager.*",
     "queue:route:index.mozilla.v2.mozilla-releng-pr.*",
     "queue:route:index.mozilla.v2.mozilla-releng.*",
+    "queue:route:index.mozilla.v2.redo-pr.*",
+    "queue:route:index.mozilla.v2.redo.*",
     "queue:route:index.mozilla.v2.reps-pr.*",
     "queue:route:index.mozilla.v2.reps.*",
     "queue:route:index.mozilla.v2.simple-github-pr.*",
@@ -475,6 +481,8 @@
     "secrets:get:project/mozilla/level-any/*",
     "secrets:get:project/mozilla/mozilla-linux-pkg-manager/level-1/*",
     "secrets:get:project/mozilla/mozilla-linux-pkg-manager/level-any/*",
+    "secrets:get:project/mozilla/redo/level-1/*",
+    "secrets:get:project/mozilla/redo/level-any/*",
     "secrets:get:project/mozilla/reps/level-1/*",
     "secrets:get:project/mozilla/reps/level-any/*",
     "secrets:get:project/mozilla/simple-github/level-1/*",

WorkerPools/adhoc-1⁄decision-gcp

@@ -502,8 +502,8 @@
   "requestedCount": 0,
   "runningCapacity": 0,
   "runningCount": 0,
-  "stoppedCapacity": 2,
-  "stoppedCount": 1,
+  "stoppedCapacity": 6,
+  "stoppedCount": 3,
   "stoppingCapacity": 0,
   "stoppingCount": 0,
   "workerPoolId": "adhoc-1/decision-gcp"

WorkerPools/adhoc-1⁄images-gcp

@@ -508,8 +508,8 @@
   "requestedCount": 0,
   "runningCapacity": 0,
   "runningCount": 0,
-  "stoppedCapacity": 1,
-  "stoppedCount": 1,
+  "stoppedCapacity": 11,
+  "stoppedCount": 11,
   "stoppingCapacity": 0,
   "stoppingCount": 0,
   "workerPoolId": "adhoc-1/images-gcp"

WorkerPools/adhoc-3⁄decision-gcp

@@ -502,8 +502,8 @@
   "requestedCount": 0,
   "runningCapacity": 0,
   "runningCount": 0,
-  "stoppedCapacity": 2,
-  "stoppedCount": 1,
+  "stoppedCapacity": 6,
+  "stoppedCount": 3,
   "stoppingCapacity": 0,
   "stoppingCount": 0,
   "workerPoolId": "adhoc-3/decision-gcp"

WorkerPools/adhoc-3⁄images-gcp

@@ -508,8 +508,8 @@
   "requestedCount": 0,
   "runningCapacity": 0,
   "runningCount": 0,
-  "stoppedCapacity": 1,
-  "stoppedCount": 1,
+  "stoppedCapacity": 3,
+  "stoppedCount": 3,
   "stoppingCapacity": 0,
   "stoppingCount": 0,
   "workerPoolId": "adhoc-3/images-gcp"

WorkerPools/app-services-1⁄b-linux-gcp

@@ -646,8 +646,8 @@
   "requestedCount": 0,
   "runningCapacity": 0,
   "runningCount": 0,
-  "stoppedCapacity": 194,
-  "stoppedCount": 194,
+  "stoppedCapacity": 43,
+  "stoppedCount": 43,
   "stoppingCapacity": 0,
   "stoppingCount": 0,
   "workerPoolId": "app-services-1/b-linux-gcp"

WorkerPools/app-services-1⁄decision-gcp

@@ -502,8 +502,8 @@
   "requestedCount": 0,
   "runningCapacity": 2,
   "runningCount": 1,
-  "stoppedCapacity": 1614,
-  "stoppedCount": 807,
+  "stoppedCapacity": 1596,
+  "stoppedCount": 798,
   "stoppingCapacity": 0,
   "stoppingCount": 0,
   "workerPoolId": "app-services-1/decision-gcp"

WorkerPools/app-services-1⁄images-gcp

@@ -508,8 +508,8 @@
   "requestedCount": 0,
   "runningCapacity": 0,
   "runningCount": 0,
-  "stoppedCapacity": 2,
-  "stoppedCount": 2,
+  "stoppedCapacity": 1,
+  "stoppedCount": 1,
   "stoppingCapacity": 0,
   "stoppingCount": 0,
   "workerPoolId": "app-services-1/images-gcp"

WorkerPools/app-services-3⁄b-linux-gcp

@@ -646,8 +646,8 @@
   "requestedCount": 0,
   "runningCapacity": 0,
   "runningCount": 0,
-  "stoppedCapacity": 565,
-  "stoppedCount": 565,
+  "stoppedCapacity": 240,
+  "stoppedCount": 240,
   "stoppingCapacity": 0,
   "stoppingCount": 0,
   "workerPoolId": "app-services-3/b-linux-gcp"

WorkerPools/app-services-3⁄decision-gcp

@@ -502,8 +502,8 @@
   "requestedCount": 0,
   "runningCapacity": 0,
   "runningCount": 0,
-  "stoppedCapacity": 56,
-  "stoppedCount": 28,
+  "stoppedCapacity": 30,
+  "stoppedCount": 15,
   "stoppingCapacity": 0,
   "stoppingCount": 0,
   "workerPoolId": "app-services-3/decision-gcp"

WorkerPools/app-services-3⁄images-gcp

@@ -508,8 +508,8 @@
   "requestedCount": 0,
   "runningCapacity": 0,
   "runningCount": 0,
-  "stoppedCapacity": 3,
-  "stoppedCount": 3,
+  "stoppedCapacity": 1,
+  "stoppedCount": 1,
   "stoppingCapacity": 0,
   "stoppingCount": 0,
   "workerPoolId": "app-services-3/images-gcp"