diff options
| author | Junji Watanabe <jwata@google.com> | 2022-10-31 17:48:29 +0900 |
|---|---|---|
| committer | libyuv LUCI CQ <libyuv-scoped@luci-project-accounts.iam.gserviceaccount.com> | 2022-11-01 12:40:22 +0000 |
| commit | 7ccf31d3b68ff1cb8c4360b132b244f86ef101d5 (patch) | |
| tree | 8a38fd61d4e52c576c275cfab3e14796f4039d82 | |
| parent | ab386814acbc86a2e2467e527f275fd357da97f7 (diff) | |
| download | libyuv-7ccf31d3b68ff1cb8c4360b132b244f86ef101d5.tar.gz | |
[infra] Allow project-libyuv-admins group to trigger LED tasks
"role/swarming.taskTriggerer" gives "swarming.tasks.createInRealm" permission.
https://source.chromium.org/chromium/infra/infra/+/main:luci/appengine/auth_service/realms/permissions.py;l=114;drc=36516367cd70f195935ffd933d939e770e3b2c65
This fixes the auth error in "led launch".
http://screen/58TYKnHALbRUQKb
Bug: b:255217089
Change-Id: Idbfc06e7ad8a94caac9bfd1fe473c60d6e4addf6
Reviewed-on: https://chromium-review.googlesource.com/c/libyuv/libyuv/+/3990134
Reviewed-by: Christoffer Jansson <jansson@chromium.org>
Commit-Queue: Junji Watanabe <jwata@google.com>
| -rwxr-xr-x | infra/config/main.star | 4 | ||||
| -rw-r--r-- | infra/config/realms.cfg | 4 |
2 files changed, 8 insertions, 0 deletions
diff --git a/infra/config/main.star b/infra/config/main.star index 1268e684..b722b114 100755 --- a/infra/config/main.star +++ b/infra/config/main.star @@ -80,6 +80,10 @@ luci.project( ], bindings = [ luci.binding( + roles = "role/swarming.taskTriggerer", # for LED tasks. + groups = "project-libyuv-admins", + ), + luci.binding( roles = "role/configs.validator", users = "libyuv-try-builder@chops-service-accounts.iam.gserviceaccount.com", ), diff --git a/infra/config/realms.cfg b/infra/config/realms.cfg index ae04529e..16ffaac9 100644 --- a/infra/config/realms.cfg +++ b/infra/config/realms.cfg @@ -38,6 +38,10 @@ realms { role: "role/scheduler.reader" principals: "group:all" } + bindings { + role: "role/swarming.taskTriggerer" + principals: "group:project-libyuv-admins" + } } realms { name: "ci" |