mirror of
https://chromium.googlesource.com/libyuv/libyuv
synced 2025-12-24 12:34:51 +08:00
b841549b14
It defines who is allowed to call LUCI Config validation API to validate this LUCI project's configs. This is usually done by presubmit jobs, and thus configs.validator role is assigned to try job task accounts. Previously this ACL was defined in the global "config-validation" group. It is deprecated and being replaced with per-project ACLs defined in per-project configs (like in this CL). There's still a global ACL to allow any googler to call the validation API in any LUCI project they are allowed to see. Thus the per-project binding applies only to service accounts (they are not googlers). Note: this CL was generated semi-automatically and reviewers are picked automatically based on OWNERS file. BUG=chromium:1068817 R=fbarchard@chromium.org Change-Id: I26544e524cf5e900ab395ff5c440c10438723903 Reviewed-on: https://chromium-review.googlesource.com/c/libyuv/libyuv/+/3276689 Reviewed-by: Frank Barchard <fbarchard@chromium.org> Commit-Queue: Vadim Shtayura <vadimsh@google.com>
68 lines
1.6 KiB
INI
68 lines
1.6 KiB
INI
# Auto-generated by lucicfg.
|
|
# Do not modify manually.
|
|
#
|
|
# For the schema of this file, see RealmsCfg message:
|
|
# https://luci-config.appspot.com/schemas/projects:realms.cfg
|
|
|
|
realms {
|
|
name: "@root"
|
|
bindings {
|
|
role: "role/buildbucket.owner"
|
|
principals: "group:project-libyuv-admins"
|
|
}
|
|
bindings {
|
|
role: "role/buildbucket.reader"
|
|
principals: "group:all"
|
|
}
|
|
bindings {
|
|
role: "role/configs.reader"
|
|
principals: "group:all"
|
|
}
|
|
bindings {
|
|
role: "role/configs.validator"
|
|
principals: "user:libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com"
|
|
}
|
|
bindings {
|
|
role: "role/logdog.reader"
|
|
principals: "group:all"
|
|
}
|
|
bindings {
|
|
role: "role/logdog.writer"
|
|
principals: "group:luci-logdog-chromium-writers"
|
|
}
|
|
bindings {
|
|
role: "role/scheduler.owner"
|
|
principals: "group:project-libyuv-admins"
|
|
}
|
|
bindings {
|
|
role: "role/scheduler.reader"
|
|
principals: "group:all"
|
|
}
|
|
}
|
|
realms {
|
|
name: "ci"
|
|
bindings {
|
|
role: "role/buildbucket.builderServiceAccount"
|
|
principals: "user:libyuv-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
|
|
}
|
|
}
|
|
realms {
|
|
name: "cron"
|
|
bindings {
|
|
role: "role/buildbucket.builderServiceAccount"
|
|
principals: "user:libyuv-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com"
|
|
}
|
|
}
|
|
realms {
|
|
name: "try"
|
|
bindings {
|
|
role: "role/buildbucket.builderServiceAccount"
|
|
principals: "user:libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com"
|
|
}
|
|
bindings {
|
|
role: "role/buildbucket.triggerer"
|
|
principals: "group:project-libyuv-tryjob-access"
|
|
principals: "group:service-account-cq"
|
|
}
|
|
}
|