# Auto-generated by lucicfg.
# Do not modify manually.
#
# For the schema of this file, see RealmsCfg message:
#   https://config.luci.app/schemas/projects:realms.cfg

realms {
  name: "@project"
  bindings {
    role: "role/resultdb.baselineReader"
    principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/resultdb.baselineWriter"
    principals: "user:angle-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
    principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
}
realms {
  name: "@root"
  bindings {
    role: "role/buildbucket.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/configs.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/configs.validator"
    principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/logdog.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/logdog.writer"
    principals: "group:luci-logdog-angle-writers"
  }
  bindings {
    role: "role/scheduler.owner"
    principals: "group:project-angle-admins"
    principals: "group:project-angle-schedulers"
  }
  bindings {
    role: "role/scheduler.reader"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.poolOwner"
    principals: "group:mdb/chrome-troopers"
    principals: "group:project-angle-owners"
  }
  bindings {
    role: "role/swarming.poolUser"
    principals: "group:mdb/chrome-troopers"
    principals: "group:project-angle-owners"
  }
  bindings {
    role: "role/swarming.poolViewer"
    principals: "group:all"
  }
  bindings {
    role: "role/swarming.taskServiceAccount"
    principals: "user:chrome-gpu-gold@chops-service-accounts.iam.gserviceaccount.com"
    principals: "user:chromium-tester@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/swarming.taskTriggerer"
    principals: "group:mdb/chrome-troopers"
    principals: "group:project-angle-owners"
  }
}
realms {
  name: "ci"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:angle-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "user:angle-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/scheduler.triggerer"
    principals: "user:angle-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
    conditions {
      restrict {
        attribute: "scheduler.job.name"
        values: "angle-android-arm64-google-pixel10-rel"
        values: "angle-android-arm64-google-pixel4-perf"
        values: "angle-android-arm64-google-pixel4-rel"
        values: "angle-android-arm64-google-pixel6-exp-rel"
        values: "angle-android-arm64-google-pixel6-perf"
        values: "angle-android-arm64-google-pixel6-rel"
        values: "angle-android-arm64-samsung-s24-rel"
        values: "angle-linux-x64-amd-rx5500xt-rel"
        values: "angle-linux-x64-intel-uhd630-exp-rel"
        values: "angle-linux-x64-intel-uhd630-perf"
        values: "angle-linux-x64-intel-uhd630-rel"
        values: "angle-linux-x64-nvidia-gtx1660-exp-rel"
        values: "angle-linux-x64-nvidia-gtx1660-perf"
        values: "angle-linux-x64-nvidia-gtx1660-rel"
        values: "angle-linux-x64-sws-asan"
        values: "angle-linux-x64-sws-rel"
        values: "angle-linux-x64-sws-tsan"
        values: "angle-mac-arm64-apple-m2-exp-rel"
        values: "angle-mac-arm64-apple-m2-rel"
        values: "angle-mac-x64-amd-5300m-exp-rel"
        values: "angle-mac-x64-amd-5300m-rel"
        values: "angle-mac-x64-amd-555x-rel"
        values: "angle-mac-x64-intel-uhd630-exp-rel"
        values: "angle-mac-x64-intel-uhd630-rel"
        values: "angle-win-arm64-qualcomm-snapdragon-x-elite-rel"
        values: "angle-win-x64-intel-uhd630-exp-rel"
        values: "angle-win-x64-intel-uhd630-perf"
        values: "angle-win-x64-intel-uhd630-rel"
        values: "angle-win-x64-intel-uhd770-rel"
        values: "angle-win-x64-nvidia-gtx1660-exp-rel"
        values: "angle-win-x64-nvidia-gtx1660-perf"
        values: "angle-win-x64-nvidia-gtx1660-rel"
        values: "angle-win-x64-sws-asan"
        values: "angle-win-x86-sws-rel"
      }
    }
  }
}
realms {
  name: "ci.shadow"
  bindings {
    role: "role/buildbucket.creator"
    principals: "group:chromium-led-users"
    principals: "group:mdb/chrome-build-access-sphinx"
    principals: "group:mdb/chrome-troopers"
    principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/resultdb.invocationCreator"
    principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
}
realms {
  name: "pools/ci"
}
realms {
  name: "pools/try"
}
realms {
  name: "try"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "group:project-angle-tryjob-access"
    principals: "group:service-account-cq"
  }
}
realms {
  name: "try.shadow"
  bindings {
    role: "role/buildbucket.builderServiceAccount"
    principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.creator"
    principals: "group:chromium-led-users"
    principals: "group:mdb/chrome-build-access-sphinx"
    principals: "group:mdb/chrome-troopers"
    principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/buildbucket.triggerer"
    principals: "user:angle-try-builder@chops-service-accounts.iam.gserviceaccount.com"
  }
  bindings {
    role: "role/resultdb.invocationCreator"
    principals: "group:project-angle-try-task-accounts"
    principals: "group:project-angle-tryjob-access"
  }
}