| # Auto-generated by lucicfg. |
| # Do not modify manually. |
| # |
| # For the schema of this file, see RealmsCfg message: |
| # https://config.luci.app/schemas/projects:realms.cfg |
| |
| realms { |
| name: "@root" |
| bindings { |
| role: "role/analysis.editor" |
| principals: "group:project-golang-approvers" |
| } |
| bindings { |
| role: "role/analysis.queryUser" |
| principals: "group:authenticated-users" |
| } |
| bindings { |
| role: "role/analysis.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.owner" |
| principals: "group:mdb/golang-luci-admin" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:security-coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:tricium-prod@appspot.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/configs.developer" |
| principals: "group:mdb/golang-luci-admin" |
| } |
| bindings { |
| role: "role/configs.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/configs.validator" |
| principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "group:mdb/golang-luci-admin" |
| } |
| bindings { |
| role: "role/scheduler.owner" |
| principals: "group:mdb/golang-luci-admin" |
| } |
| bindings { |
| role: "role/swarming.poolOwner" |
| principals: "group:mdb/golang-luci-admin" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "group:mdb/golang-luci-admin" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:mdb/golang-luci-admin" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "group:mdb/golang-luci-admin" |
| } |
| } |
| realms { |
| name: "ci" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-golang-may-start-trybots" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "ci-workers" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-golang-may-start-trybots" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "ci-workers.shadow" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:mdb/golang-team" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "ci.shadow" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:mdb/golang-team" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "pools/ci" |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-golang-may-start-trybots" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "pools/ci-workers" |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-golang-may-start-trybots" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "pools/prod" |
| } |
| realms { |
| name: "pools/security-try" |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:mdb/golang-release-eng-policy" |
| principals: "group:mdb/golang-security-policy" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:mdb/golang-release-eng-policy" |
| principals: "group:mdb/golang-security-policy" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:mdb/golang-release-eng-policy" |
| principals: "group:mdb/golang-security-policy" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "pools/security-try-workers" |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:mdb/golang-release-eng-policy" |
| principals: "group:mdb/golang-security-policy" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:mdb/golang-release-eng-policy" |
| principals: "group:mdb/golang-security-policy" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:mdb/golang-release-eng-policy" |
| principals: "group:mdb/golang-security-policy" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "pools/shared-workers" |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-golang-may-start-trybots" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "pools/try" |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-golang-may-start-trybots" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "pools/try-workers" |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-golang-may-start-trybots" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "prod" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:recipe-bundler@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "security-try" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:security-coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:security-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:mdb/golang-release-eng-policy" |
| principals: "group:mdb/golang-security-policy" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:mdb/golang-release-eng-policy" |
| principals: "group:mdb/golang-security-policy" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:mdb/golang-release-eng-policy" |
| principals: "group:mdb/golang-security-policy" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "security-try-workers" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:security-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:mdb/golang-release-eng-policy" |
| principals: "group:mdb/golang-security-policy" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:mdb/golang-release-eng-policy" |
| principals: "group:mdb/golang-security-policy" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:mdb/golang-release-eng-policy" |
| principals: "group:mdb/golang-security-policy" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "try" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:luci-task@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-golang-may-start-trybots" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "try-workers" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/buildbucket.triggerer" |
| principals: "group:project-golang-may-start-trybots" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolUser" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.poolViewer" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/swarming.taskServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/swarming.taskTriggerer" |
| principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com" |
| principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "try-workers.shadow" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:mdb/golang-team" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| } |
| realms { |
| name: "try.shadow" |
| bindings { |
| role: "role/buildbucket.builderServiceAccount" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| bindings { |
| role: "role/buildbucket.creator" |
| principals: "group:mdb/golang-team" |
| } |
| bindings { |
| role: "role/buildbucket.reader" |
| principals: "group:all" |
| } |
| bindings { |
| role: "role/resultdb.invocationCreator" |
| principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com" |
| principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com" |
| } |
| } |
