| # Auto-generated by lucicfg. |
| # Do not modify manually. |
| # |
| # For the schema of this file, see RealmsCfg message: |
| # https://config.luci.app/schemas/projects:realms.cfg |
| |
| realms { |
| name: "@project" |
| bindings { |
| role: "role/treestatus.limitedReader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/treestatus.reader" |
| principals: "group:googlers" |
| principals: "user:chromium-status-hr@appspot.gserviceaccount.com" |
| principals: "user:luci-bisection@appspot.gserviceaccount.com" |
| principals: "user:luci-notify@appspot.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/treestatus.writer" |
| principals: "group:googlers" |
| principals: "user:luci-bisection@appspot.gserviceaccount.com" |
| principals: "user:luci-notify@appspot.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "@root" |
| bindings { |
| role: "role/analysis.editor" |
| principals: "group:googlers" |
| principals: "group:project-chromium-committers" |
| } |
| bindings { |
| role: "role/analysis.queryUser" |
| principals: "group:authenticated-users" |
| } |
| bindings { |
| role: "role/analysis.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.healthUpdater" |
| principals: "user:generate-builder@cr-builder-health-indicators.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/configs.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/configs.validator" |
| principals: "group:project-chromium-ci-task-accounts" |
| principals: "group:project-chromium-try-task-accounts" |
| } |
| bindings { |
| role: "role/logdog.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/logdog.writer" |
| principals: "group:luci-logdog-chromium-writers" |
| } |
| bindings { |
| role: "role/resultdb.baselineReader" |
| principals: "group:project-chromium-try-task-accounts" |
| principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/resultdb.baselineWriter" |
| principals: "group:project-chromium-ci-task-accounts" |
| principals: "group:project-chromium-try-task-accounts" |
| principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:project-chromium-admins" |
| } |
| bindings { |
| role: "role/scheduler.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.poolOwner" |
| principals: "group:mdb/chrome-peep-fleet-operations-fte-team" |
| principals: "group:project-chromium-admins" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:mdb/chrome-browser-infra" |
| principals: "group:mdb/chrome-ops-browser-build-team" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "group:project-chromium-test-task-accounts" |
| principals: "user:ios-isolated-tester@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:mdb/chrome-browser-infra" |
| principals: "group:mdb/chrome-ops-browser-build-team" |
| } |
| } |
| realms { |
| name: "build" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-build-perf-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.owner" |
| principals: "group:mdb/chrome-ops-browser-build-team" |
| principals: "group:project-chromium-admins" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-chromium-ci-schedulers" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:project-chromium-ci-task-accounts" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:mdb/chrome-troopers" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "group:project-chromium-scheduler-triggerers" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| conditions { |
| restrict { |
| attribute: "scheduler.job.name" |
| values: "Mac Tests Siso FYI" |
| } |
| } |
| } |
| } |
| realms { |
| name: "build.shadow" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-build-perf-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:chromium-led-users" |
| principals: "group:mdb/chrome-build-access-sphinx" |
| principals: "group:mdb/chrome-troopers" |
| principals: "group:mdb/foundry-x-team" |
| } |
| } |
| realms { |
| name: "ci" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-automated-expectation@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-ci-gpu-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-cipd-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:component-mapping-updater@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.owner" |
| principals: "group:project-chromium-admins" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:mdb/bling-engprod" |
| principals: "group:mdb/chrome-active-sheriffs" |
| principals: "group:mdb/chrome-gpu" |
| principals: "group:mdb/clank-engprod" |
| principals: "group:project-chromium-ci-schedulers" |
| principals: "user:chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:project-chromium-ci-task-accounts" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:mdb/bling-engprod" |
| principals: "group:mdb/chrome-active-sheriffs" |
| principals: "group:mdb/chrome-gpu" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "group:project-chromium-scheduler-triggerers" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:mdb/chrome-build-access-sphinx" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:findit-for-me@appspot.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| conditions { |
| restrict { |
| attribute: "scheduler.job.name" |
| values: "Linux ASan LSan Tests (1)" |
| values: "Linux Chromium OS ASan LSan Tests (1)" |
| values: "Linux ChromiumOS MSan Tests" |
| values: "Linux Debug (NVIDIA)" |
| values: "Linux MSan Tests" |
| values: "Linux Release (NVIDIA)" |
| values: "Linux TSan Tests" |
| values: "Linux Tests" |
| values: "Linux Tests (dbg)(1)" |
| values: "Linux UBSan Tests" |
| values: "Mac ASan 64 Tests (1)" |
| values: "Mac Debug (Intel)" |
| values: "Mac Release (Intel)" |
| values: "Mac Retina Debug (AMD)" |
| values: "Mac Retina Release (AMD)" |
| values: "Mac Retina Release (Apple M2)" |
| values: "Mac13 Tests" |
| values: "WebKit Win10" |
| values: "Win10 Tests x64" |
| values: "Win10 Tests x64 (dbg)" |
| values: "Win10 Tests x86" |
| values: "Win10 x64 Debug (NVIDIA)" |
| values: "Win10 x64 Release (NVIDIA)" |
| values: "Win11 Tests x64" |
| values: "android-12-x64-dbg-tests" |
| values: "android-12l-landscape-x64-dbg-tests" |
| values: "android-12l-x64-dbg-tests" |
| values: "android-16-x64-dbg-tests" |
| values: "android-cronet-x64-dbg-12-tests" |
| values: "android-cronet-x64-dbg-13-tests" |
| values: "android-cronet-x64-dbg-14-tests" |
| values: "android-cronet-x64-dbg-15-tests" |
| values: "android-cronet-x64-dbg-16-tests" |
| values: "android-cronet-x86-dbg-10-tests" |
| values: "android-cronet-x86-dbg-11-tests" |
| values: "android-cronet-x86-dbg-nougat-tests" |
| values: "android-cronet-x86-dbg-oreo-tests" |
| values: "android-cronet-x86-dbg-pie-tests" |
| values: "android-desktop-x64-rel-15-tests" |
| values: "android-webview-10-x86-rel-tests" |
| values: "android-webview-12-x64-dbg-tests" |
| values: "android-webview-13-x64-dbg-tests" |
| values: "chromeos-amd64-generic-rel-gtest" |
| values: "linux-arm64-dbg-tests" |
| values: "linux-chromeos-no-initial-webui-rel" |
| values: "linux-enterprise-companion-tester-dbg" |
| values: "linux-enterprise-companion-tester-rel" |
| values: "linux-no-initial-webui-rel" |
| values: "linux-oi-rel" |
| values: "linux-updater-tester-dbg" |
| values: "linux-updater-tester-rel" |
| values: "linux-wayland-mutter-rel-tests" |
| values: "linux-wayland-weston-rel-tests" |
| values: "mac-fieldtrial-tester" |
| values: "mac-no-initial-webui-rel" |
| values: "mac13-arm64-enterprise-companion-tester-dbg" |
| values: "mac13-arm64-rel-tests" |
| values: "mac13-arm64-updater-tester-dbg" |
| values: "mac13-x64-enterprise-companion-tester-rel" |
| values: "mac13-x64-updater-tester-rel" |
| values: "mac14-arm64-enterprise-companion-tester-rel" |
| values: "mac14-arm64-rel-tests" |
| values: "mac14-arm64-updater-tester-dbg" |
| values: "mac14-arm64-updater-tester-rel" |
| values: "mac14-tests" |
| values: "mac14-x64-enterprise-companion-tester-asan-dbg" |
| values: "mac14-x64-updater-tester-dbg" |
| values: "mac14-x64-updater-tester-rel" |
| values: "mac15-arm64-rel-tests" |
| values: "mac15-arm64-updater-tester-dbg" |
| values: "mac15-arm64-updater-tester-rel" |
| values: "mac15-x64-rel-tests" |
| values: "mac15-x64-updater-tester-dbg" |
| values: "mac15-x64-updater-tester-rel" |
| values: "mac26-arm64-rel-tests" |
| values: "mac26-tests-dbg" |
| values: "mac26-x64-rel-tests" |
| values: "win10-32-on-64-enterprise-companion-tester-dbg" |
| values: "win10-32-on-64-enterprise-companion-tester-rel" |
| values: "win10-32-on-64-updater-tester-dbg" |
| values: "win10-32-on-64-updater-tester-rel" |
| values: "win10-enterprise-companion-tester-dbg" |
| values: "win10-enterprise-companion-tester-rel" |
| values: "win10-updater-tester-dbg" |
| values: "win10-updater-tester-dbg-uac" |
| values: "win10-updater-tester-rel" |
| values: "win10-updater-tester-rel-uac" |
| values: "win11-arm64-dbg-tests" |
| values: "win11-arm64-rel-tests" |
| values: "win11-arm64-updater-tester-dbg" |
| values: "win11-arm64-updater-tester-rel" |
| values: "win11-enterprise-companion-tester-rel" |
| values: "win11-updater-tester-dbg-uac" |
| values: "win11-updater-tester-rel" |
| values: "windows-no-initial-webui-rel" |
| } |
| } |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "user:chromium-ci-gpu-builder@chops-service-accounts.iam.gserviceaccount.com" |
| conditions { |
| restrict { |
| attribute: "scheduler.job.name" |
| values: "Android FYI Experimental Release (Pixel 11)" |
| values: "Android FYI Experimental Release (Pixel 6)" |
| values: "Android FYI Release (Pixel 10)" |
| values: "Android FYI Release (Pixel 2)" |
| values: "Android FYI Release (Pixel 4)" |
| values: "Android FYI Release (Pixel 6)" |
| values: "Android FYI Release (Samsung A13)" |
| values: "Android FYI Release (Samsung A23)" |
| values: "Android FYI Release (Samsung S23)" |
| values: "Dawn Android arm DEPS Release (Pixel 4)" |
| values: "Dawn Android arm Release (Pixel 4)" |
| values: "Dawn Android arm64 DEPS Release (Pixel 10)" |
| values: "Dawn Android arm64 DEPS Release (Pixel 6)" |
| values: "Dawn Android arm64 Experimental Release (Pixel 6)" |
| values: "Dawn Android arm64 Release (Pixel 10)" |
| values: "Dawn Android arm64 Release (Pixel 6)" |
| values: "Dawn Android arm64 Release (Samsung S24)" |
| values: "Dawn Linux x64 DEPS Release (Intel UHD 630)" |
| values: "Dawn Linux x64 DEPS Release (NVIDIA)" |
| values: "Dawn Linux x64 Experimental Release (Intel UHD 630)" |
| values: "Dawn Linux x64 Experimental Release (NVIDIA GTX 1660)" |
| values: "Dawn Linux x64 Release (Intel UHD 630)" |
| values: "Dawn Linux x64 Release (Intel UHD 770)" |
| values: "Dawn Linux x64 Release (NVIDIA)" |
| values: "Dawn Mac arm64 DEPS Release (Apple M2)" |
| values: "Dawn Mac arm64 Experimental Release (Apple M2)" |
| values: "Dawn Mac arm64 Release (Apple M2)" |
| values: "Dawn Mac x64 DEPS Release (AMD)" |
| values: "Dawn Mac x64 DEPS Release (Intel)" |
| values: "Dawn Mac x64 Experimental Release (AMD)" |
| values: "Dawn Mac x64 Experimental Release (Intel)" |
| values: "Dawn Mac x64 Release (AMD Radeon Pro 555X)" |
| values: "Dawn Mac x64 Release (AMD)" |
| values: "Dawn Mac x64 Release (Intel)" |
| values: "Dawn Win10 x64 ASAN Release (Intel)" |
| values: "Dawn Win10 x64 ASAN Release (NVIDIA)" |
| values: "Dawn Win10 x64 DEPS Release (Intel)" |
| values: "Dawn Win10 x64 DEPS Release (NVIDIA)" |
| values: "Dawn Win10 x64 Experimental Release (Intel)" |
| values: "Dawn Win10 x64 Experimental Release (NVIDIA)" |
| values: "Dawn Win10 x64 Release (Intel UHD 770)" |
| values: "Dawn Win10 x64 Release (Intel)" |
| values: "Dawn Win10 x64 Release (NVIDIA)" |
| values: "Dawn Win10 x86 DEPS Release (Intel)" |
| values: "Dawn Win10 x86 DEPS Release (NVIDIA)" |
| values: "Dawn Win10 x86 Experimental Release (Intel)" |
| values: "Dawn Win10 x86 Experimental Release (NVIDIA)" |
| values: "Dawn Win10 x86 Release (Intel)" |
| values: "Dawn Win10 x86 Release (NVIDIA)" |
| values: "Dawn Win11 arm64 DEPS Release (Qualcomm Snapdragon X Elite)" |
| values: "Dawn Win11 arm64 Release (Qualcomm Snapdragon X Elite)" |
| values: "Linux FYI Experimental Release (AMD 780M)" |
| values: "Linux FYI Experimental Release (AMD 890M)" |
| values: "Linux FYI Experimental Release (AMD RX 5500XT)" |
| values: "Linux FYI Experimental Release (AMD RX 9070XT)" |
| values: "Linux FYI Experimental Release (Intel UHD 630)" |
| values: "Linux FYI Experimental Release (NVIDIA RTX 5080)" |
| values: "Linux FYI Experimental Release (NVIDIA)" |
| values: "Linux FYI Release (AMD RX 5500 XT)" |
| values: "Linux FYI Release (AMD RX 7600)" |
| values: "Linux FYI Release (Intel UHD 630)" |
| values: "Linux FYI Release (Intel UHD 770)" |
| values: "Linux FYI Release (NVIDIA RTX 4070 Super)" |
| values: "Linux FYI Release (NVIDIA)" |
| values: "Linux Wayland FYI Release (AMD)" |
| values: "Mac FYI Debug (Intel)" |
| values: "Mac FYI Experimental Release (Apple M1)" |
| values: "Mac FYI Experimental Release (Intel)" |
| values: "Mac FYI Experimental Retina Release (AMD)" |
| values: "Mac FYI Experimental Retina Release (Apple M2)" |
| values: "Mac FYI Release (Apple M1)" |
| values: "Mac FYI Release (Intel)" |
| values: "Mac FYI Retina Debug (AMD)" |
| values: "Mac FYI Retina Release (AMD Radeon Pro 555X)" |
| values: "Mac FYI Retina Release (AMD)" |
| values: "Mac FYI Retina Release (Apple M2)" |
| values: "Mac FYI Retina Release (Apple M3)" |
| values: "Mac FYI Retina Release ASAN (Apple M2)" |
| values: "Win10 FYI x64 DX12 Vulkan Debug (NVIDIA)" |
| values: "Win10 FYI x64 DX12 Vulkan Release (NVIDIA)" |
| values: "Win10 FYI x64 Debug (NVIDIA)" |
| values: "Win10 FYI x64 Exp Release (NVIDIA)" |
| values: "Win10 FYI x64 Experimental Release (Intel)" |
| values: "Win10 FYI x64 Release (AMD RX 5500 XT)" |
| values: "Win10 FYI x64 Release (Intel UHD 770)" |
| values: "Win10 FYI x64 Release (Intel)" |
| values: "Win10 FYI x64 Release (NVIDIA)" |
| values: "Win10 FYI x64 Release XR Perf (NVIDIA)" |
| values: "Win10 FYI x86 Release (NVIDIA)" |
| values: "Win11 FYI arm64 Release (Qualcomm Snapdragon X Elite)" |
| values: "Win11 FYI x64 Experimental Release (AMD 780M)" |
| values: "Win11 FYI x64 Experimental Release (AMD 890M)" |
| values: "Win11 FYI x64 Experimental Release (AMD 9070XT)" |
| values: "Win11 FYI x64 Experimental Release (AMD RX 5500XT)" |
| values: "Win11 FYI x64 Experimental Release (NVIDIA RTX 4070 Super)" |
| values: "Win11 FYI x64 Experimental Release (NVIDIA RTX 5080)" |
| values: "Win11 FYI x64 Release (AMD RX 7600)" |
| values: "Win11 FYI x64 Release (NVIDIA RTX 4070 Super)" |
| values: "android-angle-chromium-arm64-pixel2" |
| values: "ios-angle-intel" |
| values: "ios-angle-m2" |
| values: "linux-angle-chromium-amd" |
| values: "linux-angle-chromium-intel" |
| values: "linux-angle-chromium-nvidia" |
| values: "mac-angle-chromium-amd" |
| values: "mac-angle-chromium-intel" |
| values: "win10-angle-chromium-x64-intel" |
| values: "win10-angle-chromium-x64-nvidia" |
| values: "win11-angle-chromium-arm64-qualcomm-snapdragonxelite" |
| } |
| } |
| } |
| } |
| realms { |
| name: "ci.shadow" |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:chromium-led-users" |
| principals: "group:mdb/chrome-build-access-sphinx" |
| principals: "group:mdb/chrome-troopers" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-cipd-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "codesearch" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-chromium-tryjob-access" |
| } |
| } |
| realms { |
| name: "findit" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:findit-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:googlers" |
| principals: "user:findit-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:findit-tryjob-access" |
| principals: "user:luci-scheduler@appspot.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:project-findit-owners" |
| } |
| } |
| realms { |
| name: "findit.shadow" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:findit-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:project-findit-owners" |
| } |
| } |
| realms { |
| name: "flaky-reproducer" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:flaky-reproducer-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.owner" |
| principals: "group:mdb/chrome-flakiness" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-chromium-tryjob-access" |
| } |
| } |
| realms { |
| name: "infra" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-autosharder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.owner" |
| principals: "group:project-chromium-admins" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-chromium-infra-schedulers" |
| principals: "user:chromium-autosharder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "group:project-chromium-infra-schedulers" |
| } |
| } |
| realms { |
| name: "infra.shadow" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:mdb/chrome-troopers" |
| principals: "group:mdb/pdeio-ds-team" |
| } |
| } |
| realms { |
| name: "pools/ci" |
| bindings { |
| role: "role/swarming.poolOwner" |
| principals: "group:mdb/chrome-infra-eng" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:mdb/chrome-build-access-sphinx" |
| principals: "project:angle" |
| principals: "project:chromium-m144" |
| principals: "project:chromium-m148" |
| principals: "project:chromium-m149" |
| principals: "project:chromium-m150" |
| principals: "project:chromium-m151" |
| principals: "project:chromium-m152" |
| principals: "project:chromium-m153" |
| principals: "project:chromium-m154" |
| principals: "project:dawn" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:findit-for-me@appspot.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "pools/findit" |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:project-findit-owners" |
| } |
| } |
| realms { |
| name: "pools/tests" |
| bindings { |
| role: "role/swarming.poolOwner" |
| principals: "group:mdb/chrome-infra-eng" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:project-angle-ci-task-accounts" |
| principals: "group:project-angle-try-task-accounts" |
| principals: "group:project-chromium-ci-task-accounts" |
| principals: "group:project-chromium-findit-task-accounts" |
| principals: "group:project-chromium-try-task-accounts" |
| principals: "group:project-chromium-tryjob-access" |
| principals: "group:project-dawn-ci-task-accounts" |
| principals: "group:project-dawn-try-task-accounts" |
| principals: "group:project-devtools-frontend-ci-task-accounts" |
| principals: "group:project-devtools-frontend-try-task-accounts" |
| principals: "group:project-v8-ci-task-accounts" |
| principals: "group:project-v8-try-task-accounts" |
| principals: "group:project-webrtc-ci-task-accounts" |
| principals: "group:project-webrtc-try-task-accounts" |
| principals: "group:service-account-chromeperf" |
| principals: "user:task-scheduler@skia-infra-public.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "pools/trusted-robots" |
| } |
| realms { |
| name: "pools/try" |
| bindings { |
| role: "role/swarming.poolOwner" |
| principals: "group:mdb/chrome-infra-eng" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:chromium-led-users" |
| principals: "group:mdb/chrome-build-access-sphinx" |
| principals: "project:angle" |
| principals: "project:chromium-infra" |
| principals: "project:chromium-m144" |
| principals: "project:chromium-m148" |
| principals: "project:chromium-m149" |
| principals: "project:chromium-m150" |
| principals: "project:chromium-m151" |
| principals: "project:chromium-m152" |
| principals: "project:chromium-m153" |
| principals: "project:chromium-m154" |
| principals: "project:dawn" |
| principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "pools/webrtc" |
| extends: "pools/ci" |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:project-webrtc-admins" |
| } |
| } |
| realms { |
| name: "public" |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:project-chromium-tryjob-access" |
| } |
| bindings { |
| role: "role/turboci.nodeReaderExternal" |
| principals: "group:all" |
| } |
| } |
| realms { |
| name: "reviver" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:reviver-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.owner" |
| principals: "group:project-chromium-admins" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "user:reviver-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "ssci" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-roller@chops-crowbar.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:mdb/chops-security-oncallers" |
| principals: "group:mdb/chrome-troopers" |
| } |
| bindings { |
| role: "role/scheduler.reader" |
| principals: "group:all" |
| } |
| } |
| realms { |
| name: "trusted.robots" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:lexan-swarming-prod@lexan-release-infra-prod.iam.gserviceaccount.com" |
| principals: "user:lexan-swarming-staging@lexan-release-infra-staging.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:googlers" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:mdb/chrome-troopers" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:mdb/chrome-troopers" |
| } |
| bindings { |
| role: "role/scheduler.reader" |
| principals: "group:googlers" |
| } |
| } |
| realms { |
| name: "try" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-cipd-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-chromium-tryjob-access" |
| principals: "group:service-account-chromeperf" |
| principals: "group:service-account-cq" |
| principals: "project:angle" |
| principals: "project:boringssl" |
| principals: "project:dawn" |
| principals: "project:infra" |
| principals: "project:skia" |
| principals: "project:swiftshader" |
| principals: "project:v8" |
| principals: "user:dawn-automated-expectations@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:dawn-scoped@luci-project-accounts.iam.gserviceaccount.com" |
| principals: "user:findit-for-me@appspot.gserviceaccount.com" |
| principals: "user:v8-scoped@luci-project-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:chromium-led-users" |
| principals: "group:project-chromium-try-task-accounts" |
| principals: "group:project-chromium-tryjob-access" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:chromium-led-users" |
| principals: "group:mdb/chrome-build-access-sphinx" |
| principals: "group:project-chromium-tryjob-access" |
| principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/turboci.nodeReaderExternal" |
| principals: "group:all" |
| } |
| } |
| realms { |
| name: "try.shadow" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-cipd-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:chromium-led-users" |
| principals: "group:mdb/chrome-build-access-sphinx" |
| principals: "group:mdb/chrome-troopers" |
| principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:project-chromium-try-task-accounts" |
| principals: "group:project-chromium-tryjob-access" |
| } |
| } |
| realms { |
| name: "webrtc" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:webrtc-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:project-webrtc-led-users" |
| } |
| bindings { |
| role: "role/buildbucket.owner" |
| principals: "group:project-chromium-admins" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-chromium-ci-schedulers" |
| principals: "group:project-webrtc-admins" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:project-chromium-ci-task-accounts" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:project-webrtc-admins" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:project-webrtc-admins" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:project-webrtc-admins" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| conditions { |
| restrict { |
| attribute: "scheduler.job.name" |
| values: "WebRTC Chromium Android Tester" |
| values: "WebRTC Chromium Linux Tester" |
| values: "WebRTC Chromium Mac Tester" |
| values: "WebRTC Chromium Win Tester" |
| } |
| } |
| } |
| } |
| realms { |
| name: "webrtc.fyi" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:webrtc-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:project-webrtc-led-users" |
| } |
| bindings { |
| role: "role/buildbucket.owner" |
| principals: "group:project-chromium-admins" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-chromium-ci-schedulers" |
| principals: "group:project-webrtc-admins" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:project-webrtc-admins" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:project-webrtc-admins" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:project-webrtc-admins" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| conditions { |
| restrict { |
| attribute: "scheduler.job.name" |
| values: "WebRTC Chromium FYI Android Tester" |
| values: "WebRTC Chromium FYI Linux Tester" |
| values: "WebRTC Chromium FYI Mac Tester" |
| values: "WebRTC Chromium FYI Win Tester" |
| } |
| } |
| } |
| } |
| realms { |
| name: "webrtc.fyi.shadow" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:webrtc-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:project-webrtc-led-users" |
| } |
| } |
