realms.cfg 2.1 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283
  1. # Auto-generated by lucicfg.
  2. # Do not modify manually.
  3. #
  4. # For the schema of this file, see RealmsCfg message:
  5. # https://config.luci.app/schemas/projects:realms.cfg
  6. realms {
  7. name: "@root"
  8. bindings {
  9. role: "role/buildbucket.owner"
  10. principals: "group:project-libyuv-admins"
  11. }
  12. bindings {
  13. role: "role/buildbucket.reader"
  14. principals: "group:all"
  15. }
  16. bindings {
  17. role: "role/configs.reader"
  18. principals: "group:all"
  19. }
  20. bindings {
  21. role: "role/configs.validator"
  22. principals: "user:libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com"
  23. }
  24. bindings {
  25. role: "role/logdog.reader"
  26. principals: "group:all"
  27. }
  28. bindings {
  29. role: "role/logdog.writer"
  30. principals: "group:luci-logdog-chromium-writers"
  31. }
  32. bindings {
  33. role: "role/scheduler.owner"
  34. principals: "group:project-libyuv-admins"
  35. }
  36. bindings {
  37. role: "role/scheduler.reader"
  38. principals: "group:all"
  39. }
  40. bindings {
  41. role: "role/swarming.taskTriggerer"
  42. principals: "group:project-libyuv-admins"
  43. }
  44. }
  45. realms {
  46. name: "ci"
  47. bindings {
  48. role: "role/buildbucket.builderServiceAccount"
  49. principals: "user:[email protected]"
  50. }
  51. bindings {
  52. role: "role/scheduler.triggerer"
  53. principals: "user:[email protected]"
  54. conditions {
  55. restrict {
  56. attribute: "scheduler.job.name"
  57. values: "Android Tester ARM32 Debug (Nexus 5X)"
  58. values: "Android Tester ARM32 Release (Nexus 5X)"
  59. values: "Android Tester ARM64 Debug (Nexus 5X)"
  60. }
  61. }
  62. }
  63. }
  64. realms {
  65. name: "cron"
  66. bindings {
  67. role: "role/buildbucket.builderServiceAccount"
  68. principals: "user:libyuv-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com"
  69. }
  70. }
  71. realms {
  72. name: "try"
  73. bindings {
  74. role: "role/buildbucket.builderServiceAccount"
  75. principals: "user:libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com"
  76. }
  77. bindings {
  78. role: "role/buildbucket.triggerer"
  79. principals: "group:project-libyuv-tryjob-access"
  80. principals: "group:service-account-cq"
  81. }
  82. }