libyuv/infra/config/realms.cfg
Victor Hugo Vianna Silva 110e00ea96 Allow use of led via http://go/ciba
Users who have the "Chrome Build Access" in go/ciba can now use the
`led` CLI on libyuv bots. No-Try because the mac-asan bot is busted.

I will use this to test the CL below ahead of submission.
https://chromium-review.googlesource.com/c/libyuv/libyuv/+/7043382

No-Try: True
Change-Id: I33b488406f342fac4ff33d02e2c70cef2e50233c
Reviewed-on: https://chromium-review.googlesource.com/c/libyuv/libyuv/+/7046060
Reviewed-by: Wan-Teh Chang <wtc@google.com>
Commit-Queue: Victor Vianna <victorvianna@google.com>
Reviewed-by: Mirko Bonadei <mbonadei@chromium.org>
2025-10-16 05:57:31 -07:00

104 lines
2.6 KiB
INI

# Auto-generated by lucicfg.
# Do not modify manually.
#
# For the schema of this file, see RealmsCfg message:
# https://config.luci.app/schemas/projects:realms.cfg
realms {
name: "@root"
bindings {
role: "role/buildbucket.owner"
principals: "group:project-libyuv-admins"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/configs.reader"
principals: "group:all"
}
bindings {
role: "role/configs.validator"
principals: "user:libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/logdog.reader"
principals: "group:all"
}
bindings {
role: "role/logdog.writer"
principals: "group:luci-logdog-chromium-writers"
}
bindings {
role: "role/scheduler.owner"
principals: "group:project-libyuv-admins"
}
bindings {
role: "role/scheduler.reader"
principals: "group:all"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-libyuv-admins"
}
}
realms {
name: "ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:libyuv-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:libyuv-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
conditions {
restrict {
attribute: "scheduler.job.name"
values: "Android Tester ARM32 Debug (Nexus 5X)"
values: "Android Tester ARM32 Release (Nexus 5X)"
values: "Android Tester ARM64 Debug (Nexus 5X)"
}
}
}
}
realms {
name: "ci.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:chromium-led-users"
principals: "group:mdb/chrome-build-access-sphinx"
principals: "group:mdb/chrome-troopers"
principals: "group:mdb/foundry-x-team"
}
}
realms {
name: "cron"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:libyuv-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-libyuv-tryjob-access"
principals: "group:service-account-cq"
}
}
realms {
name: "try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:chromium-led-users"
principals: "group:mdb/chrome-build-access-sphinx"
principals: "group:mdb/chrome-troopers"
principals: "group:mdb/foundry-x-team"
}
}