coffee/libyuv
1
0
Fork 0
mirror of https://chromium.googlesource.com/libyuv/libyuv synced 2025-12-06 16:56:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix led failing due to service account disallowed

Browse Source 
Follow-up to https://crrev.com/c/7046060.
Comparing the files below, we see the issue's root cause.

https://source.chromium.org/chromium/chromium/src/+/main:third_party/libyuv/infra/config/cr-buildbucket.cfg;l=607-620;drc=110e00ea9693e9feed3f6bb49cf7a9497440bca1
https://source.chromium.org/chromium/chromium/src/+/main:third_party/angle/infra/config/generated/cr-buildbucket.cfg;l=2143-2154;drc=722572ab69816657492c1155dad7f99e3e2629ea

Bug: None
Change-Id: Iaf339950db4e8b414719057ae81ba5b850f0aace
Reviewed-on: https://chromium-review.googlesource.com/c/libyuv/libyuv/+/7050097
Reviewed-by: Wan-Teh Chang <wtc@google.com>
Reviewed-by: Jeremy Leconte <jleconte@google.com>
Reviewed-by: Frank Barchard <fbarchard@chromium.org>
This commit is contained in:
Victor Hugo Vianna Silva 2025-10-16 18:26:02 +01:00 committed by Frank Barchard
parent cd42708dac
commit 28ebe5d0b0
3 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
infra/config/cr-buildbucket.cfg
View File

@ -615,6 +615,7 @@ buckets {
} }
constraints { constraints {
pools: "luci.flex.ci" pools: "luci.flex.ci"
service_accounts: "libyuv-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
} }
dynamic_builder_template {} dynamic_builder_template {}
} }
@ -1173,6 +1174,7 @@ buckets {
} }
constraints { constraints {
pools: "luci.flex.try" pools: "luci.flex.try"
service_accounts: "libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com"
} }
dynamic_builder_template {} dynamic_builder_template {}
} }

6
infra/config/main.star
View File

@ -177,6 +177,9 @@ luci.bucket(
shadows = "ci", shadows = "ci",
constraints = luci.bucket_constraints( constraints = luci.bucket_constraints(
pools = ["luci.flex.ci"], pools = ["luci.flex.ci"],
service_accounts = [
"libyuv-ci-builder@chops-service-accounts.iam.gserviceaccount.com",
],
), ),
bindings = [ bindings = [
# For led permissions. # For led permissions.
@ -212,6 +215,9 @@ luci.bucket(
shadows = "try", shadows = "try",
constraints = luci.bucket_constraints( constraints = luci.bucket_constraints(
pools = ["luci.flex.try"], pools = ["luci.flex.try"],
service_accounts = [
"libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com",
],
), ),
bindings = [ bindings = [
# For led permissions. # For led permissions.

8
infra/config/realms.cfg
View File

@ -64,6 +64,10 @@ realms {
} }
realms { realms {
name: "ci.shadow" name: "ci.shadow"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:libyuv-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings { bindings {
role: "role/buildbucket.creator" role: "role/buildbucket.creator"
principals: "group:chromium-led-users" principals: "group:chromium-led-users"
@ -93,6 +97,10 @@ realms {
} }
realms { realms {
name: "try.shadow" name: "try.shadow"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings { bindings {
role: "role/buildbucket.creator" role: "role/buildbucket.creator"
principals: "group:chromium-led-users" principals: "group:chromium-led-users"