Grant flex-(ci/try)-led-users permission to trigger tasks

Change-Id: I269a5f8f4c647c860e284fb1241a1c2440aba797
Reviewed-on: https://dawn-review.googlesource.com/c/dawn/+/65604
Reviewed-by: Austin Eng <enga@chromium.org>
Commit-Queue: Austin Eng <enga@chromium.org>
This commit is contained in:
Austin Eng 2021-09-30 23:01:31 +00:00 committed by Dawn LUCI CQ
parent 75911ca2b5
commit 901920a223
2 changed files with 24 additions and 0 deletions

View File

@ -41,6 +41,10 @@ realms {
role: "role/buildbucket.reader"
principals: "group:all"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:flex-ci-led-users"
}
}
realms {
name: "try"
@ -53,4 +57,8 @@ realms {
principals: "group:project-dawn-tryjob-access"
principals: "group:service-account-cq"
}
bindings {
role: "role/swarming.taskTriggerer"
principals: "group:flex-try-led-users"
}
}

View File

@ -64,6 +64,14 @@ luci.bucket(
],
)
# Allow LED users to trigger swarming tasks directly when debugging ci
# builders.
luci.binding(
realm = "ci",
roles = "role/swarming.taskTriggerer",
groups = "flex-ci-led-users",
)
luci.bucket(
name = "try",
acls = [
@ -77,6 +85,14 @@ luci.bucket(
],
)
# Allow LED users to trigger swarming tasks directly when debugging try
# builders.
luci.binding(
realm = "try",
roles = "role/swarming.taskTriggerer",
groups = "flex-try-led-users",
)
os_category = struct(
LINUX = "Linux",
MAC = "Mac",