1 files changed, 249 insertions, 0 deletions
diff --git a/chromium/infra/config/generated/realms.cfg b/chromium/infra/config/generated/realms.cfg
new file mode 100644
index 00000000000..bd1bbd83b17
--- /dev/null
+++ b/chromium/infra/config/generated/realms.cfg
@@ -0,0 +1,249 @@
+# Auto-generated by lucicfg.
+# Do not modify manually.
+#
+# For the schema of this file, see RealmsCfg message:
+#   https://luci-config.appspot.com/schemas/projects:realms.cfg
+
+realms {
+  name: "@root"
+  bindings {
+    role: "role/configs.reader"
+    principals: "group:all"
+  }
+  bindings {
+    role: "role/logdog.reader"
+    principals: "group:all"
+  }
+  bindings {
+    role: "role/logdog.writer"
+    principals: "group:luci-logdog-chromium-writers"
+  }
+  bindings {
+    role: "role/scheduler.owner"
+    principals: "group:project-chromium-admins"
+  }
+  bindings {
+    role: "role/scheduler.reader"
+    principals: "group:all"
+  }
+}
+realms {
+  name: "ci"
+  bindings {
+    role: "role/buildbucket.builderServiceAccount"
+    principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+    principals: "user:chromium-ci-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
+    principals: "user:chromium-cipd-builder@chops-service-accounts.iam.gserviceaccount.com"
+    principals: "user:component-mapping-updater@chops-service-accounts.iam.gserviceaccount.com"
+  }
+  bindings {
+    role: "role/buildbucket.owner"
+    principals: "group:google/luci-task-force@google.com"
+  }
+  bindings {
+    role: "role/buildbucket.reader"
+    principals: "group:all"
+  }
+  bindings {
+    role: "role/buildbucket.triggerer"
+    principals: "group:project-chromium-ci-schedulers"
+  }
+}
+realms {
+  name: "ci-m83"
+  bindings {
+    role: "role/buildbucket.builderServiceAccount"
+    principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+    principals: "user:chromium-ci-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
+  }
+  bindings {
+    role: "role/buildbucket.owner"
+    principals: "group:google/luci-task-force@google.com"
+  }
+  bindings {
+    role: "role/buildbucket.reader"
+    principals: "group:all"
+  }
+  bindings {
+    role: "role/buildbucket.triggerer"
+    principals: "group:project-chromium-ci-schedulers"
+  }
+}
+realms {
+  name: "ci-m84"
+  bindings {
+    role: "role/buildbucket.builderServiceAccount"
+    principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+    principals: "user:chromium-ci-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
+  }
+  bindings {
+    role: "role/buildbucket.owner"
+    principals: "group:google/luci-task-force@google.com"
+  }
+  bindings {
+    role: "role/buildbucket.reader"
+    principals: "group:all"
+  }
+  bindings {
+    role: "role/buildbucket.triggerer"
+    principals: "group:project-chromium-ci-schedulers"
+  }
+}
+realms {
+  name: "findit"
+  bindings {
+    role: "role/buildbucket.builderServiceAccount"
+    principals: "user:findit-builder@chops-service-accounts.iam.gserviceaccount.com"
+  }
+  bindings {
+    role: "role/buildbucket.reader"
+    principals: "group:googlers"
+    principals: "user:findit-builder@chops-service-accounts.iam.gserviceaccount.com"
+  }
+  bindings {
+    role: "role/buildbucket.triggerer"
+    principals: "group:findit-tryjob-access"
+    principals: "user:luci-scheduler@appspot.gserviceaccount.com"
+  }
+}
+realms {
+  name: "goma"
+  bindings {
+    role: "role/buildbucket.builderServiceAccount"
+    principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  }
+  bindings {
+    role: "role/buildbucket.owner"
+    principals: "group:google/luci-task-force@google.com"
+  }
+  bindings {
+    role: "role/buildbucket.reader"
+    principals: "group:all"
+  }
+  bindings {
+    role: "role/buildbucket.triggerer"
+    principals: "group:project-chromium-ci-schedulers"
+  }
+}
+realms {
+  name: "try"
+  bindings {
+    role: "role/buildbucket.builderServiceAccount"
+    principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com"
+    principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
+  }
+  bindings {
+    role: "role/buildbucket.owner"
+    principals: "group:service-account-chromium-tryserver"
+  }
+  bindings {
+    role: "role/buildbucket.reader"
+    principals: "group:all"
+  }
+  bindings {
+    role: "role/buildbucket.triggerer"
+    principals: "group:project-chromium-tryjob-access"
+    principals: "group:service-account-chromeperf"
+    principals: "group:service-account-cq"
+    principals: "project:angle"
+    principals: "project:dawn"
+    principals: "project:skia"
+    principals: "project:v8"
+    principals: "user:findit-for-me@appspot.gserviceaccount.com"
+    principals: "user:tricium-prod@appspot.gserviceaccount.com"
+  }
+}
+realms {
+  name: "try-m83"
+  bindings {
+    role: "role/buildbucket.builderServiceAccount"
+    principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com"
+    principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
+  }
+  bindings {
+    role: "role/buildbucket.owner"
+    principals: "group:service-account-chromium-tryserver"
+  }
+  bindings {
+    role: "role/buildbucket.reader"
+    principals: "group:all"
+  }
+  bindings {
+    role: "role/buildbucket.triggerer"
+    principals: "group:project-chromium-tryjob-access"
+    principals: "group:service-account-chromeperf"
+    principals: "group:service-account-cq"
+    principals: "user:findit-for-me@appspot.gserviceaccount.com"
+    principals: "user:tricium-prod@appspot.gserviceaccount.com"
+  }
+}
+realms {
+  name: "try-m84"
+  bindings {
+    role: "role/buildbucket.builderServiceAccount"
+    principals: "user:chromium-try-builder@chops-service-accounts.iam.gserviceaccount.com"
+    principals: "user:chromium-try-gpu-builder@chops-service-accounts.iam.gserviceaccount.com"
+  }
+  bindings {
+    role: "role/buildbucket.owner"
+    principals: "group:service-account-chromium-tryserver"
+  }
+  bindings {
+    role: "role/buildbucket.reader"
+    principals: "group:all"
+  }
+  bindings {
+    role: "role/buildbucket.triggerer"
+    principals: "group:project-chromium-tryjob-access"
+    principals: "group:service-account-chromeperf"
+    principals: "group:service-account-cq"
+    principals: "user:findit-for-me@appspot.gserviceaccount.com"
+    principals: "user:tricium-prod@appspot.gserviceaccount.com"
+  }
+}
+realms {
+  name: "webrtc"
+  bindings {
+    role: "role/buildbucket.builderServiceAccount"
+    principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  }
+  bindings {
+    role: "role/buildbucket.owner"
+    principals: "group:google/luci-task-force@google.com"
+  }
+  bindings {
+    role: "role/buildbucket.reader"
+    principals: "group:all"
+  }
+  bindings {
+    role: "role/buildbucket.triggerer"
+    principals: "group:project-chromium-ci-schedulers"
+  }
+  bindings {
+    role: "role/scheduler.owner"
+    principals: "group:project-webrtc-admins"
+  }
+}
+realms {
+  name: "webrtc.fyi"
+  bindings {
+    role: "role/buildbucket.builderServiceAccount"
+    principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  }
+  bindings {
+    role: "role/buildbucket.owner"
+    principals: "group:google/luci-task-force@google.com"
+  }
+  bindings {
+    role: "role/buildbucket.reader"
+    principals: "group:all"
+  }
+  bindings {
+    role: "role/buildbucket.triggerer"
+    principals: "group:project-chromium-ci-schedulers"
+  }
+  bindings {
+    role: "role/scheduler.owner"
+    principals: "group:project-webrtc-admins"
+  }
+}