Hash :
32ed5069
Author :
Date :
2021-05-03T17:08:02
infra: init LUCI Realms config for Angle. This doesn't yet have any effect on Angle builds/tasks, but allows to associate Angle pools with the Realms config in https://crrev.com/i/3802849 Change-Id: Id756c14e7e181cc1820cee735668949bf9567d0c Bug: chromium:1204972 No-Try: true Reviewed-on: https://chromium-review.googlesource.com/c/angle/angle/+/2867082 Commit-Queue: Andrii Shyshkalov <tandrii@google.com> Reviewed-by: Jamie Madill <jmadill@chromium.org>
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86
# Auto-generated by lucicfg.
# Do not modify manually.
#
# For the schema of this file, see RealmsCfg message:
# https://luci-config.appspot.com/schemas/projects:realms.cfg
realms {
name: "@root"
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/configs.reader"
principals: "group:all"
}
bindings {
role: "role/logdog.reader"
principals: "group:all"
}
bindings {
role: "role/logdog.writer"
principals: "group:luci-logdog-angle-writers"
}
bindings {
role: "role/scheduler.owner"
principals: "group:project-angle-admins"
}
bindings {
role: "role/scheduler.reader"
principals: "group:all"
}
bindings {
role: "role/swarming.poolOwner"
principals: "group:mdb/chrome-troopers"
principals: "group:project-angle-owners"
}
bindings {
role: "role/swarming.poolUser"
principals: "group:mdb/chrome-troopers"
principals: "group:project-angle-owners"
}
bindings {
role: "role/swarming.poolViewer"
principals: "group:all"
}
bindings {
role: "role/swarming.taskServiceAccount"
principals: "user:chrome-gpu-gold@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-tester@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:mdb/chrome-troopers"
principals: "group:project-angle-owners"
}
}
realms {
name: "ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:angle-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:angle-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "pools/ci"
}
realms {
name: "pools/try"
}
realms {
name: "try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-angle-tryjob-access"
principals: "group:service-account-cq"
}
}