clients.yml

---
project/autophone/bitbar-x-test-1:
  description: Bitbar client for testing new docker images and other changes. Should
    only be used by RelOps.
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-test-1
    - queue:worker-id:bitbar/*
project/autophone/bitbar-x-test-2:
  description: Bitbar client for testing new docker images and other changes. Should
    only be used by RelOps.
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-test-2
    - queue:worker-id:bitbar/*
project/autophone/bitbar-x-test-3:
  description: Bitbar client for testing new docker images and other changes. Should
    only be used by RelOps.
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-test-3
    - queue:worker-id:bitbar/*
project/autophone/bitbar-x-test-g5:
  description: Bitbar client for testing new docker images and other changes. Should
    only be used by RelOps.
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-test-g5
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-batt-g5:
  description: ''
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-batt-g5
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-batt-p2:
  description: ''
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-batt-p2
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-perf-g5:
  description: ''
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-perf-g5
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-perf-p2:
  description: ''
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-perf-p2
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-unit-g5:
  description: ''
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-unit-g5
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-unit-p2:
  description: ''
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-unit-p2
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-unit-s7:
  description: Bitbar Samsung S7 Galaxy Phones - Unit Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-unit-s7
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-perf-s7:
  description: Bitbar Samsung S7 Galaxy Phones - Perf Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-perf-s7
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-unit-a51:
  description: Bitbar Samsung Galaxy A51 Phones - Unit Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-unit-a51
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-perf-a51:
  description: Bitbar Samsung Galaxy A51 Phones - Perf Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-perf-a51
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-unit-p5:
  description: Bitbar Google Pixel 5 Phones - Unit Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-unit-p5
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-perf-p5:
  description: Bitbar Google Pixel 5 Phones - Perf Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-perf-p5
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-unit-p6:
  description: Bitbar Google Pixel 6 Phones - Unit Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-unit-p6
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-perf-p6:
  description: Bitbar Google Pixel 6 Phones - Perf Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-perf-p6
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-unit-s21:
  description: Bitbar Samsung Galaxy S21 Phones - Unit Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-unit-s21
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-perf-s21:
  description: Bitbar Samsung Galaxy S21 Phones - Perf Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-perf-s21
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-unit-a55:
  description: Bitbar Samsung Galaxy A55 Phones - Unit Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-unit-a55
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-perf-a55:
  description: Bitbar Samsung Galaxy A55 Phones - Perf Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-perf-a55
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-unit-s24:
  description: Bitbar Samsung Galaxy S24 Phones - Unit Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-unit-s24
    - queue:worker-id:bitbar/*
project/autophone/gecko-t-bitbar-perf-s24:
  description: Bitbar Samsung Galaxy S24 Phones - Perf Pool
  scopes:
    - auth:sentry:tc-worker-script
    - auth:statsum:tc-worker-script
    - auth:webhooktunnel
    - auth:websocktunnel-token:firefoxcitc/bitbar.*
    - queue:claim-work:proj-autophone/gecko-t-bitbar-gw-perf-s24
    - queue:worker-id:bitbar/*
project/packet/docker-worker:
  description: ''
  scopes:
    - auth:sentry:docker-worker
    - auth:statsum:docker-worker
    - queue:claim-task:terraform-packet/*
    - queue:claim-work:terraform-packet/*
    - queue:worker-id:packet-*
    - secrets:get:project/taskcluster/docker-worker/certificate-key
    - secrets:get:worker-pool:terraform-packet/*
    - secrets:get:worker-type:terraform-packet/*
project/releng/fxci-config/apply:
  description: Used to run `tc-admin apply` in mozilla-releng/fxci-config.
  scopes:
    - "*"
project/releng/fxci-config/fetch-firefoxci-artifacts:
  description: Used to fetch certain private artifacts from firefoxci to staging
  scopes:
    - queue:get-artifact:project/gecko/android-emulator/*
    - queue:get-artifact:project/gecko/android-system-images/*
project/releng/fxci-config/generate:
  description: Used to run `tc-admin {generate|diff}` in mozilla-releng/fxci-config.
  scopes:
    - auth:list:clients
project/releng/generic-worker/azure-gecko-t-win10-64:
  description: Windows 10 64bit experimental production worker.
  scopes:
    - assume:worker-type:azure/gecko-t-win10-64
    - auth:sentry:generic-worker
project/releng/generic-worker/azure-gecko-t-win10-64-gpu:
  description: Windows 10 64bit GPU experimental production worker.
  scopes:
    - assume:worker-type:azure/gecko-t-win10-64-gpu
    - auth:sentry:generic-worker
project/releng/generic-worker/bitbar-gecko-t-osx:
  description: MacOS workers running in bitbar for developers and automation.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx-1015-power*
    - queue:worker-id:bitbar/mbpro-*
project/releng/generic-worker/bitbar-gecko-t-win10-64-ref-18:
  description: Windows 10 2018 reference laptop production worker. Hardware hosted
    by Bitbar
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win10-64-ref-18
project/releng/generic-worker/bitbar-gecko-t-win10-64-ref-18t:
  description: Windows 10 2018 reference laptop testing worker. Hardware hosted by
    Bitbar
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win10-64-ref-18t
project/releng/generic-worker/bitbar-gecko-t-win10-64-ref-ht:
  description: Windows 10 2017 reference laptop testing worker. Hardware hosted by
    Bitbar
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win10-64-ref-ht
project/releng/generic-worker/bitbar-gecko-t-win10-64-ref-hw:
  description: Windows 10 2017 reference laptop production worker. Hardware hosted
    by Bitbar
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win10-64-ref-hw
project/releng/generic-worker/bitbar-gecko-t-win10-aarch64:
  description: Windows 10 aarch64 YogaC630 production worker. Hardware hosted by Bitbar
  scopes:
    - assume:worker-type:bitbar/gecko-t-win64-aarch64-laptop
    - auth:sentry:generic-worker
project/releng/generic-worker/datacenter-gecko-1-b-osx:
  description: Datacenter level 1 MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-1-b-osx*
project/releng/generic-worker/datacenter-gecko-3-b-osx:
  description: Datacenter level 3 MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-3-b-osx*
project/releng/generic-worker/datacenter-gecko-3-t-osx:
  description: Datacenter level 3 MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-3-t-osx*
project/releng/generic-worker/datacenter-applicationservices-b-1-osx:
  description: Datacenter level 1 MacOS dedicated workers for the application-services trust domain.
  scopes:
    - assume:worker-type:releng-hardware/applicationservices-b-1-osx*
project/releng/generic-worker/datacenter-applicationservices-b-3-osx:
  description: Datacenter level 3 MacOS dedicated workers for the application-services trust domain.
  scopes:
    - assume:worker-type:releng-hardware/applicationservices-b-3-osx*
project/releng/generic-worker/datacenter-nss-1-b-osx:
  description: Datacenter level 1 MacOS dedicated workers for the nss trust domain.
  scopes:
    - assume:worker-type:releng-hardware/nss-1-b-osx*
project/releng/generic-worker/datacenter-nss-3-b-osx:
  description: Datacenter level 3 MacOS dedicated workers for the nss trust domain.
  scopes:
    - assume:worker-type:releng-hardware/nss-3-b-osx*
project/releng/generic-worker/datacenter-gecko-1-b-osx-arm64:
  description: MacStadium level 1 MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-1-b-osx-arm64*
project/releng/generic-worker/datacenter-gecko-3-b-osx-arm64:
  description: AWS level 3 MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-3-b-osx-arm64*
project/releng/generic-worker/datacenter-mozilla-1-b-osx:
  description: Datacenter tester MacOS dedicated workers for the mozilla trust domain.
  scopes:
    - assume:worker-type:releng-hardware/mozilla-1-b-osx*
project/releng/generic-worker/datacenter-gecko-t-linux:
  description: Datacenter Linux64 dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-linux*
    - queue:worker-id:mdc1/t-linux*
    - queue:worker-id:mdc1/ms*
    - queue:worker-id:mdc1/moon*
    - queue:worker-id:mdc2/t-linux*
    - queue:worker-id:mdc2/ms*
    - queue:worker-id:mdc2/moon*
project/releng/generic-worker/datacenter-gecko-t-linux-netperf:
  description: Datacenter Linux64 worker for network performance testing.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-linux*
    - queue:worker-id:mdc1/t-linux*
    - queue:worker-id:mdc1/ms*
    - queue:worker-id:mdc1/moon*
project/releng/generic-worker/datacenter-gecko-t-linux-beta:
  description: testing non-perf tasks on linux hardware workers
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-linux-talos-*
project/releng/generic-worker/datacenter-gecko-t-linux-staging:
  description: Datacenter Linux64 dedicated developer and automation staging worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-linux-talos-*
    - queue:worker-id:mdc1/t-linux*
    - queue:worker-id:mdc2/t-linux*
project/releng/generic-worker/datacenter-gecko-t-loaner:
  description: loaner machine scopes for hardware workers
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-linux-talos-*
    - assume:worker-type:releng-hardware/gecko-t-osx-1014-*
    - assume:worker-type:releng-hardware/gecko-t-osx-1015-*
project/releng/generic-worker/snakepit-titanxp:
  description: snakepit TitanXP workers
  scopes:
    - assume:worker-type:translations-1/*
    - queue:worker-id:snakepit/mlc*
project/releng/generic-worker/snakepit-2080ti:
  description: snakepit 2080ti workers
  scopes:
    - assume:worker-type:translations-1/*
    - queue:worker-id:snakepit/mlc*
project/releng/generic-worker/snakepit-quadro6k:
  description: snakepit Quadro6k workers
  scopes:
    - assume:worker-type:translations-1/*
    - queue:worker-id:snakepit/mlc*
project/releng/generic-worker/datacenter-mozillavpn-1-b-osx:
  description: Datacenter level 1 MacOS build machines for Mozilla VPN
  scopes:
    - assume:worker-type:releng-hardware/mozillavpn-b-1-osx*
project/releng/generic-worker/datacenter-mozillavpn-3-b-osx:
  description: Datacenter level 3 MacOS build machines for Mozilla VPN
  scopes:
    - assume:worker-type:releng-hardware/mozillavpn-b-3-osx*
project/releng/generic-worker/datacenter-gecko-t-osx:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1015-r8:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-bug1927416:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
project/releng/generic-worker/datacenter-mozilla-b-1-osx:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/mozilla-b-1-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-mozilla-b-3-osx:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/mozilla-b-3-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-staging:
  description: Datacenter MacOS dedicated developer and automation staging worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx-1010-*
    - assume:worker-type:releng-hardware/gecko-t-osx-1014-*
    - assume:worker-type:releng-hardware/gecko-t-osx-1015-*
    - assume:worker-type:releng-hardware/gecko-t-osx-1400-*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-bug1840495:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx-1300-m2-bug1840495
project/releng/generic-worker/datacenter-gecko-t-osx-1100-m1:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1100-m1-staging:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1300-m2:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1300-m2-vms:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1300-r8:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1400-r8-staging:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1400-r8:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
project/releng/generic-worker/datacenter-gecko-t-osx-1100-r8-latest:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1200-r8-latest:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1300-r8-latest:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1400-r8-latest:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1400-m2:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1400-m2-bug1887526:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1400-m2-staging:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-osx-1500-m4-staging:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
project/releng/generic-worker/datacenter-gecko-t-osx-1400-m2-vms-staging:
  description: Datacenter MacOS dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-osx*
    - queue:worker-id:mdc1/mac*
    - queue:worker-id:mdc1/t-yosemite*
    - queue:worker-id:mdc1/t-mojave*
    - queue:worker-id:mdc2/mac*
    - queue:worker-id:mdc2/t-yosemite*
    - queue:worker-id:mdc2/t-mojave*
project/releng/generic-worker/datacenter-gecko-t-win10-64-1803-hw:
  description: Datacenter Windows 10 main production worker. Used for Talos,Raptor,
    and unittest. 1803 references the os build.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win10-64-1803-hw
project/releng/generic-worker/win11-64-2009-hw:
  description: Datacenter Windows 11 main production worker. 2009 references the os build.
  scopes:
    - assume:worker-type:releng-hardware/win11-64-2009-hw
project/releng/generic-worker/win11-64-24h2-hw:
  description: Datacenter Windows 11 main production worker. 24H2 references the os build.
  scopes:
    - assume:worker-type:releng-hardware/win11-64-24h2-hw
project/releng/generic-worker/win11-64-2009-hw-alpha:
  description: Datacenter Windows 11 experimental worker. 2009 references the os build.
  scopes:
    - assume:worker-type:releng-hardware/win11-64-2009-hw-alpha
project/releng/generic-worker/win11-64-24h2-hw-alpha:
  description: Datacenter Windows 11 experimental worker. 24H2 references the os build.
  scopes:
    - assume:worker-type:releng-hardware/win11-64-24h2-hw-alpha
project/releng/generic-worker/win11-64-2009-hw-ref:
  description: Datacenter Windows 11 main production worker. 2009 references the os build.
  scopes:
    - assume:worker-type:releng-hardware/win11-64-2009-hw-ref
project/releng/generic-worker/win11-64-24h2-hw-ref:
  description: Datacenter Windows 11 main production worker. 24H2 references the os build.
  scopes:
    - assume:worker-type:releng-hardware/win11-64-24h2-hw-ref
project/releng/generic-worker/win11-64-24h2-hw-ref-alpha:
  description: Datacenter Windows 11 experimental worker. 24h2 references the os build.
  scopes:
    - assume:worker-type:releng-hardware/win11-64-24h2-hw-ref-alpha
project/releng/generic-worker/win11-64-2009-hw-dev:
  description: Datacenter Windows 11 main RelSRE dev worker. 2009 references the os build.
  scopes:
    - assume:worker-type:releng-hardware/win11-64-2009-hw-dev
project/releng/generic-worker/win11-64-2009-hw-ref-alpha:
  description: Datacenter Windows 11 experimental worker. 2009 references the os build.
  scopes:
    - assume:worker-type:releng-hardware/win11-64-2009-hw-ref-alpha
project/releng/generic-worker/datacenter-gecko-t-win10-64-dev:
  description: Windows 10 Dedicated workers for developer hardware testing.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win10-64-dev
project/releng/generic-worker/datacenter-gecko-t-win10-64-hb:
  description: Datacenter Windows 10 beta workers. For automated worker configuration
    testing.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win10-64-hb
project/releng/generic-worker/datacenter-gecko-t-win-talos:
  description: Datacenter Windows 10 experimental perf  test worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win-talos
project/releng/generic-worker/azure-gecko-t-win7-32-hw:
  description: Azure Windows 7 32-bit hyper-v nested virtual machines. For Testing and development.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win7-32-hw
project/releng/generic-worker/azure-gecko-t-win7-dev:
  description: Azure Windows 7 32-bit virtual machines. For Testing and development.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win7-dev
project/releng/generic-worker/azure-gecko-t-win7-gpu-dev:
  description: Azure Windows 7 32-bit gpu virtual machines. For Testing and development.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win7-gpu-dev
project/releng/generic-worker/datacenter-gecko-t-win10-64-ht:
  description: Datacenter Windows testing workers. For testing and development.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win10-64-ht
project/releng/generic-worker/datacenter-gecko-t-win10-64-hw:
  description: Datacenter Windows 10 main production worker. Typically for Talos and
    Raptor performance testing.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win10-64-hw
project/releng/generic-worker/datacenter-gecko-t-win10-64-hw-dev:
  description: Datacenter Windows 10 dedicated developer and automation worker.
  scopes:
    - assume:worker-type:releng-hardware/gecko-t-win10-64-hw-dev
project/releng/generic-worker/gcp-wayland-virtualbox:
  description: GCP Ubuntu 22.04 Wayland VirtualBox workers.
  scopes:
    - assume:worker-type:gecko-t/t-linux-vm-2204-wayland
project/releng/quarantine-worker:
  description: Self-quarantine access for hardware workers after generic-worker fails
    with code 69.
  scopes:
    - queue:quarantine-worker:releng-hardware/gecko-*
project/releng/scriptworker/v2/addon/dev/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-addon-dev
    - queue:worker-id:gecko-1-addon-dev/gecko-1-addon-dev-*
project/releng/scriptworker/v2/addon/prod/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-addon
    - queue:worker-id:gecko-1-addon/gecko-1-addon-*
project/releng/scriptworker/v2/addon/prod/firefoxci-gecko-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-3-addon
    - queue:worker-id:gecko-3-addon/gecko-3-addon-*
project/releng/scriptworker/v2/balrog/dev/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-balrog-dev
    - queue:worker-id:gecko-1-balrog-dev/gecko-1-balrog-dev-*
project/releng/scriptworker/v2/balrog/prod/firefoxci-comm-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-1-balrog
    - queue:worker-id:comm-1-balrog/comm-1-balrog-*
project/releng/scriptworker/v2/balrog/prod/firefoxci-comm-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-3-balrog
    - queue:worker-id:comm-3-balrog/comm-3-balrog-*
project/releng/scriptworker/v2/balrog/prod/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-balrog
    - queue:worker-id:gecko-1-balrog/gecko-1-balrog-*
project/releng/scriptworker/v2/balrog/prod/firefoxci-gecko-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-3-balrog
    - queue:worker-id:gecko-3-balrog/gecko-3-balrog-*
project/releng/scriptworker/v2/balrog/dev/firefoxci-xpi-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/xpi-1-balrog-dev
    - queue:get-artifact:xpi/*
    - queue:worker-id:xpi-1-balrog-dev/xpi-1-balrog-dev-*
project/releng/scriptworker/v2/balrog/prod/firefoxci-xpi-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/xpi-1-balrog
    - queue:get-artifact:xpi/*
    - queue:worker-id:xpi-1-balrog/xpi-1-balrog-*
project/releng/scriptworker/v2/balrog/prod/firefoxci-xpi-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/xpi-3-balrog
    - queue:get-artifact:xpi/*
    - queue:worker-id:xpi-3-balrog/xpi-3-balrog-*
project/releng/scriptworker/v2/beetmover/dev/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-beetmover-dev
    - queue:get-artifact:releng/partner/*
    - queue:worker-id:gecko-1-beetmover-dev/gecko-1-beetmover-dev-*
project/releng/scriptworker/v2/beetmover/dev/firefoxci-mobile-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-1-beetmover-dev
    - queue:worker-id:mobile-1-beetmover-dev/mobile-1-beetmover-dev-*
project/releng/scriptworker/v2/beetmover/prod/firefoxci-comm-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-1-beetmover
    - queue:worker-id:comm-1-beetmover/comm-1-beetmover-*
project/releng/scriptworker/v2/beetmover/prod/firefoxci-comm-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-3-beetmover
    - queue:worker-id:comm-3-beetmover/comm-3-beetmover-*
project/releng/scriptworker/v2/beetmover/prod/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-beetmover
    - queue:get-artifact:releng/partner/*
    - queue:worker-id:gecko-1-beetmover/gecko-1-beetmover-*
project/releng/scriptworker/v2/beetmover/prod/firefoxci-gecko-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-3-beetmover
    - queue:get-artifact:releng/*
    - queue:worker-id:gecko-3-beetmover/gecko-3-beetmover-*
project/releng/scriptworker/v2/beetmover/prod/firefoxci-mobile-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-1-beetmover
    - queue:worker-id:mobile-1-beetmover/mobile-1-beetmover-*
project/releng/scriptworker/v2/beetmover/prod/firefoxci-mobile-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-3-beetmover
    - queue:worker-id:mobile-3-beetmover/mobile-3-beetmover-*
project/releng/scriptworker/v2/bouncer/dev/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-bouncer-dev
    - queue:worker-id:gecko-1-bouncer-dev/gecko-1-bouncer-dev-*
project/releng/scriptworker/v2/bouncer/prod/firefoxci-comm-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-1-bouncer
    - queue:worker-id:comm-1-bouncer/comm-1-bouncer-*
project/releng/scriptworker/v2/bouncer/prod/firefoxci-comm-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-3-bouncer
    - queue:worker-id:comm-3-bouncer/comm-3-bouncer-*
project/releng/scriptworker/v2/bouncer/prod/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-bouncer
    - queue:worker-id:gecko-1-bouncer/gecko-1-bouncer-*
project/releng/scriptworker/v2/bouncer/prod/firefoxci-gecko-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-3-bouncer
    - queue:worker-id:gecko-3-bouncer/gecko-3-bouncer-*
project/releng/scriptworker/v2/cloudops-canary:
  description: Allows cloudops' jenkins to trigger scriptworker canary tasks
  scopes:
    - hooks:trigger-hook:project-releng/cron-task-mozilla-central/scriptworker-canary
project/releng/scriptworker/v2/github/dev/firefoxci-mobile-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-1-github-dev
    - queue:worker-id:mobile-1-github-dev/mobile-1-github-dev-*
project/releng/scriptworker/v2/github/prod/firefoxci-mobile-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-1-github
    - queue:worker-id:mobile-1-github/mobile-1-github-*
project/releng/scriptworker/v2/github/prod/firefoxci-mobile-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-3-github
    - queue:worker-id:mobile-3-github/mobile-3-github-*
project/releng/scriptworker/v2/github/dev/firefoxci-xpi-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/xpi-1-github-dev
    - queue:get-artifact:xpi/*
    - queue:worker-id:xpi-1-github-dev/xpi-1-github-dev-*
project/releng/scriptworker/v2/github/prod/firefoxci-xpi-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/xpi-1-github
    - queue:get-artifact:xpi/*
    - queue:worker-id:xpi-1-github/xpi-1-github-*
project/releng/scriptworker/v2/github/prod/firefoxci-xpi-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/xpi-3-github
    - queue:get-artifact:xpi/*
    - queue:worker-id:xpi-3-github/xpi-3-github-*
project/releng/scriptworker/v2/iscript/dep:
  description: ''
  scopes:
    - assume:worker-type:scriptworker-prov-v1/depsigning-mac-v1
    - queue:get-artifact:releng/partner/*
    - queue:get-artifact:private/openh264/*
    - queue:worker-id:signing-mac-v1/dep-mac-v3-signing*
project/releng/scriptworker/v2/iscript/dev:
  description: ''
  scopes:
    - assume:worker-type:scriptworker-prov-v1/depsigning-mac-v1-dev
    - queue:get-artifact:releng/partner/*
    - queue:get-artifact:private/openh264/*
    - queue:worker-id:signing-mac-v1/dev-mac-v3-signing*
project/releng/scriptworker/v2/iscript/prod:
  description: ''
  scopes:
    - assume:worker-type:scriptworker-prov-v1/signing-mac-v1
    - queue:get-artifact:releng/partner/*
    - queue:get-artifact:private/openh264/*
    - queue:worker-id:signing-mac-v1/mac-v3-signing*
project/releng/scriptworker/v2/iscript/tb-dep:
  description: ''
  scopes:
    - assume:worker-type:scriptworker-prov-v1/tb-depsigning-mac-v1
    - queue:worker-id:signing-mac-v1/dep-mac-v3-signing*
project/releng/scriptworker/v2/iscript/tb-prod:
  description: ''
  scopes:
    - assume:worker-type:scriptworker-prov-v1/tb-signing-mac-v1
    - queue:worker-id:signing-mac-v1/tb-mac-v3-signing*
project/releng/scriptworker/v2/signing/dev/firefoxci-mozillavpn-t:
  description: mozillavpn linux signing
  scopes:
    - queue:claim-work:scriptworker-k8s/mozillavpn-t-signing-dev
    - queue:worker-id:mozillavpn-t-signing-dev/mozillavpn-t-signing-dev*
project/releng/scriptworker/v2/signing/prod/firefoxci-mozillavpn-t:
  description: mozillavpn linux signing
  scopes:
    - queue:claim-work:scriptworker-k8s/mozillavpn-t-signing
    - queue:worker-id:mozillavpn-t-signing/mozillavpn-t-signing*
project/releng/scriptworker/v2/signing/prod/firefoxci-mozillavpn-3:
  description: mozillavpn linux signing
  scopes:
    - queue:claim-work:scriptworker-k8s/mozillavpn-3-signing
    - queue:worker-id:mozillavpn-3-signing/mozillavpn-3-signing*
project/releng/scriptworker/v2/mac-signing/prod/firefoxci-mozillavpn-t:
  description: mozillavpn mac dep signing
  scopes:
    - assume:worker-type:scriptworker-prov-v1/vpn-depsigning-mac-v1
    - queue:worker-id:vpn-depsigning-mac-v1/dep-mac-v3-signing*
    # TODO: Remove once mac-signing19 is not being used for VPN anymore
    - assume:worker-type:scriptworker-prov-v1/mozillavpn-t-signing-mac
    - queue:worker-id:mozillavpn-t-signing-mac/vpn-mac-v3-signing*
project/releng/scriptworker/v2/mac-signing/prod/firefoxci-mozillavpn-3:
  description: mozillavpn mac signing
  scopes:
    - assume:worker-type:scriptworker-prov-v1/mozillavpn-3-signing-mac
    - queue:worker-id:mozillavpn-3-signing-mac/vpn-mac-v3-signing*
project/releng/scriptworker/v2/notarization-poller/prod:
  description: Mac notarization poller client.
  scopes:
    - assume:worker-type:scriptworker-prov-v1/mac-notarization-poller
    - queue:get-artifact:releng/partner/*
project/releng/scriptworker/v2/notarization-poller/tb-prod:
  description: ''
  scopes:
    - assume:worker-type:scriptworker-prov-v1/tb-mac-notarization-poller
    - queue:get-artifact:releng/partner/*
project/releng/scriptworker/v2/pushapk/dev/firefoxci-mozillavpn-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mozillavpn-1-pushapk-dev
    - queue:worker-id:mozillavpn-1-pushapk-dev/mozillavpn-1-pushapk-dev-*
project/releng/scriptworker/v2/pushapk/prod/firefoxci-mozillavpn-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mozillavpn-1-pushapk
    - queue:worker-id:mozillavpn-1-pushapk/mozillavpn-1-pushapk-*
project/releng/scriptworker/v2/pushapk/prod/firefoxci-mozillavpn-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mozillavpn-3-pushapk
    - queue:worker-id:mozillavpn-3-pushapk/mozillavpn-3-pushapk-*
project/releng/scriptworker/v2/pushapk/dev/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-pushapk-dev
    - queue:worker-id:gecko-1-pushapk-dev/gecko-1-pushapk-dev-*
project/releng/scriptworker/v2/pushapk/prod/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-pushapk
    - queue:worker-id:gecko-1-pushapk/gecko-1-pushapk-*
project/releng/scriptworker/v2/pushapk/prod/firefoxci-gecko-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-3-pushapk
    - queue:worker-id:gecko-3-pushapk/gecko-3-pushapk-*
project/releng/scriptworker/v2/pushapk/prod/firefoxci-mobile-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-1-pushapk
    - queue:worker-id:mobile-1-pushapk/mobile-1-pushapk-*
project/releng/scriptworker/v2/pushapk/prod/firefoxci-mobile-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-3-pushapk
    - queue:worker-id:mobile-3-pushapk/mobile-3-pushapk-*
project/releng/scriptworker/v2/pushflatpak/dev/firefoxci-comm-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-1-pushflatpak-dev
    - queue:worker-id:comm-1-pushflatpak-dev/comm-1-pushflatpak-dev-*
project/releng/scriptworker/v2/pushflatpak/prod/firefoxci-comm-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-1-pushflatpak
    - queue:worker-id:comm-1-pushflatpak/comm-1-pushflatpak-*
project/releng/scriptworker/v2/pushflatpak/prod/firefoxci-comm-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-3-pushflatpak
    - queue:worker-id:comm-3-pushflatpak/comm-3-pushflatpak-*
project/releng/scriptworker/v2/pushflatpak/dev/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-pushflatpak-dev
    - queue:worker-id:gecko-1-pushflatpak-dev/gecko-1-pushflatpak-dev-*
project/releng/scriptworker/v2/pushflatpak/prod/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-pushflatpak
    - queue:worker-id:gecko-1-pushflatpak/gecko-1-pushflatpak-*
project/releng/scriptworker/v2/pushflatpak/prod/firefoxci-gecko-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-3-pushflatpak
    - queue:worker-id:gecko-3-pushflatpak/gecko-3-pushflatpak-*
project/releng/scriptworker/v2/pushmsix/dev/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-pushmsix-dev
    - queue:worker-id:gecko-1-pushmsix-dev/gecko-1-pushmsix-dev-*
project/releng/scriptworker/v2/pushmsix/prod/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-pushmsix
    - queue:worker-id:gecko-1-pushmsix/gecko-1-pushmsix-*
project/releng/scriptworker/v2/pushmsix/prod/firefoxci-gecko-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-3-pushmsix
    - queue:worker-id:gecko-3-pushmsix/gecko-3-pushmsix-*
project/releng/scriptworker/v2/pushmsix/dev/firefoxci-comm-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-1-pushmsix-dev
    - queue:worker-id:comm-1-pushmsix-dev/comm-1-pushmsix-dev-*
project/releng/scriptworker/v2/pushmsix/prod/firefoxci-comm-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-1-pushmsix
    - queue:worker-id:comm-1-pushmsix/comm-1-pushmsix-*
project/releng/scriptworker/v2/pushmsix/prod/firefoxci-comm-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-3-pushmsix
    - queue:worker-id:comm-3-pushmsix/comm-3-pushmsix-*
project/releng/scriptworker/v2/shipit/dev/firefoxci-gecko-1:
  description: ''
  scopes:
    - project:releng:services/shipit_api/update_product_channel_version/firefox
    - project:releng:services/shipit_api/add_release/devedition
    - project:releng:services/shipit_api/add_release/firefox
    - project:releng:services/shipit_api/add_release/firefox-android
    - project:releng:services/shipit_api/dev/add_release/devedition
    - project:releng:services/shipit_api/dev/add_release/firefox
    - project:releng:services/shipit_api/dev/add_release/firefox-android
    - project:releng:services/shipit_api/dev/schedule_phase/devedition/ship_devedition
    - project:releng:services/shipit_api/dev/schedule_phase/firefox/ship_firefox
    - project:releng:services/shipit_api/dev/schedule_phase/firefox-android/ship_android
    - project:releng:services/shipit_api/dev/schedule_phase/firefox-android/promote_android
    - project:releng:services/shipit_api/rebuild_product_details
    - project:releng:services/shipit_api/schedule_phase/devedition/ship_devedition
    - project:releng:services/shipit_api/schedule_phase/firefox/ship_firefox
    - project:releng:services/shipit_api/schedule_phase/firefox-android/ship_android
    - project:releng:services/shipit_api/schedule_phase/firefox-android/promote_android
    - project:releng:services/shipit_api/staging/add_release/devedition
    - project:releng:services/shipit_api/staging/add_release/firefox
    - project:releng:services/shipit_api/staging/add_release/firefox-android
    - project:releng:services/shipit_api/staging/schedule_phase/devedition/ship_devedition
    - project:releng:services/shipit_api/staging/schedule_phase/firefox/ship_firefox
    - project:releng:services/shipit_api/staging/schedule_phase/firefox-android/ship_android
    - project:releng:services/shipit_api/staging/schedule_phase/firefox-android/promote_android
    - project:releng:services/shipit_api/update_release_status
    - queue:claim-work:scriptworker-k8s/gecko-1-shipit-dev
    - queue:worker-id:gecko-1-shipit-dev/gecko-1-shipit-dev-*
project/releng/scriptworker/v2/shipit/prod/firefoxci-comm-1:
  description: ''
  scopes:
    - project:releng:services/shipit_api/update_product_channel_version/thunderbird
    - project:releng:services/shipit_api/rebuild_product_details
    - project:releng:services/shipit_api/update_release_status
    - queue:claim-work:scriptworker-k8s/comm-1-shipit
    - queue:worker-id:comm-1-shipit/comm-1-shipit-*
project/releng/scriptworker/v2/shipit/prod/firefoxci-comm-3:
  description: ''
  scopes:
    - project:releng:services/shipit_api/update_product_channel_version/thunderbird
    - project:releng:services/shipit_api/rebuild_product_details
    - project:releng:services/shipit_api/update_release_status
    - queue:claim-work:scriptworker-k8s/comm-3-shipit
    - queue:worker-id:comm-3-shipit/comm-3-shipit-*
project/releng/scriptworker/v2/shipit/prod/firefoxci-gecko-1:
  description: ''
  scopes:
    - project:releng:services/shipit_api/update_product_channel_version/firefox
    - project:releng:services/shipit_api/add_release/devedition
    - project:releng:services/shipit_api/add_release/firefox
    - project:releng:services/shipit_api/add_release/firefox-android
    - project:releng:services/shipit_api/dev/add_release/devedition
    - project:releng:services/shipit_api/dev/add_release/firefox
    - project:releng:services/shipit_api/dev/add_release/firefox-android
    - project:releng:services/shipit_api/dev/schedule_phase/devedition/ship_devedition
    - project:releng:services/shipit_api/dev/schedule_phase/firefox/ship_firefox
    - project:releng:services/shipit_api/dev/schedule_phase/firefox-android/ship_android
    - project:releng:services/shipit_api/dev/schedule_phase/firefox-android/promote_android
    - project:releng:services/shipit_api/rebuild_product_details
    - project:releng:services/shipit_api/schedule_phase/devedition/ship_devedition
    - project:releng:services/shipit_api/schedule_phase/firefox/ship_firefox
    - project:releng:services/shipit_api/schedule_phase/firefox-android/ship_android
    - project:releng:services/shipit_api/schedule_phase/firefox-android/promote_android
    - project:releng:services/shipit_api/staging/add_release/devedition
    - project:releng:services/shipit_api/staging/add_release/firefox
    - project:releng:services/shipit_api/staging/add_release/firefox-android
    - project:releng:services/shipit_api/staging/schedule_phase/devedition/ship_devedition
    - project:releng:services/shipit_api/staging/schedule_phase/firefox/ship_firefox
    - project:releng:services/shipit_api/staging/schedule_phase/firefox-android/ship_android
    - project:releng:services/shipit_api/staging/schedule_phase/firefox-android/promote_android
    - project:releng:services/shipit_api/update_release_status
    - queue:claim-work:scriptworker-k8s/gecko-1-shipit
    - queue:worker-id:gecko-1-shipit/gecko-1-shipit-*
project/releng/scriptworker/v2/shipit/prod/firefoxci-gecko-3:
  description: ''
  scopes:
    - project:releng:services/shipit_api/update_product_channel_version/firefox
    - project:releng:services/shipit_api/add_release/devedition
    - project:releng:services/shipit_api/add_release/firefox
    - project:releng:services/shipit_api/add_release/firefox-android
    - project:releng:services/shipit_api/production/add_release/devedition
    - project:releng:services/shipit_api/production/add_release/firefox
    - project:releng:services/shipit_api/production/add_release/firefox-android
    - project:releng:services/shipit_api/production/schedule_phase/devedition/ship_devedition
    - project:releng:services/shipit_api/production/schedule_phase/firefox/ship_firefox
    - project:releng:services/shipit_api/production/schedule_phase/firefox-android/ship_android
    - project:releng:services/shipit_api/production/schedule_phase/firefox-android/promote_android
    - project:releng:services/shipit_api/rebuild_product_details
    - project:releng:services/shipit_api/schedule_phase/devedition/ship_devedition
    - project:releng:services/shipit_api/schedule_phase/firefox/ship_firefox
    - project:releng:services/shipit_api/schedule_phase/firefox-android/ship_android
    - project:releng:services/shipit_api/schedule_phase/firefox-android/promote_android
    - project:releng:services/shipit_api/update_release_status
    - queue:claim-work:scriptworker-k8s/gecko-3-shipit
    - queue:worker-id:gecko-3-shipit/gecko-3-shipit-*
project/releng/scriptworker/v2/signing/dev/firefoxci-adhoc-t:
  description: Adhoc signing dev signing scriptworker client
  scopes:
    - queue:claim-work:scriptworker-k8s/adhoc-t-signing-dev
    - queue:get-artifact:releng/adhoc/*
    - queue:worker-id:adhoc-t-signing-dev/adhoc-t-signing-dev-*
    - queue:get-artifact:private/openh264/*
project/releng/scriptworker/v2/mac-signing/dev/firefoxci-adhoc-t:
  description: Adhoc iscript dev scriptworker client
  scopes:
    - queue:claim-work:scriptworker-prov-v1/adhoc-signing-mac-dev
    - queue:get-artifact:releng/adhoc/*
    - queue:get-artifact:private/openh264/*
    - queue:worker-id:adhoc-signing-mac-v1/dev-adhoc-mac-v3-signing*
project/releng/scriptworker/v2/signing/dev/firefoxci-gecko-t:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-t-signing-dev
    - queue:worker-id:gecko-t-signing-dev/gecko-t-signing-dev-*
    - queue:get-artifact:releng/partner/*
    - queue:get-artifact:private/openh264/*
project/releng/scriptworker/v2/signing/dev/firefoxci-mobile-t:
  description: dev mobile signing
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-t-signing-dev
    - queue:worker-id:mobile-t-signing-dev/mobile-t-signing-dev-*
project/releng/scriptworker/v2/signing/dev/firefoxci-xpi-t:
  description: dev xpi signing
  scopes:
    - queue:claim-work:scriptworker-k8s/xpi-t-signing-dev
    - queue:get-artifact:xpi/*
    - queue:worker-id:xpi-t-signing-dev/xpi-t-signing-dev-*
project/releng/scriptworker/v2/signing/prod/firefoxci-adhoc-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/adhoc-3-signing
    - queue:get-artifact:releng/adhoc/*
    - queue:worker-id:adhoc-3-signing/adhoc-3-signing-*
    - queue:get-artifact:private/openh264/*
project/releng/scriptworker/v2/signing/prod/firefoxci-adhoc-t:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/adhoc-t-signing
    - queue:get-artifact:releng/adhoc/*
    - queue:worker-id:adhoc-t-signing/adhoc-t-signing-*
    - queue:get-artifact:private/openh264/*
project/releng/scriptworker/v2/mac-signing/prod/firefoxci-adhoc-3:
  description: Adhoc iscript production scriptworker client
  scopes:
    - queue:claim-work:scriptworker-prov-v1/adhoc-3-signing-mac
    - queue:get-artifact:releng/adhoc/*
    - queue:worker-id:adhoc-signing-mac-v1/adhoc-mac-v3-signing*
project/releng/scriptworker/v2/mac-signing/prod/firefoxci-adhoc-t:
  description: Adhoc iscript production scriptworker client
  scopes:
    - queue:claim-work:scriptworker-prov-v1/adhoc-t-signing-mac
    - queue:get-artifact:releng/adhoc/*
    - queue:worker-id:adhoc-depsigning-mac-v1/adhoc-mac-v3-depsigning*
project/releng/scriptworker/v2/signing/prod/firefoxci-app-services-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/app-services-3-signing
    - queue:worker-id:app-services-3-signing/app-services-3-signing-*
project/releng/scriptworker/v2/signing/prod/firefoxci-app-services-t:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/app-services-t-signing
    - queue:worker-id:app-services-t-signing/app-services-t-signing-*
project/releng/scriptworker/v2/signing/prod/firefoxci-comm-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-3-signing
    - queue:worker-id:comm-3-signing/comm-3-signing-*
project/releng/scriptworker/v2/signing/prod/firefoxci-comm-t:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-t-signing
    - queue:worker-id:comm-t-signing/comm-t-signing-*
project/releng/scriptworker/v2/signing/prod/firefoxci-gecko-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-3-signing
    - queue:get-artifact:releng/*
    - queue:worker-id:gecko-3-signing/gecko-3-signing-*
    - queue:get-artifact:private/openh264/*
project/releng/scriptworker/v2/signing/prod/firefoxci-gecko-t:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-t-signing
    - queue:get-artifact:releng/partner/*
    - queue:worker-id:gecko-t-signing/gecko-t-signing-*
    - queue:get-artifact:private/openh264/*
project/releng/scriptworker/v2/signing/prod/firefoxci-glean-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/glean-3-signing
    - queue:worker-id:glean-3-signing/glean-3-signing-*
project/releng/scriptworker/v2/signing/prod/firefoxci-glean-t:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/glean-t-signing
    - queue:worker-id:glean-t-signing/glean-t-signing-*
project/releng/scriptworker/v2/signing/prod/firefoxci-mobile-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-3-signing
    - queue:worker-id:mobile-3-signing/mobile-3-signing-*
project/releng/scriptworker/v2/signing/prod/firefoxci-mobile-t:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-t-signing
    - queue:worker-id:mobile-t-signing/mobile-t-signing-*
project/releng/scriptworker/v2/signing/prod/firefoxci-xpi-3:
  description: production xpi signing
  scopes:
    - queue:claim-work:scriptworker-k8s/xpi-3-signing
    - queue:get-artifact:xpi/*
    - queue:worker-id:xpi-3-signing/xpi-3-signing-*
project/releng/scriptworker/v2/signing/prod/firefoxci-xpi-t:
  description: dep xpi signing
  scopes:
    - queue:claim-work:scriptworker-k8s/xpi-t-signing
    - queue:get-artifact:xpi/*
    - queue:worker-id:xpi-t-signing/xpi-t-signing-*
project/releng/scriptworker/v2/tree/dev/firefoxci-comm-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-1-tree-dev
    - queue:worker-id:comm-1-tree-dev/comm-1-tree-dev-*
project/releng/scriptworker/v2/tree/dev/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-tree-dev
    - queue:worker-id:gecko-1-tree-dev/gecko-1-tree-dev-*
project/releng/scriptworker/v2/tree/dev/firefoxci-mobile-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-1-tree-dev
    - queue:worker-id:mobile-1-tree-dev/mobile-1-tree-dev-*
project/releng/scriptworker/v2/tree/prod/firefoxci-comm-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-1-tree
    - queue:worker-id:comm-1-tree/comm-1-tree-*
project/releng/scriptworker/v2/tree/prod/firefoxci-comm-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/comm-3-tree
    - queue:worker-id:comm-3-tree/comm-3-tree-*
project/releng/scriptworker/v2/tree/prod/firefoxci-gecko-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-1-tree
    - queue:worker-id:gecko-1-tree/gecko-1-tree-*
project/releng/scriptworker/v2/tree/prod/firefoxci-mobile-1:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-1-tree
    - queue:worker-id:mobile-1-tree/mobile-1-tree-*
project/releng/scriptworker/v2/tree/prod/firefoxci-gecko-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/gecko-3-tree
    - queue:worker-id:gecko-3-tree/gecko-3-tree-*
project/releng/scriptworker/v2/tree/prod/firefoxci-mobile-3:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-k8s/mobile-3-tree
    - queue:worker-id:mobile-3-tree/mobile-3-tree-*
project/releng/scriptworker/v2/xpi-3-signing:
  description: ''
  scopes:
    - queue:claim-work:scriptworker-prov-v1/xpi-3-signing
    - queue:get-artifact:xpi/*
    - queue:worker-id:signing-linux-v1/signing-linux-*
project/releng/scriptworker/v2/xpi-t-signing:
  description: ''
  scopes:
    - project:xpi:releng:signing:cert:dep-signing
    - queue:claim-work:scriptworker-prov-v1/xpi-t-signing
    - queue:get-artifact:xpi/*
    - queue:worker-id:signing-linux-v1/depsigning-worker*
project/releng/services/tooltool/bug1604706:
  description: tooltool permissions for occ
  scopes:
    - project:releng:services/tooltool/api/download/internal
    - project:releng:services/tooltool/api/upload/internal
project/releng/shipit/production:
  description: ''
  scopes:
    - hooks:trigger-hook:project-comm/in-tree-action-3-generic/*
    - hooks:trigger-hook:project-comm/in-tree-action-3-release-promotion/*
    - hooks:trigger-hook:project-gecko/in-tree-action-3-generic/*
    - hooks:trigger-hook:project-gecko/in-tree-action-3-release-promotion/*
    - notify:matrix-room:!tBWwNyfeKqGvkNpdDL:mozilla.org
    - notify:matrix-room:!xPTYfLywxFMryjbnJl:mozilla.org
    - project:releng:services/shipit_api/rebuild_product_details
    - project:releng:services/shipit_api/update_release_status
project/releng/shipit/staging:
  description: Shipit staging client
  scopes:
    - hooks:trigger-hook:project-comm/in-tree-action-1-generic/*
    - hooks:trigger-hook:project-comm/in-tree-action-1-release-promotion/*
    - hooks:trigger-hook:project-gecko/in-tree-action-1-generic/*
    - hooks:trigger-hook:project-gecko/in-tree-action-1-release-promotion/*
    - notify:matrix-room:!wGgsWXnVncJLSBYmuf:mozilla.org
    - project:releng:services/shipit_api/rebuild_product_details
    - project:releng:services/shipit_api/update_release_status
project/releng/treeherder/production:
  description: Treeherder production client
  scopes:
    - notify:email:*
project/relman/code-coverage/backend-production:
  description: See [bug 1593751](https://bugzilla.mozilla.org/show_bug.cgi?id=1593751#c20)
  scopes:
    - assume:project:relman:code-coverage/runtime/production
project/relman/code-coverage/backend-testing:
  description: See [bug 1593751](https://bugzilla.mozilla.org/show_bug.cgi?id=1593751#c20).
  scopes:
    - assume:project:relman:code-coverage/runtime/testing
project/relman/code-coverage/events-production:
  description: See [bug 1593751](https://bugzilla.mozilla.org/show_bug.cgi?id=1593751#c20)
  scopes:
    - assume:project:relman:code-coverage/runtime/production
project/relman/code-coverage/events-testing:
  description: See [bug ](https://bugzilla.mozilla.org/show_bug.cgi?id=1593751#c20)
  scopes:
    - assume:project:relman:code-coverage/runtime/testing
project/relman/code-review/backend-production:
  description: See [bug 1593749](https://bugzilla.mozilla.org/show_bug.cgi?id=1593749#c12)
  scopes:
    - assume:project:relman:code-review/runtime/production
project/relman/code-review/backend-testing:
  description: See [bug 1593749](https://bugzilla.mozilla.org/show_bug.cgi?id=1593749#c12)
  scopes:
    - assume:project:relman:code-review/runtime/testing
project/relman/code-review/events-production:
  description: See [bug 1593749](https://bugzilla.mozilla.org/show_bug.cgi?id=1593749#c12)
  scopes:
    - assume:project:relman:code-review/runtime/production
project/relman/code-review/events-testing:
  description: See [bug 1593749](https://bugzilla.mozilla.org/show_bug.cgi?id=1593749#c12)
  scopes:
    - assume:project:relman:code-review/runtime/testing
project/relops/opencloudconfig/tooltool:
  description: Client for OpenCloudConfig workers to access tooltool for image maintenance
  scopes:
    - project:releng:services/tooltool/api/download/internal
    - project:releng:services/tooltool/api/upload/internal
project/taskcluster/legacy-login:
  description: ''
  scopes:
    - assume:github-org-admin:*
    - assume:github-team:*
    - assume:login-identity:*
    - assume:mozilla-group:*
    - assume:mozillians-group:*
    - auth:azure-table:read-write:firefoxcitc/AccessTokenTable
    - auth:azure-table:read-write:firefoxcitc/AuthorizationCodesTable
    - auth:azure-table:read-write:firefoxcitc/GithubAccessTokenTable
    - auth:create-client:github/*
    - auth:create-client:mozilla-auth0/*
    - auth:delete-client:github/*
    - auth:delete-client:mozilla-auth0/*
    - auth:disable-client:github/*
    - auth:disable-client:mozilla-auth0/*
    - auth:enable-client:github/*
    - auth:enable-client:mozilla-auth0/*
    - auth:reset-access-token:github/*
    - auth:reset-access-token:mozilla-auth0/*
    - auth:update-client:github/*
    - auth:update-client:mozilla-auth0/*
project/taskcluster/smoketest:
  description: Run smoketests on new Taskcluster deployments
  scopes:
    - assume:project:taskcluster:smoketests
project/taskcluster/audit-reports:
  description: Used for auditing worker versions across pools.
  scopes:
    - queue:create-task:low:*
    - queue:scheduler-id:smoketest
    - queue:seal-task-group:smoketest/*
    - queue:get-artifact:public/*
project/wpt/wptsync:
  description: Created in Bug 1596469 - Secret handed to :jgraham
  scopes:
    - assume:repo:hg.mozilla.org/try:*
project/relops/image-builder/dev:
  environments: [staging]
  description: build cloud windows images in ci
  scopes:
    - auth:create-role:repo:github.com/mozilla-platform-ops/cloud-image-builder:branch:*
    - auth:update-role:repo:github.com/mozilla-platform-ops/cloud-image-builder:branch:*
    - generic-worker:os-group:relops/win2019/Administrators
    - generic-worker:run-as-administrator:relops/*
    - queue:create-task:high:relops/*
    - queue:create-task:highest:relops/*
    - queue:create-task:low:relops/*
    - queue:create-task:medium:relops/*
    - queue:create-task:very-high:relops/*
    - queue:route:index.project.relops.cloud-image-builder.*
    - queue:scheduler-id:-
    - queue:scheduler-id:taskcluster-github
    - secrets:get:project/relops/image-builder/dev
    - worker-manager:manage-worker-pool:gecko-1/win*
    - worker-manager:manage-worker-pool:gecko-3/win*
    - worker-manager:manage-worker-pool:gecko-t/win*
    - worker-manager:manage-worker-pool:mozillavpn-1/win*
    - worker-manager:manage-worker-pool:mozillavpn-3/win*
    - worker-manager:manage-worker-pool:relops/*
    # Allow creating tasks on test workers
    - worker-manager:provider:aws
    - worker-manager:provider:azure
    - worker-manager:manage-worker-pool:relops-test-workers/*
    - queue:create-task:{priority}:relops-test-workers/*
    - generic-worker:os-group:relops-test-workers/*
    - generic-worker:run-as-administrator:relops-test-workers/*

project/relops/image-builder/purge:
  environments: [staging]
  description: clean up unused azure resources
  scopes:
    - assume:hook-id:project-relops/cron-task-purge-azure-resources
    - hooks:modify-hook:project-relops/cron-task-purge-azure-resources

project/perf-sheriffs/treeherder/bot:
  description: Performance Sheriffing backfill bot
  scopes:
    - hooks:trigger-hook:project-gecko/in-tree-action-1-backfill/*
    - hooks:trigger-hook:project-gecko/in-tree-action-1-generic/*
    - hooks:trigger-hook:project-gecko/in-tree-action-2-backfill/*
    - hooks:trigger-hook:project-gecko/in-tree-action-2-generic/*
    - hooks:trigger-hook:project-gecko/in-tree-action-3-backfill/*
    - hooks:trigger-hook:project-gecko/in-tree-action-3-generic/*

project/mozci/sheriff-automation:
  description: Perform sheriff automation for mozci cron.
  scopes:
    - hooks:trigger-hook:project-gecko/in-tree-action-1-backfill/*
    - hooks:trigger-hook:project-gecko/in-tree-action-1-generic/*
    - hooks:trigger-hook:project-gecko/in-tree-action-2-backfill/*
    - hooks:trigger-hook:project-gecko/in-tree-action-2-generic/*
    - hooks:trigger-hook:project-gecko/in-tree-action-3-backfill/*
    - hooks:trigger-hook:project-gecko/in-tree-action-3-generic/*