blob: 3769c50f01603bb21e1127bb271d88b926473dcb [file] [log] [blame]
# Auto-generated by lucicfg.
# Do not modify manually.
#
# For the schema of this file, see RealmsCfg message:
# https://luci-config.appspot.com/schemas/projects:realms.cfg
realms {
name: "@root"
bindings {
role: "role/configs.reader"
principals: "group:all"
}
bindings {
role: "role/logdog.reader"
principals: "group:all"
}
bindings {
role: "role/logdog.writer"
principals: "group:luci-logdog-chromium-writers"
}
bindings {
role: "role/scheduler.owner"
principals: "group:project-chromium-admins"
}
bindings {
role: "role/scheduler.reader"
principals: "group:all"
}
bindings {
role: "role/swarming.poolOwner"
principals: "group:project-chromium-admins"
}
bindings {
role: "role/swarming.poolUser"
principals: "group:google/luci-task-force@google.com"
principals: "group:mdb/chrome-troopers"
}
bindings {
role: "role/swarming.poolViewer"
principals: "group:all"
}
bindings {
role: "role/swarming.taskServiceAccount"
principals: "group:project-chromium-test-task-accounts"
principals: "user:ios-isolated-tester@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:google/luci-task-force@google.com"
principals: "group:mdb/chrome-troopers"
}
}
realms {
name: "ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-ci-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-cipd-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:component-mapping-updater@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:google/luci-task-force@google.com"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-ci-schedulers"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:findit-for-me@appspot.gserviceaccount.com"
}
}
realms {
name: "codesearch"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:service-account-chromium-tryserver"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-tryjob-access"
}
}
realms {
name: "findit"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:findit-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:googlers"
principals: "user:findit-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:findit-tryjob-access"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-findit-owners"
}
}
realms {
name: "goma"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:goma-release-testing@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:google/luci-task-force@google.com"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-ci-schedulers"
}
}
realms {
name: "pools/ci"
bindings {
role: "role/swarming.poolUser"
principals: "project:chromium-m86"
principals: "project:chromium-m88"
principals: "project:chromium-m89"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:findit-for-me@appspot.gserviceaccount.com"
}
}
realms {
name: "pools/findit"
bindings {
role: "role/swarming.poolUser"
principals: "group:project-findit-owners"
}
}
realms {
name: "pools/tests"
bindings {
role: "role/swarming.poolUser"
principals: "group:project-chromium-ci-task-accounts"
principals: "group:project-chromium-findit-task-accounts"
principals: "group:project-chromium-try-task-accounts"
principals: "group:project-chromium-tryjob-access"
principals: "group:project-devtools-frontend-ci-task-accounts"
principals: "group:project-devtools-frontend-try-task-accounts"
principals: "group:project-v8-ci-task-accounts"
principals: "group:project-v8-try-task-accounts"
principals: "group:project-webrtc-ci-task-accounts"
principals: "group:project-webrtc-try-task-accounts"
principals: "group:service-account-chromeperf"
principals: "user:chromium-swarm-bots@skia-swarming-bots.iam.gserviceaccount.com"
principals: "user:skia-external-ct-skps@skia-swarming-bots.iam.gserviceaccount.com"
}
}
realms {
name: "pools/tests-mac-arm64"
bindings {
role: "role/swarming.poolUser"
principals: "group:project-chromium-ci-task-accounts"
principals: "group:project-chromium-mac-arm64-tests-access"
}
}
realms {
name: "pools/try"
bindings {
role: "role/swarming.poolUser"
principals: "group:chromium-led-users"
principals: "project:chromium-m86"
principals: "project:chromium-m88"
principals: "project:chromium-m89"
principals: "user:infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "public"
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/resultdb.invocationCreator"
principals: "group:project-chromium-tryjob-access"
}
}
realms {
name: "try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-cipd-try-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:service-account-chromium-tryserver"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-tryjob-access"
principals: "group:service-account-chromeperf"
principals: "group:service-account-cq"
principals: "project:angle"
principals: "project:dawn"
principals: "project:skia"
principals: "project:swiftshader"
principals: "project:v8"
principals: "user:findit-for-me@appspot.gserviceaccount.com"
principals: "user:tricium-prod@appspot.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:chromium-led-users"
principals: "group:project-chromium-mac-arm64-tests-access"
principals: "group:project-chromium-tryjob-access"
principals: "user:infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "webrtc"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:google/luci-task-force@google.com"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-ci-schedulers"
}
bindings {
role: "role/scheduler.owner"
principals: "group:project-webrtc-admins"
}
}
realms {
name: "webrtc.fyi"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:google/luci-task-force@google.com"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-ci-schedulers"
}
bindings {
role: "role/scheduler.owner"
principals: "group:project-webrtc-admins"
}
}