diff options
author | 2025-03-21 11:17:49 -0700 | |
---|---|---|
committer | 2025-03-21 11:17:49 -0700 | |
commit | 4f2593215afb9bef39d6be8dc032f19e697a9d34 (patch) | |
tree | b03cff1dab53bf4f1ac244404cc800c432809838 | |
parent | 564b36d089bad350080ea47fad98d3baeb01c3d2 (diff) | |
parent | 7ff689c7a1d5efc2dd5e05e66a57a614d136b24b (diff) |
Update LUCI config am: 7ff689c7a1
Original change: https://android-review.googlesource.com/c/platform/art/+/3556803
Change-Id: I3fdaf2e66e7bb94c6a3168ae0d1ee612d15facae
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
-rw-r--r-- | tools/luci/config/generated/cr-buildbucket.cfg | 4 | ||||
-rw-r--r-- | tools/luci/config/generated/luci-logdog.cfg | 2 | ||||
-rw-r--r-- | tools/luci/config/generated/luci-scheduler.cfg | 2 | ||||
-rw-r--r-- | tools/luci/config/generated/project.cfg | 4 | ||||
-rw-r--r-- | tools/luci/config/generated/realms.cfg | 10 | ||||
-rwxr-xr-x | tools/luci/config/main.star | 5 |
6 files changed, 13 insertions, 14 deletions
diff --git a/tools/luci/config/generated/cr-buildbucket.cfg b/tools/luci/config/generated/cr-buildbucket.cfg index fd7bfdaf48..cef584cf10 100644 --- a/tools/luci/config/generated/cr-buildbucket.cfg +++ b/tools/luci/config/generated/cr-buildbucket.cfg @@ -11,7 +11,7 @@ buckets { group: "project-art-admins" } acls { - group: "all" + group: "googlers" } swarming { builders { @@ -898,7 +898,7 @@ buckets { group: "project-art-admins" } acls { - group: "all" + group: "googlers" } constraints { pools: "luci.art.ci" diff --git a/tools/luci/config/generated/luci-logdog.cfg b/tools/luci/config/generated/luci-logdog.cfg index 01a391261d..9d817a1e14 100644 --- a/tools/luci/config/generated/luci-logdog.cfg +++ b/tools/luci/config/generated/luci-logdog.cfg @@ -4,6 +4,6 @@ # For the schema of this file, see ProjectConfig message: # https://config.luci.app/schemas/projects:luci-logdog.cfg -reader_auth_groups: "all" +reader_auth_groups: "googlers" writer_auth_groups: "luci-logdog-chromium-writers" archive_gs_bucket: "chromium-luci-logdog" diff --git a/tools/luci/config/generated/luci-scheduler.cfg b/tools/luci/config/generated/luci-scheduler.cfg index 4888f69517..a2b426ee19 100644 --- a/tools/luci/config/generated/luci-scheduler.cfg +++ b/tools/luci/config/generated/luci-scheduler.cfg @@ -439,6 +439,6 @@ acl_sets { granted_to: "group:project-art-admins" } acls { - granted_to: "group:all" + granted_to: "group:googlers" } } diff --git a/tools/luci/config/generated/project.cfg b/tools/luci/config/generated/project.cfg index 3a46212fd6..5619b9ab83 100644 --- a/tools/luci/config/generated/project.cfg +++ b/tools/luci/config/generated/project.cfg @@ -5,9 +5,9 @@ # https://config.luci.app/schemas/projects:project.cfg name: "art" -access: "group:all" +access: "group:googlers" lucicfg { - version: "1.43.16" + version: "1.44.1" package_dir: ".." config_dir: "generated" entry_point: "main.star" diff --git a/tools/luci/config/generated/realms.cfg b/tools/luci/config/generated/realms.cfg index d439ea168c..ade0991042 100644 --- a/tools/luci/config/generated/realms.cfg +++ b/tools/luci/config/generated/realms.cfg @@ -12,15 +12,15 @@ realms { } bindings { role: "role/buildbucket.reader" - principals: "group:all" + principals: "group:googlers" } bindings { role: "role/configs.reader" - principals: "group:all" + principals: "group:googlers" } bindings { role: "role/logdog.reader" - principals: "group:all" + principals: "group:googlers" } bindings { role: "role/logdog.writer" @@ -32,7 +32,7 @@ realms { } bindings { role: "role/scheduler.reader" - principals: "group:all" + principals: "group:googlers" } bindings { role: "role/swarming.poolOwner" @@ -44,7 +44,7 @@ realms { } bindings { role: "role/swarming.poolViewer" - principals: "group:all" + principals: "group:googlers" } bindings { role: "role/swarming.taskTriggerer" diff --git a/tools/luci/config/main.star b/tools/luci/config/main.star index 2c530ba229..42ee495bbc 100755 --- a/tools/luci/config/main.star +++ b/tools/luci/config/main.star @@ -47,7 +47,6 @@ luci.project( scheduler = "luci-scheduler.appspot.com", swarming = "chromium-swarm.appspot.com", acls = [ - # Publicly readable. acl.entry( roles = [ acl.BUILDBUCKET_READER, @@ -55,7 +54,7 @@ luci.project( acl.PROJECT_CONFIGS_READER, acl.SCHEDULER_READER, ], - groups = "all", + groups = "googlers", ), acl.entry( roles = [ @@ -76,7 +75,7 @@ luci.project( ), luci.binding( roles = "role/swarming.poolViewer", - groups = "all", + groups = "googlers", ), ], ) |