def test_relops(): assertPrincipalsWithRole('mozilla-group:team_relops', [ relops_permacreds, # taskcluster folks have *, hence matching this group principalsWith('mozilla-group:team_taskcluster'), ], omitTrusted=True)
def test_moco(): assertPrincipalsWithRole('mozilla-group:team_moco', [ 'client-id-alias:temporary-credentials', # Bug 1233553 # everyone with a legacy permacred is considered an honorary moco # employee principalsWith('legacy-permacred'), # taskcluster folks have *, hence matching this group principalsWith('mozilla-group:team_taskcluster'), ], omitTrusted=True)
def test_releng(): assertPrincipalsWithRole('mozilla-group:releng', [ # all of the relengers releng_permacreds, # plus team_relops, because they're OK too principalsWith('mozilla-group:team_relops'), # taskcluster folks have *, hence matching this group principalsWith('mozilla-group:team_taskcluster'), ], omitTrusted=True)
def test_scm_level_3(): assertPrincipalsWithRole('mozilla-group:scm_level_3', [ # a whole bunch of people "manually" granted this role 'client-id-alias:permacred-armenzg', 'client-id-alias:permacred-armenzg-testing', 'client-id-alias:permacred-bhearsum', 'client-id-alias:permacred-jlund', 'client-id-alias:permacred-mrrrgn', 'client-id-alias:permacred-mshal', 'client-id-alias:permacred-nhirata', 'client-id-alias:permacred-rail', 'client-id-alias:permacred-ted', 'client-id-alias:temporary-credentials', 'client-id:gandalf', # taskcluster folks have *, hence matching this group principalsWith('mozilla-group:team_taskcluster'), ], omitTrusted=True)
def test_tree_level_3(): assertPrincipalsWithRole('moz-tree:level:3', [ # level-3 people and repos principalsWith('mozilla-group:scm_level_3'), l3_repos, # CI testing 'client-id:dustin-docker-dev', 'client-id-alias:worker-ci-tests', # docker-worker integration tests # permacreds used to download builds on bitbar 'client-id-alias:testdroid-worker', # Bug 1218549 # services 'client-id:aws-provisioner', # worker types 'worker-type:aws-provisioner-v1/*', # Bug 1233555 ], omitTrusted=True)
def test_scm_level_1(): assertPrincipalsWithRole('mozilla-group:scm_level_1', [ # a whole bunch of people "manually" granted this role 'client-id-alias:brson', 'client-id-alias:drs', 'client-id-alias:gerard-majax', 'client-id-alias:kgrandon', 'client-id-alias:mihneadb', 'client-id-alias:npark', 'client-id-alias:nullaus', 'client-id-alias:permacred-rthijssen', 'client-id-alias:russn', 'client-id-alias:rwood', 'client-id-alias:shako', 'client-id-alias:sousmangoosta', # taskcluster folks have *, hence matching this group principalsWith('mozilla-group:team_taskcluster'), ], omitTrusted=True)
def test_scm_level_2(): assertPrincipalsWithRole('mozilla-group:scm_level_2', [ # taskcluster folks have *, hence matching this group principalsWith('mozilla-group:team_taskcluster'), ], omitTrusted=True)
def test_taskcluster(): assertPrincipalsWithRole('mozilla-group:team_taskcluster', [ taskcluster_permacreds, ], omitTrusted=True)
def test_tree_level_1(): assertPrincipalsWithRole('moz-tree:level:1', [ # level 2, plus level-2 people and repos principalsWith('mozilla-group:scm_level_1'), l1_repos, principalsWith('moz-tree:level:2'), ], omitTrusted=True)