summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
author David Srbecky <dsrbecky@google.com> 2025-03-21 11:17:49 -0700
committer Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com> 2025-03-21 11:17:49 -0700
commit4f2593215afb9bef39d6be8dc032f19e697a9d34 (patch)
treeb03cff1dab53bf4f1ac244404cc800c432809838
parent564b36d089bad350080ea47fad98d3baeb01c3d2 (diff)
parent7ff689c7a1d5efc2dd5e05e66a57a614d136b24b (diff)
Update LUCI config am: 7ff689c7a1
Original change: https://android-review.googlesource.com/c/platform/art/+/3556803 Change-Id: I3fdaf2e66e7bb94c6a3168ae0d1ee612d15facae Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
-rw-r--r--tools/luci/config/generated/cr-buildbucket.cfg4
-rw-r--r--tools/luci/config/generated/luci-logdog.cfg2
-rw-r--r--tools/luci/config/generated/luci-scheduler.cfg2
-rw-r--r--tools/luci/config/generated/project.cfg4
-rw-r--r--tools/luci/config/generated/realms.cfg10
-rwxr-xr-xtools/luci/config/main.star5
6 files changed, 13 insertions, 14 deletions
diff --git a/tools/luci/config/generated/cr-buildbucket.cfg b/tools/luci/config/generated/cr-buildbucket.cfg
index fd7bfdaf48..cef584cf10 100644
--- a/tools/luci/config/generated/cr-buildbucket.cfg
+++ b/tools/luci/config/generated/cr-buildbucket.cfg
@@ -11,7 +11,7 @@ buckets {
group: "project-art-admins"
}
acls {
- group: "all"
+ group: "googlers"
}
swarming {
builders {
@@ -898,7 +898,7 @@ buckets {
group: "project-art-admins"
}
acls {
- group: "all"
+ group: "googlers"
}
constraints {
pools: "luci.art.ci"
diff --git a/tools/luci/config/generated/luci-logdog.cfg b/tools/luci/config/generated/luci-logdog.cfg
index 01a391261d..9d817a1e14 100644
--- a/tools/luci/config/generated/luci-logdog.cfg
+++ b/tools/luci/config/generated/luci-logdog.cfg
@@ -4,6 +4,6 @@
# For the schema of this file, see ProjectConfig message:
# https://config.luci.app/schemas/projects:luci-logdog.cfg
-reader_auth_groups: "all"
+reader_auth_groups: "googlers"
writer_auth_groups: "luci-logdog-chromium-writers"
archive_gs_bucket: "chromium-luci-logdog"
diff --git a/tools/luci/config/generated/luci-scheduler.cfg b/tools/luci/config/generated/luci-scheduler.cfg
index 4888f69517..a2b426ee19 100644
--- a/tools/luci/config/generated/luci-scheduler.cfg
+++ b/tools/luci/config/generated/luci-scheduler.cfg
@@ -439,6 +439,6 @@ acl_sets {
granted_to: "group:project-art-admins"
}
acls {
- granted_to: "group:all"
+ granted_to: "group:googlers"
}
}
diff --git a/tools/luci/config/generated/project.cfg b/tools/luci/config/generated/project.cfg
index 3a46212fd6..5619b9ab83 100644
--- a/tools/luci/config/generated/project.cfg
+++ b/tools/luci/config/generated/project.cfg
@@ -5,9 +5,9 @@
# https://config.luci.app/schemas/projects:project.cfg
name: "art"
-access: "group:all"
+access: "group:googlers"
lucicfg {
- version: "1.43.16"
+ version: "1.44.1"
package_dir: ".."
config_dir: "generated"
entry_point: "main.star"
diff --git a/tools/luci/config/generated/realms.cfg b/tools/luci/config/generated/realms.cfg
index d439ea168c..ade0991042 100644
--- a/tools/luci/config/generated/realms.cfg
+++ b/tools/luci/config/generated/realms.cfg
@@ -12,15 +12,15 @@ realms {
}
bindings {
role: "role/buildbucket.reader"
- principals: "group:all"
+ principals: "group:googlers"
}
bindings {
role: "role/configs.reader"
- principals: "group:all"
+ principals: "group:googlers"
}
bindings {
role: "role/logdog.reader"
- principals: "group:all"
+ principals: "group:googlers"
}
bindings {
role: "role/logdog.writer"
@@ -32,7 +32,7 @@ realms {
}
bindings {
role: "role/scheduler.reader"
- principals: "group:all"
+ principals: "group:googlers"
}
bindings {
role: "role/swarming.poolOwner"
@@ -44,7 +44,7 @@ realms {
}
bindings {
role: "role/swarming.poolViewer"
- principals: "group:all"
+ principals: "group:googlers"
}
bindings {
role: "role/swarming.taskTriggerer"
diff --git a/tools/luci/config/main.star b/tools/luci/config/main.star
index 2c530ba229..42ee495bbc 100755
--- a/tools/luci/config/main.star
+++ b/tools/luci/config/main.star
@@ -47,7 +47,6 @@ luci.project(
scheduler = "luci-scheduler.appspot.com",
swarming = "chromium-swarm.appspot.com",
acls = [
- # Publicly readable.
acl.entry(
roles = [
acl.BUILDBUCKET_READER,
@@ -55,7 +54,7 @@ luci.project(
acl.PROJECT_CONFIGS_READER,
acl.SCHEDULER_READER,
],
- groups = "all",
+ groups = "googlers",
),
acl.entry(
roles = [
@@ -76,7 +75,7 @@ luci.project(
),
luci.binding(
roles = "role/swarming.poolViewer",
- groups = "all",
+ groups = "googlers",
),
],
)