# Auto-generated by lucicfg.
# Do not modify manually.
#
# For the schema of this file, see RealmsCfg message:
#   https://config.luci.app/schemas/projects:realms.cfg

realms {
  name: "@project"
  bindings {
    role: "role/treestatus.limitedReader"
    principals: "group:all"
  }
  bindings {
    role: "role/treestatus.reader"
    principals: "group:googlers"
    principals: "user:luci-notify-dev@appspot.gserviceaccount.com"
  }
  bindings {
    role: "role/treestatus.writer"
    principals: "group:googlers"
    principals: "user:luci-notify-dev@appspot.gserviceaccount.com"
  }
}
realms {
  name: "@root"
  bindings {
    role: "role/analysis.editor"
    principals: "group:googlers"
    principals: "group:project-chromium-committers"
  }
  bindings {
    role: "role/analysis.queryUser"
    principals: "group:authenticated-users"
  }
  bindings {
    role: "role/analysis.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/configs.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/logdog.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/logdog.writer"
    principals: "group:luci-logdog-chromium-dev-writers"
  }
  bindings {
    role: "role/scheduler.owner"
    principals: "group:project-chromium-admins"
  }
  bindings {
    role: "role/scheduler.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.poolOwner"
    principals: "group:project-chromium-admins"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "group:mdb/chrome-troopers"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "group:project-chromium-test-dev-task-accounts"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "group:mdb/chrome-troopers"
  }
}
realms {
  name: "ci"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:chromium-ci-builder-dev@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.owner"
    principals: "group:project-chromium-admins"
  }
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "user:chromium-ci-builder-dev@chops-service-accounts.iam.gserviceaccount.com"
    principals: "user:luci-scheduler-dev@appspot.gserviceaccount.com"
  }
  bindings {
    role: "role/turboci.nodeReaderExternal"
    principals: "group:all"
  }
}
realms {
  name: "ci.shadow"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:chromium-ci-builder-dev@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.creator"
    principals: "group:mdb/chrome-troopers"
  }
}
realms {
  name: "pools/ci"
  bindings {
    role: "role/swarming.poolUser"
    principals: "project:infra"
    principals: "project:infra-experimental"
    principals: "project:v8"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "project:infra"
    principals: "project:infra-experimental"
    principals: "project:v8"
  }
}
realms {
  name: "pools/tests"
  bindings {
    role: "role/swarming.poolUser"
    principals: "group:chromium-swarming-dev-led-access"
    principals: "group:project-chromium-ci-dev-task-accounts"
    principals: "group:project-chromium-try-dev-task-accounts"
  }
}
realms {
  name: "pools/try"
}
realms {
  name: "public"
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/resultdb.invocationCreator"
    principals: "group:luci-resultdb-access"
  }
  bindings {
    role: "role/turboci.nodeReaderExternal"
    principals: "group:all"
  }
}
realms {
  name: "try"
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "group:chromium-swarming-dev-led-access"
  }
  bindings {
    role: "role/turboci.nodeReaderExternal"
    principals: "group:all"
  }
}