[bhi] Configure builder health updater permissions

Bug: 1401558
Change-Id: Iffbdf05c59a49ad318a232b72ebe9d60141b24b7
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4573300
Reviewed-by: Gary Tong <gatong@chromium.org>
Auto-Submit: Gregory Guterman <guterman@google.com>
Commit-Queue: Gregory Guterman <guterman@google.com>
Cr-Commit-Position: refs/heads/main@{#1152732}

infra/config/generated/luci/realms.cfg

diff --git a/infra/config/generated/luci/realms.cfg b/infra/config/generated/luci/realms.cfg
index 6b49056..441e1fe1 100644
--- a/infra/config/generated/luci/realms.cfg
+++ b/infra/config/generated/luci/realms.cfg
@@ -20,6 +20,11 @@
     principals: "group:all"
   }
   bindings {
+    role: "role/buildbucket.healthUpdater"
+    principals: "user:generate-builder@cr-builder-health-indicators.iam.gserviceaccount.com"
+    principals: "user:guterman@google.com"
+  }
+  bindings {
     role: "role/configs.reader"
     principals: "group:all"
   }

infra/config/main.star

diff --git a/infra/config/main.star b/infra/config/main.star
index 7297a7c..426fc5d2 100755
--- a/infra/config/main.star
+++ b/infra/config/main.star
@@ -114,6 +114,11 @@
             roles = "role/analysis.editor",
             groups = ["project-chromium-committers", "googlers"],
         ),
+        # Role for builder health indicators
+        luci.binding(
+            roles = "role/buildbucket.healthUpdater",
+            users = ["guterman@google.com", "generate-builder@cr-builder-health-indicators.iam.gserviceaccount.com"],
+        ),
     ],
 )