Guide to The Microservices

Taskcluster is composed of a lot of loosely-coupled microservices. While this has lots of well-known advantages as a system architecture, the drawback is that it can be rather difficult for a non-expert to figure out where to start! This guide aims to summarize the available services and their interconnections, in hope of helping you narrow down your search.

Platform vs. Core

Taskcluster aims to be a general platform for task execution to support software development within the Mozilla organization. While it is not currently practical to deploy Taskcluster outside of the installation at Mozilla, enabling such deployments is a long-term design goal. To that end, the services are divided broadly into platform and core.

Platform services are services that any deployment of Taskcluster would include, and on which other Taskcluster components freely depend. For example, there's no Taskcluster without a queue to hold tasks, or without an authentication service to control access to APIs.

Core services are not essential, but still aim to provide general functionality. For example, despite its utility at Mozilla, an deployment of Taskcluster could conceivably be done without the secrets service.

External Services

Taskcluster depends heavily on Pulse, which is a Mozilla-wide AMQP message bus. The Taskcluster team provides some useful libraries and related API methods, but does not operate the pulse service.

Taskcluster Platform

The authentication service provides methods for other Taskcluster services to authenticate API requests, so it implements most of the functionality in "Using the APIs". It also provides functionality to get short-term credentials for other services such as Amazon S3 or Azure SAS. This functionality allows users and services to be provisioned with a simple set of Taskcluster credentials and dynamically acquire all of the other access from those credentials.

The queue service is the focus of all task management in Taskcluster. It provides API methods for creating new tasks, examining existing tasks, and for executing tasks (used by workers). It also provides an extensive set of pulse messages that describe changes in task status.

Taskcluster Core

Utility Services

The index service provides a way to index tasks efficiently using dot-separated namespaces. With careful design of these namespaces, it is easy to look up completed tasks of particular types and to find the artifacts those tasks created. The hooks service supports execution of tasks at specific times or in response to external events. The secrets service provides a scope-protected store for secret data that can be made available selectively to tasks or other users. The taskcluster-notify service handles sending notifications to users via email, irc, etc.


Taskcluster allows a great deal of flexibility in task execution, so the available options for workers are many.

The project provides several implementations of workers. Docker-worker runs tasks on Linux in docker containers. Generic-worker runs tasks witout containers, and has thorough support for Windows. Taskcluster-worker aims to be the single implementation that is used everywhere, sporting "engines" for specific circumstances.

Other users of Taskcluster have built worker implementations as well. For example, release engineering has built "scriptworker" which can execute tasks using predefined scripts for higher security.

Workers can run on any host with Internet access - simply install and configure a worker with appropriate credentials. Cloud computing platforms are an obvious choice for most task executioni. The AWS provisioner provides a mechanism to start Amazon EC2 instances as needed.

External Integrations

The taskcluster-github service integrates with Github, supporting creation of tasks in response to pushes, pull requests, and so on; and updates status indications in Github to represent the results of those tasks.

Within Mozilla, the mozilla-taskcluster service monitors pushes to and creates tasks for them. It does not handle task status, though -- that is the business of the taskcluster-treeherder service, which relays task results to Treeherder.

The taskcluster-pulse service provides temporary Pulse credentials for consuming or publishing Pulse messages. It functions like the auth service in that it allows applications to be configured with Taskcluster credentials only but still have managed access to Pulse.

The cloud-mirror service automatically copies task artifacts between cloud-storage regions to ensure that data close to where it is required.

Team Operations

These services are useful to the Taskcluster team, but probably not as useful to Taskcluster users!

The statsum service handles generic, statstically sound aggregation of system metrics. The stats-collector service performs some very purpose-specific calculations to help the team measure the system against its defined service levels. The diagnostics service service performs end-to-end diagnostic tests of the Taskcluster system to detect errors.

Tools Interface

The tools site provides an extensive UI for interacting with TaskCluser services. While the site itself is a static React application, it makes use of several services for its dynamic behavior. The login service provides a way for users to get Taskcluster credentials. The events service connects the web browser to Pulse. And the cors-proxy service enables secure access to external CORS-protected services.