kc3-lang/angle/infra/config/generated/realms.cfg

• Show log

  Commit

• Hash : 0364ac4a
  Author :
  Date : 2024-07-18T13:18:33
  

  Set up ANGLE shadow buckets
  
  Sets up ANGLE shadow buckets so that LED jobs can be triggered now that
  real builds are the only supported path.
  
  This was effectively copied from Chromium's configuration but with the
  relevant pools, service accounts, etc. swapped out for ANGLE ones.
  
  Bug: chromium:353904289
  Change-Id: Idd958faf73d9d62180151f4a72817fb1543f208f
  Reviewed-on: https://chromium-review.googlesource.com/c/angle/angle/+/5723088
  Commit-Queue: Yuly Novikov <ynovikov@chromium.org>
  Reviewed-by: Chan Li <chanli@chromium.org>
  Reviewed-by: Yuly Novikov <ynovikov@chromium.org>
  

Download

• infra/config/generated/realms.cfg

• # Auto-generated by lucicfg.
  # Do not modify manually.
  #
  # For the schema of this file, see RealmsCfg message:
  #   https://config.luci.app/schemas/projects:realms.cfg
  
  realms {
    name: "@root"
    bindings {
      role: "role/buildbucket.reader"
      principals: "group:all"
    }
    bindings {
      role: "role/configs.reader"
      principals: "group:all"
    }
    bindings {
      role: "role/configs.validator"
      principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
    }
    bindings {
      role: "role/logdog.reader"
      principals: "group:all"
    }
    bindings {
      role: "role/logdog.writer"
      principals: "group:luci-logdog-angle-writers"
    }
    bindings {
      role: "role/scheduler.owner"
      principals: "group:project-angle-admins"
    }
    bindings {
      role: "role/scheduler.reader"
      principals: "group:all"
    }
    bindings {
      role: "role/swarming.poolOwner"
      principals: "group:mdb/chrome-troopers"
      principals: "group:project-angle-owners"
    }
    bindings {
      role: "role/swarming.poolUser"
      principals: "group:mdb/chrome-troopers"
      principals: "group:project-angle-owners"
    }
    bindings {
      role: "role/swarming.poolViewer"
      principals: "group:all"
    }
    bindings {
      role: "role/swarming.taskServiceAccount"
      principals: "user:chrome-gpu-gold@chops-service-accounts.iam.gserviceaccount.com"
      principals: "user:chromium-tester@chops-service-accounts.iam.gserviceaccount.com"
    }
    bindings {
      role: "role/swarming.taskTriggerer"
      principals: "group:mdb/chrome-troopers"
      principals: "group:project-angle-owners"
    }
  }
  realms {
    name: "ci"
    bindings {
      role: "role/buildbucket.builderServiceAccount"
      principals: "user:angle-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
    }
    bindings {
      role: "role/buildbucket.triggerer"
      principals: "user:angle-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
    }
  }
  realms {
    name: "ci.shadow"
    bindings {
      role: "role/buildbucket.creator"
      principals: "group:chromium-led-users"
      principals: "group:mdb/chrome-build-access-sphinx"
      principals: "group:mdb/chrome-troopers"
      principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
    }
    bindings {
      role: "role/buildbucket.triggerer"
      principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
    }
    bindings {
      role: "role/resultdb.invocationCreator"
      principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
    }
    bindings {
      role: "role/buildbucket.builderServiceAccount"
      principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
    }
  }
  realms {
    name: "pools/ci"
  }
  realms {
    name: "pools/try"
  }
  realms {
    name: "try"
    bindings {
      role: "role/buildbucket.builderServiceAccount"
      principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
    }
    bindings {
      role: "role/buildbucket.triggerer"
      principals: "group:project-angle-tryjob-access"
      principals: "group:service-account-cq"
    }
  }
  realms {
    name: "try.shadow"
    bindings {
      role: "role/buildbucket.builderServiceAccount"
      principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
    }
    bindings {
      role: "role/buildbucket.creator"
      principals: "group:chromium-led-users"
      principals: "group:mdb/chrome-build-access-sphinx"
      principals: "group:mdb/chrome-troopers"
      principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
    }
    bindings {
      role: "role/buildbucket.triggerer"
      principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
    }
    bindings {
      role: "role/resultdb.invocationCreator"
      principals: "group:project-angle-try-task-accounts"
      principals: "group:project-angle-tryjob-access"
    }
  }
  

Download