tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

realms.cfg (5179B)

      1 # Auto-generated by lucicfg.
      2 # Do not modify manually.
      3 #
      4 # For the schema of this file, see RealmsCfg message:
      5 #   https://config.luci.app/schemas/projects:realms.cfg
      6 
      7 realms {
      8  name: "@root"
      9  bindings {
     10    role: "role/analysis.editor"
     11    principals: "group:googlers"
     12  }
     13  bindings {
     14    role: "role/analysis.queryUser"
     15    principals: "group:authenticated-users"
     16  }
     17  bindings {
     18    role: "role/analysis.reader"
     19    principals: "group:all"
     20  }
     21  bindings {
     22    role: "role/buildbucket.reader"
     23    principals: "group:all"
     24  }
     25  bindings {
     26    role: "role/configs.reader"
     27    principals: "group:all"
     28  }
     29  bindings {
     30    role: "role/configs.validator"
     31    principals: "user:webrtc-try-builder@chops-service-accounts.iam.gserviceaccount.com"
     32  }
     33  bindings {
     34    role: "role/logdog.reader"
     35    principals: "group:all"
     36  }
     37  bindings {
     38    role: "role/logdog.writer"
     39    principals: "group:luci-logdog-chromium-writers"
     40  }
     41  bindings {
     42    role: "role/scheduler.owner"
     43    principals: "group:project-webrtc-admins"
     44  }
     45  bindings {
     46    role: "role/scheduler.reader"
     47    principals: "group:all"
     48  }
     49  bindings {
     50    role: "role/swarming.poolOwner"
     51    principals: "group:project-webrtc-admins"
     52  }
     53  bindings {
     54    role: "role/swarming.poolViewer"
     55    principals: "group:all"
     56  }
     57  bindings {
     58    role: "role/swarming.taskServiceAccount"
     59    principals: "user:chromium-tester@chops-service-accounts.iam.gserviceaccount.com"
     60  }
     61 }
     62 realms {
     63  name: "ci"
     64  extends: "debug-bot-acls"
     65  bindings {
     66    role: "role/buildbucket.builderServiceAccount"
     67    principals: "user:webrtc-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
     68  }
     69  bindings {
     70    role: "role/buildbucket.triggerer"
     71    principals: "group:project-webrtc-ci-schedulers"
     72  }
     73  bindings {
     74    role: "role/resultdb.invocationCreator"
     75    principals: "group:project-webrtc-ci-task-accounts"
     76  }
     77 }
     78 realms {
     79  name: "cron"
     80  bindings {
     81    role: "role/buildbucket.builderServiceAccount"
     82    principals: "user:chromium-webrtc-autoroll@webrtc-ci.iam.gserviceaccount.com"
     83    principals: "user:webrtc-version-updater@webrtc-ci.iam.gserviceaccount.com"
     84  }
     85 }
     86 realms {
     87  name: "debug-bot-acls"
     88  bindings {
     89    role: "role/buildbucket.creator"
     90    principals: "group:project-webrtc-admins"
     91  }
     92  bindings {
     93    role: "role/swarming.poolUser"
     94    principals: "group:project-webrtc-admins"
     95  }
     96  bindings {
     97    role: "role/swarming.taskTriggerer"
     98    principals: "group:project-webrtc-admins"
     99  }
    100 }
    101 realms {
    102  name: "perf"
    103  extends: "debug-bot-acls"
    104  bindings {
    105    role: "role/buildbucket.builderServiceAccount"
    106    principals: "user:webrtc-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
    107  }
    108  bindings {
    109    role: "role/buildbucket.creator"
    110    principals: "group:project-webrtc-led-users"
    111  }
    112  bindings {
    113    role: "role/buildbucket.triggerer"
    114    principals: "group:service-account-chromeperf"
    115    principals: "user:webrtc-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
    116  }
    117  bindings {
    118    role: "role/swarming.taskTriggerer"
    119    principals: "group:project-webrtc-led-users"
    120  }
    121  bindings {
    122    role: "role/scheduler.triggerer"
    123    principals: "user:webrtc-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
    124    conditions {
    125      restrict {
    126        attribute: "scheduler.job.name"
    127        values: "Perf Android32 (R Pixel5)"
    128        values: "Perf Android64 (R Pixel5)"
    129        values: "Perf Fuchsia"
    130        values: "Perf Linux"
    131        values: "Perf Mac 11"
    132        values: "Perf Mac M1 Arm64 12"
    133        values: "Perf Win 10"
    134      }
    135    }
    136  }
    137 }
    138 realms {
    139  name: "pools/ci"
    140 }
    141 realms {
    142  name: "pools/ci-tests"
    143  bindings {
    144    role: "role/swarming.poolUser"
    145    principals: "group:project-webrtc-ci-task-accounts"
    146  }
    147  bindings {
    148    role: "role/swarming.taskServiceAccount"
    149    principals: "group:project-webrtc-ci-task-accounts"
    150  }
    151 }
    152 realms {
    153  name: "pools/cron"
    154  bindings {
    155    role: "role/swarming.poolUser"
    156    principals: "project:libyuv"
    157  }
    158 }
    159 realms {
    160  name: "pools/perf"
    161  bindings {
    162    role: "role/swarming.poolUser"
    163    principals: "group:project-webrtc-led-users"
    164  }
    165 }
    166 realms {
    167  name: "pools/try"
    168  bindings {
    169    role: "role/swarming.poolUser"
    170    principals: "group:project-webrtc-led-users"
    171  }
    172 }
    173 realms {
    174  name: "pools/try-tests"
    175  bindings {
    176    role: "role/swarming.poolUser"
    177    principals: "group:project-webrtc-try-task-accounts"
    178  }
    179  bindings {
    180    role: "role/swarming.taskServiceAccount"
    181    principals: "group:project-webrtc-try-task-accounts"
    182  }
    183 }
    184 realms {
    185  name: "try"
    186  extends: "debug-bot-acls"
    187  bindings {
    188    role: "role/buildbucket.builderServiceAccount"
    189    principals: "user:webrtc-try-builder@chops-service-accounts.iam.gserviceaccount.com"
    190  }
    191  bindings {
    192    role: "role/buildbucket.creator"
    193    principals: "group:project-webrtc-led-users"
    194  }
    195  bindings {
    196    role: "role/buildbucket.triggerer"
    197    principals: "group:project-webrtc-tryjob-access"
    198    principals: "group:service-account-cq"
    199  }
    200  bindings {
    201    role: "role/resultdb.invocationCreator"
    202    principals: "group:project-webrtc-try-task-accounts"
    203  }
    204  bindings {
    205    role: "role/swarming.taskTriggerer"
    206    principals: "group:project-webrtc-led-users"
    207  }
    208 }