def test_relops():
assertPrincipalsWithRole('mozilla-group:team_relops', [
relops_permacreds,
# taskcluster folks have *, hence matching this group
principalsWith('mozilla-group:team_taskcluster'),
], omitTrusted=True)
def test_moco():
assertPrincipalsWithRole('mozilla-group:team_moco', [
'client-id-alias:temporary-credentials', # Bug 1233553
# everyone with a legacy permacred is considered an honorary moco
# employee
principalsWith('legacy-permacred'),
# taskcluster folks have *, hence matching this group
principalsWith('mozilla-group:team_taskcluster'),
], omitTrusted=True)
def test_releng():
assertPrincipalsWithRole('mozilla-group:releng', [
# all of the relengers
releng_permacreds,
# plus team_relops, because they're OK too
principalsWith('mozilla-group:team_relops'),
# taskcluster folks have *, hence matching this group
principalsWith('mozilla-group:team_taskcluster'),
], omitTrusted=True)
def test_scm_level_3():
assertPrincipalsWithRole('mozilla-group:scm_level_3', [
# a whole bunch of people "manually" granted this role
'client-id-alias:permacred-armenzg',
'client-id-alias:permacred-armenzg-testing',
'client-id-alias:permacred-bhearsum',
'client-id-alias:permacred-jlund',
'client-id-alias:permacred-mrrrgn',
'client-id-alias:permacred-mshal',
'client-id-alias:permacred-nhirata',
'client-id-alias:permacred-rail',
'client-id-alias:permacred-ted',
'client-id-alias:temporary-credentials',
'client-id:gandalf',
# taskcluster folks have *, hence matching this group
principalsWith('mozilla-group:team_taskcluster'),
], omitTrusted=True)
def test_tree_level_3():
assertPrincipalsWithRole('moz-tree:level:3', [
# level-3 people and repos
principalsWith('mozilla-group:scm_level_3'), l3_repos,
# CI testing
'client-id:dustin-docker-dev',
'client-id-alias:worker-ci-tests', # docker-worker integration tests
# permacreds used to download builds on bitbar
'client-id-alias:testdroid-worker', # Bug 1218549
# services
'client-id:aws-provisioner',
# worker types
'worker-type:aws-provisioner-v1/*', # Bug 1233555
], omitTrusted=True)
def test_scm_level_1():
assertPrincipalsWithRole('mozilla-group:scm_level_1', [
# a whole bunch of people "manually" granted this role
'client-id-alias:brson',
'client-id-alias:drs',
'client-id-alias:gerard-majax',
'client-id-alias:kgrandon',
'client-id-alias:mihneadb',
'client-id-alias:npark',
'client-id-alias:nullaus',
'client-id-alias:permacred-rthijssen',
'client-id-alias:russn',
'client-id-alias:rwood',
'client-id-alias:shako',
'client-id-alias:sousmangoosta',
# taskcluster folks have *, hence matching this group
principalsWith('mozilla-group:team_taskcluster'),
], omitTrusted=True)
def test_scm_level_2():
assertPrincipalsWithRole('mozilla-group:scm_level_2', [
# taskcluster folks have *, hence matching this group
principalsWith('mozilla-group:team_taskcluster'),
], omitTrusted=True)
def test_taskcluster():
assertPrincipalsWithRole('mozilla-group:team_taskcluster', [
taskcluster_permacreds,
], omitTrusted=True)
def test_tree_level_1():
assertPrincipalsWithRole('moz-tree:level:1', [
# level 2, plus level-2 people and repos
principalsWith('mozilla-group:scm_level_1'), l1_repos,
principalsWith('moz-tree:level:2'),
], omitTrusted=True)
