blob: c710553b44c492e6be1665a89d0b88d60a745485 [file] [log] [blame]
# Auto-generated by lucicfg.
# Do not modify manually.
#
# For the schema of this file, see RealmsCfg message:
# https://config.luci.app/schemas/projects:realms.cfg
realms {
name: "@root"
bindings {
role: "role/analysis.editor"
principals: "group:project-pigweed-committers"
}
bindings {
role: "role/analysis.limitedReader"
principals: "group:all"
}
bindings {
role: "role/analysis.queryUser"
principals: "group:project-pigweed-committers"
}
bindings {
role: "role/analysis.reader"
principals: "group:googlers"
}
bindings {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-admins"
}
bindings {
role: "role/configs.reader"
principals: "group:all"
}
bindings {
role: "role/configs.validator"
principals: "group:project-pigweed-config-validation"
}
bindings {
role: "role/cq.committer"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/logdog.reader"
principals: "group:all"
}
bindings {
role: "role/logdog.writer"
principals: "group:project-pigweed-logdog-writers"
}
bindings {
role: "role/resultdb.invocationCreator"
principals: "group:project-pigweed-ci-task-accounts"
principals: "group:project-pigweed-test-task-accounts"
principals: "group:project-pigweed-try-task-accounts"
}
bindings {
role: "role/scheduler.owner"
principals: "group:project-pigweed-admins"
}
bindings {
role: "role/scheduler.reader"
principals: "group:all"
}
bindings {
role: "role/swarming.poolOwner"
principals: "group:project-pigweed-admins"
}
bindings {
role: "role/swarming.poolViewer"
principals: "group:all"
}
}
realms {
name: "examples.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "examples.dev.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "examples.dev.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "examples.dev.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "examples.roll"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "group:project-pigweed-committers"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-committers"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "examples.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "examples.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "experimental.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "experimental.dev.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "experimental.dev.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "experimental.dev.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "experimental.roll"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "group:project-pigweed-committers"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-committers"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "experimental.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "experimental.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "gonk.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "gonk.dev.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "gonk.dev.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "gonk.dev.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "gonk.roll"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "group:project-pigweed-committers"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-committers"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "gonk.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "gonk.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "infra.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:auto-submit@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "kudzu.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "kudzu.dev.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "kudzu.dev.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "kudzu.dev.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "kudzu.roll"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "group:project-pigweed-committers"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-committers"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "kudzu.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "kudzu.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "matter.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "matter.dev.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "matter.dev.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "matter.dev.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "matter.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "matter.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "open-dice.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "open-dice.dev.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "open-dice.dev.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "open-dice.dev.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "open-dice.roll"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "group:project-pigweed-committers"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-committers"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "open-dice.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "open-dice.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "pigweed.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:host-tools-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:pigweed-ci-bthost-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:pigweed-docs-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:pigweed-python@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:pigweed-xref-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "pigweed.dev.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-bthost-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:pigweed-python@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "pigweed.dev.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "pigweed.dev.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "pigweed.roll"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "group:project-pigweed-committers"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-committers"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "pigweed.toolchain"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:fuchsia-ci-builder@fuchsia-infra.iam.gserviceaccount.com"
principals: "user:fuchsia-prod-builder@fuchsia-infra.iam.gserviceaccount.com"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:fuchsia-ci-builder@fuchsia-infra.iam.gserviceaccount.com"
principals: "user:fuchsia-prod-builder@fuchsia-infra.iam.gserviceaccount.com"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "pigweed.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "pigweed.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "pools/ci"
bindings {
role: "role/swarming.poolUser"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-committers"
}
}
realms {
name: "pools/dev.ci"
bindings {
role: "role/swarming.poolUser"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "pools/dev.try"
bindings {
role: "role/swarming.poolUser"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "pools/roll"
}
realms {
name: "pools/try"
bindings {
role: "role/swarming.poolUser"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "qg.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "qg.roll"
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "group:project-pigweed-committers"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-committers"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "qg.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "qg.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "quickstart.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "quickstart.dev.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "quickstart.dev.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "quickstart.dev.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "quickstart.roll"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "group:project-pigweed-committers"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-committers"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "quickstart.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "quickstart.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "recipes.ci"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-ci-builder@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
}
}
realms {
name: "recipes.roll"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:recipe-bundler@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:recipe-deps-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "group:project-pigweed-committers"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-committers"
}
}
realms {
name: "recipes.try"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "group:project-pigweed-tryjob-access"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-led-users"
principals: "group:project-pigweed-try-task-accounts"
}
}
realms {
name: "recipes.try.shadow"
bindings {
role: "role/buildbucket.creator"
principals: "group:project-pigweed-tryjob-access"
}
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-try-builder@pigweed-service-accounts.iam.gserviceaccount.com"
}
}
realms {
name: "tools.roll"
bindings {
role: "role/buildbucket.builderServiceAccount"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/buildbucket.triggerer"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/scheduler.triggerer"
principals: "group:project-pigweed-committers"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
principals: "user:rerunner@pigweed-service-accounts.iam.gserviceaccount.com"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:project-pigweed-admins"
principals: "group:project-pigweed-committers"
principals: "user:pigweed-roller@pigweed-service-accounts.iam.gserviceaccount.com"
}
}