skolo/go/service_accounts/service_accounts.go

package service_accounts

/*
	Configuration for service accounts in the Skolo.

	TODO(borenet): This should maybe be in a config file, but it's
	convenient to have it in code.
*/

var (
	// Default service account used for bots which connect to
	// chrome-swarming.appspot.com.
	ChromeSwarming = &ServiceAccount{
		Project:  "google.com:skia-buildbots",
		Email:    "chrome-swarming-bots@skia-buildbots.google.com.iam.gserviceaccount.com",
		Nickname: "swarming",
	}

	// Default service account used for bots which connect to
	// chromium-swarm.appspot.com.
	ChromiumSwarm = &ServiceAccount{
		Project:  "skia-swarming-bots",
		Email:    "chromium-swarm-bots@skia-swarming-bots.iam.gserviceaccount.com",
		Nickname: "swarming",
	}

	// Service account used by the jumphost itself.
	Jumphost = &ServiceAccount{
		Project:  "google.com:skia-buildbots",
		Email:    "jumphost@skia-buildbots.google.com.iam.gserviceaccount.com",
		Nickname: "jumphost",
	}

	// Service account used by the RPi masters.
	RpiMaster = &ServiceAccount{
		Project:  "google.com:skia-buildbots",
		Email:    "rpi-master@skia-buildbots.google.com.iam.gserviceaccount.com",
		Nickname: "rpi-master",
	}

	// Determines which keys go on which machines:
	// map[hostname][]*ServiceAccount
	JumphostServiceAccountMapping = map[string][]*ServiceAccount{
		"jumphost-internal-01": {
			ChromeSwarming,
			Jumphost,
			RpiMaster,
		},
		"jumphost-rack-01": {
			ChromiumSwarm,
			Jumphost,
			RpiMaster,
		},
		"jumphost-rack-02": {
			ChromiumSwarm,
			Jumphost,
		},
		"jumphost-rack-03": {
			ChromiumSwarm,
			Jumphost,
		},
	}

	// Maps hostnames to the address used to SSH into each jumphost.
	JumphostSSHMapping = map[string]string{
		"jumphost-internal-01": "internal-01.skolo",
		"jumphost-rack-01":     "rack-01.skolo",
		"jumphost-rack-02":     "rack-02.skolo",
		"jumphost-rack-03":     "rack-03.skolo",
	}
)

// ServiceAccount is a struct representing a service account.
type ServiceAccount struct {
	Project  string `json:"project"`
	Email    string `json:"email"`
	Nickname string `json:"nick"`
}