summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
author David Srbecky <dsrbecky@google.com> 2025-03-21 15:28:26 +0000
committer Treehugger Robot <android-test-infra-autosubmit@system.gserviceaccount.com> 2025-03-21 10:42:21 -0700
commit7ff689c7a1d5efc2dd5e05e66a57a614d136b24b (patch)
tree6ee7604af4209d8c51fa9cacc6107c77292a197b
parent89a9e799a810f3dfc26b88659517937ee2fff12a (diff)
Update LUCI config
Test: tools/luci/config/main.star Change-Id: Ie7c4ba4d23a202483ffd2daab47e7b80a38f7c39
-rw-r--r--tools/luci/config/generated/cr-buildbucket.cfg4
-rw-r--r--tools/luci/config/generated/luci-logdog.cfg2
-rw-r--r--tools/luci/config/generated/luci-scheduler.cfg2
-rw-r--r--tools/luci/config/generated/project.cfg4
-rw-r--r--tools/luci/config/generated/realms.cfg10
-rwxr-xr-xtools/luci/config/main.star5
6 files changed, 13 insertions, 14 deletions
diff --git a/tools/luci/config/generated/cr-buildbucket.cfg b/tools/luci/config/generated/cr-buildbucket.cfg
index fd7bfdaf48..cef584cf10 100644
--- a/tools/luci/config/generated/cr-buildbucket.cfg
+++ b/tools/luci/config/generated/cr-buildbucket.cfg
@@ -11,7 +11,7 @@ buckets {
group: "project-art-admins"
}
acls {
- group: "all"
+ group: "googlers"
}
swarming {
builders {
@@ -898,7 +898,7 @@ buckets {
group: "project-art-admins"
}
acls {
- group: "all"
+ group: "googlers"
}
constraints {
pools: "luci.art.ci"
diff --git a/tools/luci/config/generated/luci-logdog.cfg b/tools/luci/config/generated/luci-logdog.cfg
index 01a391261d..9d817a1e14 100644
--- a/tools/luci/config/generated/luci-logdog.cfg
+++ b/tools/luci/config/generated/luci-logdog.cfg
@@ -4,6 +4,6 @@
# For the schema of this file, see ProjectConfig message:
# https://config.luci.app/schemas/projects:luci-logdog.cfg
-reader_auth_groups: "all"
+reader_auth_groups: "googlers"
writer_auth_groups: "luci-logdog-chromium-writers"
archive_gs_bucket: "chromium-luci-logdog"
diff --git a/tools/luci/config/generated/luci-scheduler.cfg b/tools/luci/config/generated/luci-scheduler.cfg
index 4888f69517..a2b426ee19 100644
--- a/tools/luci/config/generated/luci-scheduler.cfg
+++ b/tools/luci/config/generated/luci-scheduler.cfg
@@ -439,6 +439,6 @@ acl_sets {
granted_to: "group:project-art-admins"
}
acls {
- granted_to: "group:all"
+ granted_to: "group:googlers"
}
}
diff --git a/tools/luci/config/generated/project.cfg b/tools/luci/config/generated/project.cfg
index 3a46212fd6..5619b9ab83 100644
--- a/tools/luci/config/generated/project.cfg
+++ b/tools/luci/config/generated/project.cfg
@@ -5,9 +5,9 @@
# https://config.luci.app/schemas/projects:project.cfg
name: "art"
-access: "group:all"
+access: "group:googlers"
lucicfg {
- version: "1.43.16"
+ version: "1.44.1"
package_dir: ".."
config_dir: "generated"
entry_point: "main.star"
diff --git a/tools/luci/config/generated/realms.cfg b/tools/luci/config/generated/realms.cfg
index d439ea168c..ade0991042 100644
--- a/tools/luci/config/generated/realms.cfg
+++ b/tools/luci/config/generated/realms.cfg
@@ -12,15 +12,15 @@ realms {
}
bindings {
role: "role/buildbucket.reader"
- principals: "group:all"
+ principals: "group:googlers"
}
bindings {
role: "role/configs.reader"
- principals: "group:all"
+ principals: "group:googlers"
}
bindings {
role: "role/logdog.reader"
- principals: "group:all"
+ principals: "group:googlers"
}
bindings {
role: "role/logdog.writer"
@@ -32,7 +32,7 @@ realms {
}
bindings {
role: "role/scheduler.reader"
- principals: "group:all"
+ principals: "group:googlers"
}
bindings {
role: "role/swarming.poolOwner"
@@ -44,7 +44,7 @@ realms {
}
bindings {
role: "role/swarming.poolViewer"
- principals: "group:all"
+ principals: "group:googlers"
}
bindings {
role: "role/swarming.taskTriggerer"
diff --git a/tools/luci/config/main.star b/tools/luci/config/main.star
index 2c530ba229..42ee495bbc 100755
--- a/tools/luci/config/main.star
+++ b/tools/luci/config/main.star
@@ -47,7 +47,6 @@ luci.project(
scheduler = "luci-scheduler.appspot.com",
swarming = "chromium-swarm.appspot.com",
acls = [
- # Publicly readable.
acl.entry(
roles = [
acl.BUILDBUCKET_READER,
@@ -55,7 +54,7 @@ luci.project(
acl.PROJECT_CONFIGS_READER,
acl.SCHEDULER_READER,
],
- groups = "all",
+ groups = "googlers",
),
acl.entry(
roles = [
@@ -76,7 +75,7 @@ luci.project(
),
luci.binding(
roles = "role/swarming.poolViewer",
- groups = "all",
+ groups = "googlers",
),
],
)