blob: c7c90d284b0e6eadfd1021faca544558d6630d2b [file] [log] [blame]
# Auto-generated by lucicfg.
# Do not modify manually.
#
# For the schema of this file, see RealmsCfg message:
# https://luci-config.appspot.com/schemas/projects:realms.cfg
realms {
name: "@root"
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/configs.reader"
principals: "group:all"
}
bindings {
role: "role/configs.validator"
principals: "user:infra-try-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/cq.committer"
principals: "group:project-infra-committers"
}
bindings {
role: "role/cq.dryRunner"
principals: "group:project-infra-tryjob-access"
}
bindings {
role: "role/logdog.reader"
principals: "group:all"
}
bindings {
role: "role/logdog.writer"
principals: "group:luci-logdog-chromium-writers"
}
bindings {
role: "role/scheduler.owner"
principals: "group:project-infra-committers"
}
bindings {
role: "role/scheduler.reader"
principals: "group:all"
}
}
realms {
name: "ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:infra-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:flex-ci-led-users"
}
}
realms {
name: "codesearch"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:infra-codesearch@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:mdb/chrome-ops-source"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:google/luci-task-force@google.com"
principals: "group:mdb/chrome-troopers"
}
}
realms {
name: "cron"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-lkgr-finder-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-tarball-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:wpt-autoroller@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:cros-flash@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:mdb/chrome-troopers"
}
}
realms {
name: "pools/codesearch"
bindings {
role: "role/swarming.poolUser"
principals: "group:google/luci-task-force@google.com"
principals: "group:mdb/chrome-troopers"
}
}
realms {
name: "pools/cron"
bindings {
role: "role/swarming.poolUser"
principals: "group:mdb/chrome-troopers"
}
}
realms {
name: "try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:infra-try-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-infra-tryjob-access"
principals: "group:service-account-cq"
principals: "user:tricium-dev@appspot.gserviceaccount.com"
principals: "user:tricium-prod@appspot.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:flex-try-led-users"
}
}