Bug 1436369 Add taskcluster periodic file updates r=callek

Reviewers: Callek

Reviewed By: Callek

Differential Revision: https://phabricator.services.mozilla.com/D683

--HG--
extra : rebase_source : f7f6d69c092903118b6a41aa8b69fe0419910253

taskcluster/ci/repo-update/kind.yml

@@ -0,0 +1,50 @@
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+loader: taskgraph.loader.transform:loader
+
+transforms:
+   - taskgraph.transforms.job:transforms
+   - taskgraph.transforms.task:transforms
+
+
+jobs:
+   hsts-hpkp-blocklist:
+      name: periodic_file_update
+      description: HSTS, HPKP, and Blocklist update
+      run-on-projects: []  # Only run via cron
+      treeherder:
+         kind: build
+         platform: linux64/opt
+         symbol: pfu
+         tier: 1
+      worker-type: aws-provisioner-v1/gecko-{level}-b-linux
+      worker:
+         implementation: docker-worker
+         os: linux
+         docker-image: {in-tree: periodic-updates}
+         max-run-time: 3600  # Sometimes takes ~40 minutes
+         env:
+            DO_HSTS: "1"
+            DO_HPKP: "1"
+            DO_BLOCKLIST: "1"
+            USE_MOZILLA_CENTRAL: "1"
+            BRANCH: mozilla-central
+            PRODUCT: firefox
+            REVIEWERS: sfraser
+         command:
+            - /runme.sh
+         artifacts:
+            - name: 'public/build/nsSTSPreloadList.diff'
+              path: '/home/worker/artifacts/nsSTSPreloadList.diff'
+              type: file
+            - name: 'public/build/StaticHPKPins.h.diff'
+              path: '/home/worker/artifacts/StaticHPKPins.h.diff'
+              type: file
+            - name: 'public/build/blocklist.diff'
+              path: '/home/worker/artifacts/blocklist.diff'
+              type: file
+      scopes:
+         - secrets:get:project/releng/gecko/build/level-{level}/arc-phabricator-token
+

taskcluster/docs/kinds.rst

@@ -366,6 +366,12 @@ repo-update
 Repo-Update tasks are tasks that perform some action on the project repo itself,
 in order to update its state in some way.
 
+repo-update-bb
+--------------
+Repo-Update tasks are tasks that perform some action on the project repo itself,
+in order to update its state in some way. This kind is the older, buildbot version.
+It will be removed after the migration to taskcluster.
+
 partials
 --------
 Partials takes the complete.mar files produced in previous tasks and generates partial

taskcluster/taskgraph/target_tasks.py

@@ -621,5 +621,5 @@ def target_tasks_file_update(full_task_graph, parameters, graph_config):
     """
     def filter(task):
         # For now any task in the repo-update kind is ok
-        return task.kind in ['repo-update-bb']
+        return task.kind in ['repo-update', 'repo-update-bb']
     return [l for l, t in full_task_graph.tasks.iteritems() if filter(t)]