coffee/libyuv
1
0
Fork 0
mirror of https://chromium.googlesource.com/libyuv/libyuv synced 2025-12-07 01:06:46 +08:00
Code Issues Packages Projects Releases Wiki Activity

Allow use of led via http://go/ciba

Browse Source 
Users who have the "Chrome Build Access" in go/ciba can now use the
`led` CLI on libyuv bots. No-Try because the mac-asan bot is busted.

I will use this to test the CL below ahead of submission.
https://chromium-review.googlesource.com/c/libyuv/libyuv/+/7043382

No-Try: True
Change-Id: I33b488406f342fac4ff33d02e2c70cef2e50233c
This commit is contained in:
Victor Hugo Vianna Silva 2025-10-15 17:46:28 +01:00 committed by Victor Vianna
parent 613393324f
commit 37963c1ec0
3 changed files with 90 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
infra/config/cr-buildbucket.cfg
View File

@ -599,10 +599,25 @@ buckets {
service_account: "libyuv-ci-builder@chops-service-accounts.iam.gserviceaccount.com" service_account: "libyuv-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
} }
} }
shadow: "ci.shadow"
constraints { constraints {
pools: "luci.flex.ci" pools: "luci.flex.ci"
} }
} }
buckets {
name: "ci.shadow"
acls {
role: WRITER
group: "project-libyuv-admins"
}
acls {
group: "all"
}
constraints {
pools: "luci.flex.ci"
}
dynamic_builder_template {}
}
buckets { buckets {
name: "cron" name: "cron"
acls { acls {
@ -1141,8 +1156,23 @@ buckets {
service_account: "libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com" service_account: "libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com"
} }
} }
shadow: "try.shadow"
constraints { constraints {
pools: "luci.flex.try" pools: "luci.flex.try"
service_accounts: "libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com" service_accounts: "libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com"
} }
} }
buckets {
name: "try.shadow"
acls {
role: WRITER
group: "project-libyuv-admins"
}
acls {
group: "all"
}
constraints {
pools: "luci.flex.try"
}
dynamic_builder_template {}
}

40
infra/config/main.star
View File

@ -172,6 +172,26 @@ luci.bucket(
pools = ["luci.flex.ci"], pools = ["luci.flex.ci"],
), ),
) )
luci.bucket(
name = "ci.shadow",
shadows = "ci",
constraints = luci.bucket_constraints(
pools = ["luci.flex.ci"],
),
bindings = [
# For led permissions.
luci.binding(
roles = "role/buildbucket.creator",
groups = [
"chromium-led-users",
"mdb/chrome-build-access-sphinx",
"mdb/chrome-troopers",
"mdb/foundry-x-team",
],
),
],
dynamic = True,
)
luci.bucket( luci.bucket(
name = "try", name = "try",
acls = [ acls = [
@ -187,6 +207,26 @@ luci.bucket(
], ],
), ),
) )
luci.bucket(
name = "try.shadow",
shadows = "try",
constraints = luci.bucket_constraints(
pools = ["luci.flex.try"],
),
bindings = [
# For led permissions.
luci.binding(
roles = "role/buildbucket.creator",
groups = [
"chromium-led-users",
"mdb/chrome-build-access-sphinx",
"mdb/chrome-troopers",
"mdb/foundry-x-team",
],
),
],
dynamic = True,
)
luci.bucket( luci.bucket(
name = "cron", name = "cron",
) )

20
infra/config/realms.cfg
View File

@ -62,6 +62,16 @@ realms {
} }
} }
} }
realms {
name: "ci.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:chromium-led-users"
principals: "group:mdb/chrome-build-access-sphinx"
principals: "group:mdb/chrome-troopers"
principals: "group:mdb/foundry-x-team"
}
}
realms { realms {
name: "cron" name: "cron"
bindings { bindings {
@ -81,3 +91,13 @@ realms {
principals: "group:service-account-cq" principals: "group:service-account-cq"
} }
} }
realms {
name: "try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:chromium-led-users"
principals: "group:mdb/chrome-build-access-sphinx"
principals: "group:mdb/chrome-troopers"
principals: "group:mdb/foundry-x-team"
}
}