blob: f41ce9cb50fbab129d8950683f46286eeaa50786 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
# Auto-generated by lucicfg.
# Do not modify manually.
#
# For the schema of this file, see RealmsCfg message:
# https://luci-config.appspot.com/schemas/projects:realms.cfg
realms {
name: "@root"
bindings {
role: "role/configs.reader"
principals: "group:all"
}
bindings {
role: "role/logdog.reader"
principals: "group:all"
}
bindings {
role: "role/logdog.writer"
principals: "group:luci-logdog-chromium-writers"
}
bindings {
role: "role/scheduler.owner"
principals: "group:project-chromium-admins"
}
bindings {
role: "role/scheduler.reader"
principals: "group:all"
}
bindings {
role: "role/swarming.taskServiceAccount"
principals: "group:project-chromium-test-task-accounts"
principals: "user:ios-isolated-tester@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:google/luci-task-force@google.com"
principals: "group:mdb/chrome-troopers"
}
}
realms {
name: "ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-ci-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:google/luci-task-force@google.com"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-ci-schedulers"
principals: "user:chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/resultdb.invocationCreator"
principals: "group:project-chromium-ci-task-accounts"
}
bindings {
role: "role/scheduler.triggerer"
principals: "group:project-chromium-scheduler-triggerers"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:findit-for-me@appspot.gserviceaccount.com"
}
}
realms {
name: "public"
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/resultdb.invocationCreator"
principals: "group:project-chromium-tryjob-access"
}
}
realms {
name: "try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:chromium-orchestrator@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com"
principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.owner"
principals: "group:service-account-chromium-tryserver"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-chromium-tryjob-access"
principals: "group:service-account-chromeperf"
principals: "group:service-account-cq"
principals: "user:findit-for-me@appspot.gserviceaccount.com"
principals: "user:tricium-prod@appspot.gserviceaccount.com"
}
bindings {
role: "role/resultdb.invocationCreator"
principals: "group:project-chromium-try-task-accounts"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:chromium-led-users"
principals: "group:project-chromium-mac-arm64-tests-access"
principals: "group:project-chromium-tryjob-access"
principals: "user:infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "webrtc"
bindings {
role: "role/resultdb.invocationCreator"
principals: "group:project-chromium-ci-task-accounts"
}
}
|
