Bug 1274350 - Fix .taskcluster.yml file format for decision task r=me

.taskcluster.yml

@@ -1,58 +1,101 @@
 ---
+version: 0
 metadata:
   name: "NSS Continuous Integration"
-  description: "Build NSS and run tests in various configurations"
+  description: "The Taskcluster task graph for the NSS tree"
   owner: "mozilla-taskcluster-maintenance@mozilla.com"
-  source: "{{{source}}}"
+  source: {{{source}}}
+
+scopes:
+  # Note the below scopes are insecure however these get overriden on the server
+  # side to whatever scopes are set by mozilla-taskcluster.
+  - queue:*
+  - docker-worker:*
+  - scheduler:*
+
+# Available mustache parameters (see the mozilla-taskcluster source):
+#
+# - owner:          push user (email address)
+# - source:         URL of this YAML file
+# - url:            repository URL
+# - project:        alias for the destination repository (basename of
+#                   the repo url)
+# - level:          SCM level of the destination repository
+#                   (1 = try, 3 = core)
+# - revision:       (short) hg revision of the head of the push
+# - revision_hash:  (long) hg revision of the head of the push
+# - comment:        comment of the push
+# - pushlog_id:     id in the pushlog table of the repository
+#
+# and functions:
+# - as_slugid:      convert a label into a slugId
+# - from_now:       generate a timestamp at a fixed offset from now
 
 tasks:
-  - provisionerId: "aws-provisioner-v1"
-    workerType: "gecko-decision"
-
-    scopes:
-      - "queue:route:tc-treeherder-stage.nss.{{revision}}"
-      - "queue:route:tc-treeherder.nss.{{revision}}"
-      - "scheduler:extend-task-graph:*"
-
-    routes:
-      - "tc-treeherder-stage.nss.{{revision}}"
-      - "tc-treeherder.nss.{{revision}}"
-
-    metadata:
-      name: "NSS Decision Task"
-      description: "Extends the task graph with everything we need"
-      owner: "mozilla-taskcluster-maintenance@mozilla.com"
-      source: "{{{source}}}"
-    tags:
-      createdForUser: {{owner}}
-
-    payload:
-      maxRunTime: 1800
-      image: "ttaubert/nss-ci:0.0.13"
-      command:
-        - bash
-        - -cx
-        - >
-          bin/checkout.sh &&
-          nss/automation/taskcluster/scripts/extend_task_graph.sh
-      env:
-        TC_DOCKER_IMAGE: "ttaubert/nss-ci:0.0.13"
-        TC_PROVISIONER_ID: "aws-provisioner-v1"
-        TC_WORKER_TYPE: "hg-worker"
-        NSS_HEAD_REPOSITORY: '{{{url}}}'
-        NSS_HEAD_REVISION: '{{revision}}'
-
-      graphs:
-        - /home/worker/artifacts/graph.json
-
-      artifacts:
-        public:
-          type: "directory"
-          path: "/home/worker/artifacts"
-          expires: "{{#from_now}}1 hour{{/from_now}}"
-
-    extra:
-      treeherder:
-        symbol: D
-        revision: '{{revision}}'
-        revision_hash: '{{revision_hash}}'
+  - taskId: '{{#as_slugid}}decision task{{/as_slugid}}'
+    reruns: 3
+    task:
+      created: '{{now}}'
+      deadline: '{{#from_now}}1 day{{/from_now}}'
+      expires: '{{#from_now}}14 days{{/from_now}}'
+
+      metadata:
+        owner: mozilla-taskcluster-maintenance@mozilla.com
+        source: {{{source}}}
+        name: "NSS Decision Task"
+        description: |
+            The task that creates all of the other tasks in the task graph
+
+      workerType: "gecko-decision"
+      provisionerId: "aws-provisioner-v1"
+
+      tags:
+        createdForUser: {{owner}}
+
+      scopes:
+        - "queue:route:tc-treeherder-stage.nss.{{revision}}"
+        - "queue:route:tc-treeherder.nss.{{revision}}"
+        - "scheduler:extend-task-graph:*"
+        # mozilla-taskcluster will append the appropriate assume:repo:<repo>
+        # scope here.
+
+      routes:
+        - "tc-treeherder-stage.nss.{{revision_hash}}"
+        - "tc-treeherder.nss.{{revision_hash}}"
+
+      payload:
+        image: "ttaubert/nss-ci:0.0.13"
+
+        env:
+          TC_DOCKER_IMAGE: "ttaubert/nss-ci:0.0.13"
+          TC_PROVISIONER_ID: "aws-provisioner-v1"
+          TC_WORKER_TYPE: "hg-worker"
+          NSS_HEAD_REPOSITORY: '{{{url}}}'
+          NSS_HEAD_REVISION: '{{revision}}'
+
+        features:
+          taskclusterProxy: true
+
+        maxRunTime: 1800
+
+        command:
+          - bash
+          - -cx
+          - >
+            bin/checkout.sh &&
+            nss/automation/taskcluster/scripts/extend_task_graph.sh
+
+        artifacts:
+          public:
+            type: "directory"
+            path: "/home/worker/artifacts"
+            expires: "{{#from_now}}7 days{{/from_now}}"
+
+        graphs:
+          - /home/worker/artifacts/graph.json
+
+      extra:
+        treeherder:
+          symbol: D
+          revision: '{{revision}}'
+          revision_hash: '{{revision_hash}}'