| # Auto-generated by lucicfg. |
| # Do not modify manually. |
| # |
| # For the schema of this file, see RealmsCfg message: |
| # https://config.luci.app/schemas/projects:realms.cfg |
| |
| realms { |
| name: "@project" |
| bindings { |
| role: "role/treestatus.limitedReader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/treestatus.reader" |
| principals: "group:googlers" |
| principals: "user:chromium-status-hr@appspot.gserviceaccount.com" |
| principals: "user:luci-notify@appspot.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/treestatus.writer" |
| principals: "group:googlers" |
| principals: "user:luci-notify@appspot.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "@root" |
| bindings { |
| role: "role/analysis.editor" |
| principals: "group:googlers" |
| principals: "group:project-chromium-committers" |
| } |
| bindings { |
| role: "role/analysis.queryUser" |
| principals: "group:authenticated-users" |
| } |
| bindings { |
| role: "role/analysis.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.healthUpdater" |
| principals: "user:generate-builder@cr-builder-health-indicators.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/configs.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/configs.validator" |
| principals: "group:project-chromium-ci-task-accounts" |
| principals: "group:project-chromium-try-task-accounts" |
| } |
| bindings { |
| role: "role/logdog.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/logdog.writer" |
| principals: "group:luci-logdog-chromium-writers" |
| } |
| bindings { |
| role: "role/resultdb.baselineReader" |
| principals: "group:project-chromium-try-task-accounts" |
| principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/resultdb.baselineWriter" |
| principals: "group:project-chromium-ci-task-accounts" |
| principals: "group:project-chromium-try-task-accounts" |
| principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:project-chromium-admins" |
| } |
| bindings { |
| role: "role/scheduler.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "group:project-chromium-test-task-accounts" |
| principals: "user:ios-isolated-tester@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:mdb/chrome-browser-infra" |
| } |
| } |
| realms { |
| name: "build" |
| bindings { |
| role: "role/buildbucket.owner" |
| principals: "group:mdb/chrome-ops-browser-build-team" |
| principals: "group:project-chromium-admins" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-chromium-ci-schedulers" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:project-chromium-ci-task-accounts" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:mdb/chrome-troopers" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "group:project-chromium-scheduler-triggerers" |
| } |
| } |
| realms { |
| name: "build.shadow" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-build-perf-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:chromium-led-users" |
| principals: "group:mdb/chrome-build-access-sphinx" |
| principals: "group:mdb/chrome-troopers" |
| principals: "group:mdb/foundry-x-team" |
| } |
| } |
| realms { |
| name: "ci" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.owner" |
| principals: "group:project-chromium-admins" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:mdb/bling-engprod" |
| principals: "group:mdb/chrome-active-sheriffs" |
| principals: "group:mdb/chrome-gpu" |
| principals: "group:mdb/clank-engprod" |
| principals: "group:project-chromium-ci-schedulers" |
| principals: "user:chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:project-chromium-ci-task-accounts" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:mdb/bling-engprod" |
| principals: "group:mdb/chrome-active-sheriffs" |
| principals: "group:mdb/chrome-gpu" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "group:project-chromium-scheduler-triggerers" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:mdb/chrome-build-access-sphinx" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:findit-for-me@appspot.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com" |
| conditions { |
| restrict { |
| attribute: "scheduler.job.name" |
| values: "chromeos-amd64-generic-rel-gtest" |
| values: "chromeos-amd64-generic-rel-tast" |
| } |
| } |
| } |
| } |
| realms { |
| name: "ci.shadow" |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:chromium-led-users" |
| principals: "group:mdb/chrome-build-access-sphinx" |
| principals: "group:mdb/chrome-troopers" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "infra" |
| bindings { |
| role: "role/buildbucket.owner" |
| principals: "group:project-chromium-admins" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-chromium-infra-schedulers" |
| principals: "user:chromium-autosharder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "group:project-chromium-infra-schedulers" |
| } |
| } |
| realms { |
| name: "infra.shadow" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:mdb/chrome-troopers" |
| } |
| } |
| realms { |
| name: "public" |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:project-chromium-tryjob-access" |
| } |
| } |
| realms { |
| name: "try" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-chromium-tryjob-access" |
| principals: "group:service-account-chromeperf" |
| principals: "group:service-account-cq" |
| principals: "user:dawn-automated-expectations@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:findit-for-me@appspot.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:chromium-led-users" |
| principals: "group:project-chromium-try-task-accounts" |
| principals: "group:project-chromium-tryjob-access" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:chromium-led-users" |
| principals: "group:mdb/chrome-build-access-sphinx" |
| principals: "group:project-chromium-tryjob-access" |
| principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "try.shadow" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:chromium-cipd-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:chromium-led-users" |
| principals: "group:mdb/chrome-build-access-sphinx" |
| principals: "group:mdb/chrome-troopers" |
| principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| principals: "user:infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:project-chromium-try-task-accounts" |
| principals: "group:project-chromium-tryjob-access" |
| } |
| } |
| realms { |
| name: "webrtc" |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:project-chromium-ci-task-accounts" |
| } |
| } |
