# Auto-generated by lucicfg.
# Do not modify manually.
#
# For the schema of this file, see RealmsCfg message:
#   https://luci-config.appspot.com/schemas/projects:realms.cfg

realms {
  name: "@root"
  bindings {
    role: "role/configs.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/configs.validator"
    principals: "group:project-chromium-try-task-accounts"
  }
  bindings {
    role: "role/logdog.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/logdog.writer"
    principals: "group:luci-logdog-chromium-writers"
  }
  bindings {
    role: "role/scheduler.owner"
    principals: "group:project-chromium-admins"
  }
  bindings {
    role: "role/scheduler.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "group:project-chromium-test-task-accounts"
    principals: "user:ios-isolated-tester@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "group:mdb/chrome-troopers"
  }
}
realms {
  name: "ci"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
    principals: "user:chromium-ci-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.owner"
    principals: "group:project-chromium-admins"
  }
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:project-chromium-ci-schedulers"
    principals: "user:chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/resultdb.invocationCreator"
    principals: "group:project-chromium-ci-task-accounts"
  }
  bindings {
    role: "role/scheduler.triggerer"
    principals: "group:project-chromium-scheduler-triggerers"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
    principals: "user:findit-for-me@appspot.gserviceaccount.com"
  }
  bindings {
    role: "role/scheduler.triggerer"
    principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
    conditions {
      restrict {
        attribute: "scheduler.job.name"
        values: "Android WebView M (dbg)"
        values: "Android WebView N (dbg)"
        values: "Android WebView O (dbg)"
        values: "Android WebView P (dbg)"
        values: "Linux ASan LSan Tests (1)"
        values: "Linux ASan Tests (sandboxed)"
        values: "Linux Release (NVIDIA)"
        values: "Linux TSan Tests"
        values: "Linux Tests"
        values: "Linux Tests (Wayland)"
        values: "Linux Tests (dbg)(1)"
        values: "Mac Release (Intel)"
        values: "Mac Retina Release (AMD)"
        values: "Mac10.11 Tests"
        values: "Mac10.12 Tests"
        values: "Mac10.13 Tests"
        values: "Mac10.14 Tests"
        values: "Mac10.15 Tests"
        values: "Mac11 Tests"
        values: "Mac11 Tests (dbg)"
        values: "Marshmallow 64 bit Tester"
        values: "Nougat Phone Tester"
        values: "Oreo Phone Tester"
        values: "Win 7 Tests x64 (1)"
        values: "Win10 Tests x64"
        values: "Win10 x64 Release (NVIDIA)"
        values: "Win7 Tests (1)"
        values: "android-cronet-x86-dbg-10-tests"
        values: "android-pie-arm64-dbg"
        values: "linux-lacros-tester-rel"
        values: "mac11-arm64-rel-tests"
      }
    }
  }
  bindings {
    role: "role/scheduler.triggerer"
    principals: "user:chromium-ci-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
    conditions {
      restrict {
        attribute: "scheduler.job.name"
        values: "Dawn Linux x64 DEPS Release (Intel HD 630)"
        values: "Dawn Linux x64 DEPS Release (NVIDIA)"
        values: "Dawn Mac x64 DEPS Release (AMD)"
        values: "Dawn Mac x64 DEPS Release (Intel)"
        values: "Dawn Win10 x64 DEPS Release (Intel HD 630)"
        values: "Dawn Win10 x64 DEPS Release (NVIDIA)"
        values: "Dawn Win10 x86 DEPS Release (Intel HD 630)"
        values: "Dawn Win10 x86 DEPS Release (NVIDIA)"
      }
    }
  }
}
realms {
  name: "infra"
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:project-chromium-infra-schedulers"
  }
}
realms {
  name: "public"
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/resultdb.invocationCreator"
    principals: "group:project-chromium-tryjob-access"
  }
}
realms {
  name: "try"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com"
    principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com"
    principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.owner"
    principals: "group:service-account-chromium-tryserver"
  }
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:project-chromium-tryjob-access"
    principals: "group:service-account-chromeperf"
    principals: "group:service-account-cq"
    principals: "user:findit-for-me@appspot.gserviceaccount.com"
    principals: "user:tricium-prod@appspot.gserviceaccount.com"
  }
  bindings {
    role: "role/resultdb.invocationCreator"
    principals: "group:project-chromium-try-task-accounts"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "group:chromium-led-users"
    principals: "group:project-chromium-mac-arm64-tests-access"
    principals: "group:project-chromium-tryjob-access"
    principals: "user:infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com"
  }
}
realms {
  name: "webrtc"
  bindings {
    role: "role/resultdb.invocationCreator"
    principals: "group:project-chromium-ci-task-accounts"
  }
}