| # Auto-generated by lucicfg. |
| # Do not modify manually. |
| # |
| # For the schema of this file, see RealmsCfg message: |
| # https://luci-config.appspot.com/schemas/projects:realms.cfg |
| |
| realms { |
| name: "@root" |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/configs.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/cq.committer" |
| principals: "group:project-fuchsia-committers" |
| } |
| bindings { |
| role: "role/cq.dryRunner" |
| principals: "group:project-fuchsia-tryjob-access" |
| } |
| bindings { |
| role: "role/logdog.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/logdog.writer" |
| principals: "group:luci-logdog-fuchsia-writers" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:project-fuchsia-admins" |
| principals: "group:project-fuchsia-ci-task-accounts" |
| principals: "group:project-fuchsia-try-task-accounts" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:project-fuchsia-admins" |
| } |
| bindings { |
| role: "role/scheduler.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.poolOwner" |
| principals: "group:project-fuchsia-admins" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "group:project-fuchsia-test-task-accounts" |
| } |
| } |
| realms { |
| name: "ci" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:fuchsia-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:infra-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:infra-config-roller@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:third-party-roller@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:tools-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "user:fuchsia-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:fuchsia-prod-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:infra-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:luci-scheduler@appspot.gserviceaccount.com" |
| principals: "user:tools-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:mdb/fuchsia-toolchain-team" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "user:fuchsia-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:fuchsia-prod-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:infra-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:luci-scheduler@appspot.gserviceaccount.com" |
| principals: "user:tools-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:project-fuchsia-admins" |
| principals: "group:project-fuchsia-ci-task-accounts" |
| } |
| } |
| realms { |
| name: "global.ci" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:auto-submit@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:docs-roller@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:firebase-hosting-deployer@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:fuchsia-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:tools-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "user:fuchsia-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:infra-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:luci-scheduler@appspot.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:project-fuchsia-admins" |
| principals: "group:project-fuchsia-ci-task-accounts" |
| } |
| } |
| realms { |
| name: "pools/ci" |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:project-fuchsia-admins" |
| principals: "group:project-fuchsia-ci-task-accounts" |
| } |
| } |
| realms { |
| name: "pools/prod" |
| } |
| realms { |
| name: "pools/tests" |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:fuchsia-led-users" |
| principals: "group:project-fuchsia-admins" |
| principals: "group:project-fuchsia-ci-task-accounts" |
| principals: "group:project-fuchsia-try-task-accounts" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "group:project-fuchsia-test-task-accounts" |
| } |
| } |
| realms { |
| name: "pools/toolchain.ci" |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:project-fuchsia-admins" |
| principals: "group:project-fuchsia-toolchain-led-users" |
| } |
| } |
| realms { |
| name: "pools/tricium" |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:fuchsia-led-users" |
| principals: "group:project-fuchsia-admins" |
| principals: "group:project-fuchsia-led-users" |
| principals: "group:tricium-admins" |
| principals: "user:tricium-prod@appspot.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "pools/try" |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:fuchsia-led-users" |
| principals: "group:project-fuchsia-admins" |
| principals: "group:project-fuchsia-led-users" |
| principals: "group:project-fuchsia-try-task-accounts" |
| } |
| } |
| realms { |
| name: "prod" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:fuchsia-prod-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:tools-prod-builder@fuchsia-infra.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "user:fuchsia-prod-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:luci-scheduler@appspot.gserviceaccount.com" |
| principals: "user:tools-prod-builder@fuchsia-infra.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:mdb/fuchsia-toolchain-team" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "user:fuchsia-prod-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:tools-prod-builder@fuchsia-infra.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "toolchain.ci" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:fuchsia-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:tools-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "user:fuchsia-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:fuchsia-prod-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:luci-scheduler@appspot.gserviceaccount.com" |
| principals: "user:tools-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:mdb/fuchsia-toolchain-team" |
| } |
| bindings { |
| role: "role/scheduler.triggerer" |
| principals: "user:fuchsia-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:fuchsia-prod-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:luci-scheduler@appspot.gserviceaccount.com" |
| principals: "user:tools-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:project-fuchsia-admins" |
| principals: "group:project-fuchsia-toolchain-led-users" |
| } |
| } |
| realms { |
| name: "tricium" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:fuchsia-tricium-builder@fuchsia-infra.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-fuchsia-tryjob-access" |
| principals: "user:tricium-prod@appspot.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:fuchsia-led-users" |
| principals: "group:project-fuchsia-admins" |
| principals: "group:project-fuchsia-led-users" |
| principals: "group:tricium-admins" |
| principals: "user:tricium-prod@appspot.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "try" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:fuchsia-try-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:infra-try-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:tools-try-builder@fuchsia-infra.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-fuchsia-tryjob-access" |
| principals: "project:turquoise" |
| principals: "user:fuchsia-prod-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:fuchsia-try-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:infra-try-builder@fuchsia-infra.iam.gserviceaccount.com" |
| principals: "user:tools-ci-builder@fuchsia-infra.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:fuchsia-led-users" |
| principals: "group:project-fuchsia-admins" |
| principals: "group:project-fuchsia-led-users" |
| principals: "group:project-fuchsia-try-task-accounts" |
| } |
| } |
