blob: 5b6ce7624264df77a3bcd14830ec9e1155e65be4 [file] [log] [blame]
# Auto-generated by lucicfg.
# Do not modify manually.
#
# For the schema of this file, see RealmsCfg message:
# https://luci-config.appspot.com/schemas/projects:realms.cfg
realms {
name: "@root"
bindings {
role: "role/configs.reader"
principals: "group:all"
}
bindings {
role: "role/configs.validator"
principals: "group:project-chromium-try-task-accounts"
}
bindings {
role: "role/logdog.reader"
principals: "group:all"
}
bindings {
role: "role/logdog.writer"
principals: "group:luci-logdog-chromium-writers"
}
bindings {
role: "role/scheduler.owner"
principals: "group:project-chromium-admins"
}
bindings {
role: "role/scheduler.reader"
principals: "group:all"
}
bindings {
role: "role/swarming.poolOwner"
principals: "group:project-chromium-admins"
}
bindings {
role: "role/swarming.poolUser"
principals: "group:mdb/chrome-troopers"
}
bindings {
role: "role/swarming.poolViewer"
principals: "group:all"
}
bindings {
role: "role/swarming.taskServiceAccount"
principals: "group:project-chromium-test-task-accounts"
principals: "user:ios-isolated-tester@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:mdb/chrome-troopers"
}
bindings {
role: "role/weetbix.editor"
principals: "group:project-chromium-committers"
}
bindings {
role: "role/weetbix.queryUser"
principals: "group:authenticated-users"
}
bindings {
role: "role/weetbix.reader"
principals: "group:all"
}
}
realms {
name: "ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-build-perf-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-ci-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-cipd-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:component-mapping-updater@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:project-chromium-admins"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-ci-schedulers"
principals: "user:chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/resultdb.invocationCreator"
principals: "group:project-chromium-ci-task-accounts"
}
bindings {
role: "role/scheduler.triggerer"
principals: "group:project-chromium-scheduler-triggerers"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:findit-for-me@appspot.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
conditions {
restrict {
attribute: "scheduler.job.name"
values: "Android WebView M (dbg)"
values: "Android WebView N (dbg)"
values: "Android WebView O (dbg)"
values: "Android WebView P (dbg)"
values: "Linux ASan LSan Low Symbols FYI Tests (1)"
values: "Linux ASan LSan Tests (1)"
values: "Linux ASan Tests (sandboxed)"
values: "Linux Chromium OS ASan LSan Tests (1)"
values: "Linux ChromiumOS MSan Tests"
values: "Linux Debug (NVIDIA)"
values: "Linux MSan Tests"
values: "Linux Release (NVIDIA)"
values: "Linux TSan Tests"
values: "Linux Tests"
values: "Linux Tests (Wayland)"
values: "Linux Tests (dbg)(1)"
values: "Mac ASan 64 Tests (1)"
values: "Mac Debug (Intel)"
values: "Mac Release (Intel)"
values: "Mac Retina Debug (AMD)"
values: "Mac Retina Release (AMD)"
values: "Mac10.13 Tests"
values: "Mac10.14 Tests"
values: "Mac10.15 Tests"
values: "Mac11 Tests"
values: "Mac12 Tests"
values: "Mac12 Tests (dbg)"
values: "Mac12 Tests (py2 less)"
values: "Marshmallow 64 bit Tester"
values: "Marshmallow Tablet Tester"
values: "Nougat Phone Tester"
values: "Oreo Phone Tester"
values: "WebKit Win10"
values: "Win 7 Tests x64 (1)"
values: "Win10 Tests x64"
values: "Win10 Tests x64 (dbg)"
values: "Win10 Tests x64 (py2 less)"
values: "Win10 x64 Debug (NVIDIA)"
values: "Win10 x64 Release (NVIDIA)"
values: "Win11 Tests x64"
values: "Win7 (32) Tests"
values: "Win7 Tests (1)"
values: "android-12-x64-dbg-tests"
values: "android-12l-x86-rel"
values: "android-cronet-x86-dbg-10-tests"
values: "android-cronet-x86-dbg-11-tests"
values: "android-cronet-x86-dbg-lollipop-tests"
values: "android-cronet-x86-dbg-marshmallow-tests"
values: "android-cronet-x86-dbg-oreo-tests"
values: "android-cronet-x86-dbg-pie-tests"
values: "android-cronet-x86-rel-kitkat-tests"
values: "android-pie-arm64-dbg"
values: "android-weblayer-10-x86-rel-tests"
values: "android-weblayer-11-x86-rel-tests"
values: "android-weblayer-marshmallow-x86-rel-tests"
values: "android-weblayer-oreo-x86-rel-tests"
values: "android-weblayer-pie-x86-rel-tests"
values: "android-webview-10-x86-rel-tests"
values: "android-webview-12-x64-dbg-tests"
values: "linux-lacros-dbg-tests-fyi"
values: "linux-lacros-tester-fyi-rel"
values: "linux-lacros-tester-rel"
values: "mac-arm64-updater-tester-dbg"
values: "mac-arm64-updater-tester-rel"
values: "mac-osxbeta-rel"
values: "mac10.13-updater-tester-dbg"
values: "mac10.13-updater-tester-rel"
values: "mac10.14-updater-tester-dbg"
values: "mac10.14-updater-tester-rel"
values: "mac10.15-updater-tester-dbg"
values: "mac10.15-updater-tester-rel"
values: "mac11-arm64-rel-tests"
values: "mac11.0-updater-tester-dbg"
values: "mac11.0-updater-tester-rel"
values: "mac12-arm64-rel-tests"
values: "win-celab-tester-rel"
values: "win10-32-on-64-updater-tester-dbg"
values: "win10-updater-tester-dbg"
values: "win10-updater-tester-dbg-uac"
values: "win10-updater-tester-rel"
values: "win7(32)-updater-tester-rel"
values: "win7-updater-tester-rel"
}
}
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:chromium-ci-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
conditions {
restrict {
attribute: "scheduler.job.name"
values: "Android FYI Release (NVIDIA Shield TV)"
values: "Android FYI Release (Nexus 5)"
values: "Android FYI Release (Nexus 5X)"
values: "Android FYI Release (Pixel 2)"
values: "Android FYI Release (Pixel 4)"
values: "Android FYI Release (Pixel 6)"
values: "Dawn Linux x64 DEPS Release (Intel UHD 630)"
values: "Dawn Linux x64 DEPS Release (NVIDIA)"
values: "Dawn Linux x64 Release (Intel UHD 630)"
values: "Dawn Linux x64 Release (NVIDIA)"
values: "Dawn Mac x64 DEPS Release (AMD)"
values: "Dawn Mac x64 DEPS Release (Intel)"
values: "Dawn Mac x64 Experimental Release (AMD)"
values: "Dawn Mac x64 Experimental Release (Intel)"
values: "Dawn Mac x64 Release (AMD)"
values: "Dawn Mac x64 Release (Intel)"
values: "Dawn Win10 x64 DEPS Release (Intel HD 630)"
values: "Dawn Win10 x64 DEPS Release (NVIDIA)"
values: "Dawn Win10 x64 Release (Intel HD 630)"
values: "Dawn Win10 x64 Release (NVIDIA)"
values: "Dawn Win10 x86 DEPS Release (Intel HD 630)"
values: "Dawn Win10 x86 DEPS Release (NVIDIA)"
values: "Dawn Win10 x86 Release (Intel HD 630)"
values: "Dawn Win10 x86 Release (NVIDIA)"
values: "Lacros FYI x64 Release (AMD)"
values: "Lacros FYI x64 Release (Intel)"
values: "Linux FYI Debug (NVIDIA)"
values: "Linux FYI Experimental Release (Intel UHD 630)"
values: "Linux FYI Experimental Release (NVIDIA)"
values: "Linux FYI Release (AMD RX 5500 XT)"
values: "Linux FYI Release (Intel UHD 630)"
values: "Linux FYI Release (NVIDIA)"
values: "Mac FYI ASAN (Intel)"
values: "Mac FYI Debug (Intel)"
values: "Mac FYI Experimental Release (Apple M1)"
values: "Mac FYI Experimental Release (Intel)"
values: "Mac FYI Experimental Retina Release (AMD)"
values: "Mac FYI Experimental Retina Release (NVIDIA)"
values: "Mac FYI Release (Apple M1)"
values: "Mac FYI Release (Intel)"
values: "Mac FYI Retina ASAN (AMD)"
values: "Mac FYI Retina Debug (AMD)"
values: "Mac FYI Retina Debug (NVIDIA)"
values: "Mac FYI Retina Release (AMD)"
values: "Mac FYI Retina Release (NVIDIA)"
values: "Mac Pro FYI Release (AMD)"
values: "Win10 FYI x64 DX12 Vulkan Debug (NVIDIA)"
values: "Win10 FYI x64 DX12 Vulkan Release (NVIDIA)"
values: "Win10 FYI x64 Debug (NVIDIA)"
values: "Win10 FYI x64 Exp Release (Intel HD 630)"
values: "Win10 FYI x64 Exp Release (NVIDIA)"
values: "Win10 FYI x64 Release (AMD RX 5500 XT)"
values: "Win10 FYI x64 Release (Intel HD 630)"
values: "Win10 FYI x64 Release (NVIDIA)"
values: "Win10 FYI x64 Release XR Perf (NVIDIA)"
values: "Win10 FYI x86 Release (NVIDIA)"
values: "android-angle-chromium-arm64-nexus5x"
values: "ios-angle-intel"
values: "linux-angle-chromium-intel"
values: "linux-angle-chromium-nvidia"
values: "mac-angle-chromium-amd"
values: "mac-angle-chromium-intel"
values: "win10-angle-chromium-x64-intel"
values: "win10-angle-chromium-x64-nvidia"
}
}
}
}
realms {
name: "codesearch"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:service-account-chromium-tryserver"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-tryjob-access"
}
}
realms {
name: "findit"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:findit-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:googlers"
principals: "user:findit-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:findit-tryjob-access"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-findit-owners"
}
}
realms {
name: "flakiness"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:google/chrome-flakiness@google.com"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "goma"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:goma-release-testing@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:project-chromium-admins"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-ci-schedulers"
}
}
realms {
name: "infra"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-warmer@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-infra-schedulers"
}
}
realms {
name: "pools/ci"
bindings {
role: "role/swarming.poolUser"
principals: "project:chromium-m100"
principals: "project:chromium-m102"
principals: "project:chromium-m103"
principals: "project:chromium-m104"
principals: "project:chromium-m105"
principals: "project:chromium-m96"
principals: "project:chromium-m97"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:findit-for-me@appspot.gserviceaccount.com"
}
}
realms {
name: "pools/findit"
bindings {
role: "role/swarming.poolUser"
principals: "group:project-findit-owners"
}
}
realms {
name: "pools/tests"
bindings {
role: "role/swarming.poolUser"
principals: "group:project-angle-ci-task-accounts"
principals: "group:project-angle-try-task-accounts"
principals: "group:project-chromium-ci-task-accounts"
principals: "group:project-chromium-findit-task-accounts"
principals: "group:project-chromium-try-task-accounts"
principals: "group:project-chromium-tryjob-access"
principals: "group:project-devtools-frontend-ci-task-accounts"
principals: "group:project-devtools-frontend-try-task-accounts"
principals: "group:project-v8-ci-task-accounts"
principals: "group:project-v8-try-task-accounts"
principals: "group:project-webrtc-ci-task-accounts"
principals: "group:project-webrtc-try-task-accounts"
principals: "group:service-account-chromeperf"
principals: "user:chromium-swarm-bots@skia-swarming-bots.iam.gserviceaccount.com"
principals: "user:skia-external-ct-skps@skia-swarming-bots.iam.gserviceaccount.com"
}
}
realms {
name: "pools/tests-mac-arm64"
bindings {
role: "role/swarming.poolUser"
principals: "group:project-chromium-ci-task-accounts"
principals: "group:project-chromium-mac-arm64-tests-access"
principals: "group:project-v8-ci-task-accounts"
}
}
realms {
name: "pools/try"
bindings {
role: "role/swarming.poolUser"
principals: "group:chromium-led-users"
principals: "project:chromium-m100"
principals: "project:chromium-m102"
principals: "project:chromium-m103"
principals: "project:chromium-m104"
principals: "project:chromium-m105"
principals: "project:chromium-m96"
principals: "project:chromium-m97"
principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "pools/webrtc"
extends: "pools/ci"
bindings {
role: "role/swarming.poolUser"
principals: "group:project-webrtc-admins"
}
}
realms {
name: "public"
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/resultdb.invocationCreator"
principals: "group:project-chromium-tryjob-access"
}
}
realms {
name: "reclient"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-cq-staging-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:project-chromium-admins"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-ci-schedulers"
}
}
realms {
name: "reviver"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:reviver-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:project-chromium-admins"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:gbeaty@google.com"
}
}
realms {
name: "try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-cipd-try-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:service-account-chromium-tryserver"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-tryjob-access"
principals: "group:service-account-chromeperf"
principals: "group:service-account-cq"
principals: "project:angle"
principals: "project:dawn"
principals: "project:skia"
principals: "project:swiftshader"
principals: "project:v8"
principals: "user:findit-for-me@appspot.gserviceaccount.com"
principals: "user:tricium-prod@appspot.gserviceaccount.com"
}
bindings {
role: "role/resultdb.invocationCreator"
principals: "group:chromium-led-users"
principals: "group:project-chromium-try-task-accounts"
principals: "group:project-chromium-tryjob-access"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:chromium-led-users"
principals: "group:project-chromium-mac-arm64-tests-access"
principals: "group:project-chromium-tryjob-access"
principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "webrtc"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:project-chromium-admins"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-ci-schedulers"
}
bindings {
role: "role/resultdb.invocationCreator"
principals: "group:project-chromium-ci-task-accounts"
}
bindings {
role: "role/scheduler.owner"
principals: "group:project-webrtc-admins"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-webrtc-admins"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
conditions {
restrict {
attribute: "scheduler.job.name"
values: "WebRTC Chromium Android Tester"
values: "WebRTC Chromium Linux Tester"
values: "WebRTC Chromium Mac Tester"
values: "WebRTC Chromium Win10 Tester"
}
}
}
}
realms {
name: "webrtc.fyi"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:project-chromium-admins"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-ci-schedulers"
}
bindings {
role: "role/scheduler.owner"
principals: "group:project-webrtc-admins"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-webrtc-admins"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
conditions {
restrict {
attribute: "scheduler.job.name"
values: "WebRTC Chromium FYI Android Tests (dbg) (M Nexus5X)"
values: "WebRTC Chromium FYI Android Tests (dbg) (N Nexus5X)"
values: "WebRTC Chromium FYI Linux Tester"
values: "WebRTC Chromium FYI Mac Tester"
values: "WebRTC Chromium FYI Win10 Tester"
}
}
}
}