| #!/usr/bin/env lucicfg |
| |
| # Enable LUCI Realms support. |
| lucicfg.enable_experiment("crbug.com/1085650") |
| |
| # Keep only realms-dev.cfg. |
| lucicfg.config(tracked_files = ["realms-dev.cfg"]) |
| |
| luci.project( |
| name = "Skia, 2D graphics library (dev configs)", |
| dev = True, |
| ) |
| |
| # Contains ACLs for all dev Swarming resources. See chromium-swarm-dev/pools.cfg |
| # for where they are associated with this realm. |
| luci.realm( |
| name = "skia.dev", |
| bindings = [ |
| luci.binding( |
| roles = "role/swarming.poolOwner", |
| groups = "project-skia-admins", |
| ), |
| luci.binding( |
| roles = "role/swarming.poolViewer", |
| groups = "chromium-swarm-dev-view-all-bots", |
| ), |
| luci.binding( |
| roles = "role/swarming.taskViewer", |
| groups = "chromium-swarm-dev-view-all-tasks", |
| ), |
| luci.binding( |
| roles = [ |
| "role/swarming.poolUser", |
| "role/swarming.taskTriggerer", |
| ], |
| groups = [ |
| "project-skia-admins", |
| "project-skia-external-task-schedulers", |
| ], |
| ), |
| luci.binding( |
| roles = "role/swarming.taskServiceAccount", |
| users = [ |
| # All dev tasks use "none" as a service account they run as. |
| ], |
| ) |
| ], |
| ) |