commit cca4832042c663500c13d583991a5c56282a630e
author Christoffer Jansson <jansson@webrtc.org> Mon Aug 22 06:20:11 2022
committer WebRTC LUCI CQ <webrtc-scoped@luci-project-accounts.iam.gserviceaccount.com> Mon Aug 22 06:39:39 2022
tree 695c8ac3e94dff708706cda737f7069c5bc5e68b
parent 3d01e68e708b65241090b8d8f77369b7430d6694

Add Weetbix realm ACL

Bug: b/239768873
Change-Id: I0b7f01a2bd2a74b1e71e0437142cda3d3a5ffce4
Reviewed-on: https://webrtc-review.googlesource.com/c/src/+/272365
Reviewed-by: Patrick Meiring <meiring@google.com>
Commit-Queue: Christoffer Jansson <jansson@webrtc.org>
Reviewed-by: Mirko Bonadei <mbonadei@webrtc.org>
Cr-Commit-Position: refs/heads/main@{#37858}

infra/config/config.star

diff --git a/infra/config/config.star b/infra/config/config.star
index ee602b0..a0a914c 100755
--- a/infra/config/config.star
+++ b/infra/config/config.star
@@ -112,6 +112,14 @@
                 "chromium-tester@chops-service-accounts.iam.gserviceaccount.com",
             ],
         ),
+        luci.binding(
+            roles = "role/weetbix.queryUser",
+            groups = "googlers",
+        ),
+        luci.binding(
+            roles = "role/weetbix.editor",
+            groups = "googlers",
+        ),
     ],
 )
 

infra/config/realms.cfg

diff --git a/infra/config/realms.cfg b/infra/config/realms.cfg
index 818c101..ba87dd5 100644
--- a/infra/config/realms.cfg
+++ b/infra/config/realms.cfg
@@ -54,6 +54,14 @@
     role: "role/swarming.taskTriggerer"
     principals: "group:project-webrtc-admins"
   }
+  bindings {
+    role: "role/weetbix.editor"
+    principals: "group:googlers"
+  }
+  bindings {
+    role: "role/weetbix.queryUser"
+    principals: "group:googlers"
+  }
 }
 realms {
   name: "ci"