# Auto-generated by lucicfg.
# Do not modify manually.
#
# For the schema of this file, see RealmsCfg message:
#   https://config.luci.app/schemas/projects:realms.cfg

realms {
  name: "@root"
  bindings {
    role: "role/analysis.editor"
    principals: "group:project-golang-approvers"
  }
  bindings {
    role: "role/analysis.queryUser"
    principals: "group:authenticated-users"
  }
  bindings {
    role: "role/analysis.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.owner"
    principals: "group:mdb/golang-luci-admin"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:security-coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:tricium-prod@appspot.gserviceaccount.com"
  }
  bindings {
    role: "role/configs.developer"
    principals: "group:mdb/golang-luci-admin"
  }
  bindings {
    role: "role/configs.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/configs.validator"
    principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/resultdb.invocationCreator"
    principals: "group:mdb/golang-luci-admin"
  }
  bindings {
    role: "role/scheduler.owner"
    principals: "group:mdb/golang-luci-admin"
  }
  bindings {
    role: "role/swarming.poolOwner"
    principals: "group:mdb/golang-luci-admin"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "group:mdb/golang-luci-admin"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:mdb/golang-luci-admin"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "group:mdb/golang-luci-admin"
  }
}
realms {
  name: "ci"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:project-golang-may-start-trybots"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
}
realms {
  name: "ci-workers"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:project-golang-may-start-trybots"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
}
realms {
  name: "ci-workers.shadow"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.creator"
    principals: "group:mdb/golang-team"
  }
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/resultdb.invocationCreator"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
}
realms {
  name: "ci.shadow"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.creator"
    principals: "group:mdb/golang-team"
  }
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/resultdb.invocationCreator"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
}
realms {
  name: "pools/ci"
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:project-golang-may-start-trybots"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
}
realms {
  name: "pools/ci-workers"
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:project-golang-may-start-trybots"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
}
realms {
  name: "pools/prod"
}
realms {
  name: "pools/security-try"
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:mdb/golang-release-eng-policy"
    principals: "group:mdb/golang-security-policy"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:mdb/golang-release-eng-policy"
    principals: "group:mdb/golang-security-policy"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:mdb/golang-release-eng-policy"
    principals: "group:mdb/golang-security-policy"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
}
realms {
  name: "pools/security-try-workers"
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:mdb/golang-release-eng-policy"
    principals: "group:mdb/golang-security-policy"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:mdb/golang-release-eng-policy"
    principals: "group:mdb/golang-security-policy"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:mdb/golang-release-eng-policy"
    principals: "group:mdb/golang-security-policy"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
}
realms {
  name: "pools/shared-workers"
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:project-golang-may-start-trybots"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
}
realms {
  name: "pools/try"
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:project-golang-may-start-trybots"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
}
realms {
  name: "pools/try-workers"
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:project-golang-may-start-trybots"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
}
realms {
  name: "prod"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:recipe-bundler@golang-ci-luci.iam.gserviceaccount.com"
  }
}
realms {
  name: "security-try"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:security-coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:security-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:mdb/golang-release-eng-policy"
    principals: "group:mdb/golang-security-policy"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:mdb/golang-release-eng-policy"
    principals: "group:mdb/golang-security-policy"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:mdb/golang-release-eng-policy"
    principals: "group:mdb/golang-security-policy"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
}
realms {
  name: "security-try-workers"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:security-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:mdb/golang-release-eng-policy"
    principals: "group:mdb/golang-security-policy"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:mdb/golang-release-eng-policy"
    principals: "group:mdb/golang-security-policy"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:mdb/golang-release-eng-policy"
    principals: "group:mdb/golang-security-policy"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
}
realms {
  name: "try"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:luci-task@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:project-golang-may-start-trybots"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
}
realms {
  name: "try-workers"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:project-golang-may-start-trybots"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:relui-tasks@symbolic-datum-552.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "user:gomoteserver@symbolic-datum-552.iam.gserviceaccount.com"
    principals: "user:relui-prod@symbolic-datum-552.iam.gserviceaccount.com"
  }
}
realms {
  name: "try-workers.shadow"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.creator"
    principals: "group:mdb/golang-team"
  }
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/resultdb.invocationCreator"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
}
realms {
  name: "try.shadow"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.creator"
    principals: "group:mdb/golang-team"
  }
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/resultdb.invocationCreator"
    principals: "user:coordinator-builder@golang-ci-luci.iam.gserviceaccount.com"
    principals: "user:public-worker-builder@golang-ci-luci.iam.gserviceaccount.com"
  }
}