diff options
author | 2025-03-21 15:28:26 +0000 | |
---|---|---|
committer | 2025-03-21 10:42:21 -0700 | |
commit | 7ff689c7a1d5efc2dd5e05e66a57a614d136b24b (patch) | |
tree | 6ee7604af4209d8c51fa9cacc6107c77292a197b | |
parent | 89a9e799a810f3dfc26b88659517937ee2fff12a (diff) |
Update LUCI config
Test: tools/luci/config/main.star
Change-Id: Ie7c4ba4d23a202483ffd2daab47e7b80a38f7c39
-rw-r--r-- | tools/luci/config/generated/cr-buildbucket.cfg | 4 | ||||
-rw-r--r-- | tools/luci/config/generated/luci-logdog.cfg | 2 | ||||
-rw-r--r-- | tools/luci/config/generated/luci-scheduler.cfg | 2 | ||||
-rw-r--r-- | tools/luci/config/generated/project.cfg | 4 | ||||
-rw-r--r-- | tools/luci/config/generated/realms.cfg | 10 | ||||
-rwxr-xr-x | tools/luci/config/main.star | 5 |
6 files changed, 13 insertions, 14 deletions
diff --git a/tools/luci/config/generated/cr-buildbucket.cfg b/tools/luci/config/generated/cr-buildbucket.cfg index fd7bfdaf48..cef584cf10 100644 --- a/tools/luci/config/generated/cr-buildbucket.cfg +++ b/tools/luci/config/generated/cr-buildbucket.cfg @@ -11,7 +11,7 @@ buckets { group: "project-art-admins" } acls { - group: "all" + group: "googlers" } swarming { builders { @@ -898,7 +898,7 @@ buckets { group: "project-art-admins" } acls { - group: "all" + group: "googlers" } constraints { pools: "luci.art.ci" diff --git a/tools/luci/config/generated/luci-logdog.cfg b/tools/luci/config/generated/luci-logdog.cfg index 01a391261d..9d817a1e14 100644 --- a/tools/luci/config/generated/luci-logdog.cfg +++ b/tools/luci/config/generated/luci-logdog.cfg @@ -4,6 +4,6 @@ # For the schema of this file, see ProjectConfig message: # https://config.luci.app/schemas/projects:luci-logdog.cfg -reader_auth_groups: "all" +reader_auth_groups: "googlers" writer_auth_groups: "luci-logdog-chromium-writers" archive_gs_bucket: "chromium-luci-logdog" diff --git a/tools/luci/config/generated/luci-scheduler.cfg b/tools/luci/config/generated/luci-scheduler.cfg index 4888f69517..a2b426ee19 100644 --- a/tools/luci/config/generated/luci-scheduler.cfg +++ b/tools/luci/config/generated/luci-scheduler.cfg @@ -439,6 +439,6 @@ acl_sets { granted_to: "group:project-art-admins" } acls { - granted_to: "group:all" + granted_to: "group:googlers" } } diff --git a/tools/luci/config/generated/project.cfg b/tools/luci/config/generated/project.cfg index 3a46212fd6..5619b9ab83 100644 --- a/tools/luci/config/generated/project.cfg +++ b/tools/luci/config/generated/project.cfg @@ -5,9 +5,9 @@ # https://config.luci.app/schemas/projects:project.cfg name: "art" -access: "group:all" +access: "group:googlers" lucicfg { - version: "1.43.16" + version: "1.44.1" package_dir: ".." config_dir: "generated" entry_point: "main.star" diff --git a/tools/luci/config/generated/realms.cfg b/tools/luci/config/generated/realms.cfg index d439ea168c..ade0991042 100644 --- a/tools/luci/config/generated/realms.cfg +++ b/tools/luci/config/generated/realms.cfg @@ -12,15 +12,15 @@ realms { } bindings { role: "role/buildbucket.reader" - principals: "group:all" + principals: "group:googlers" } bindings { role: "role/configs.reader" - principals: "group:all" + principals: "group:googlers" } bindings { role: "role/logdog.reader" - principals: "group:all" + principals: "group:googlers" } bindings { role: "role/logdog.writer" @@ -32,7 +32,7 @@ realms { } bindings { role: "role/scheduler.reader" - principals: "group:all" + principals: "group:googlers" } bindings { role: "role/swarming.poolOwner" @@ -44,7 +44,7 @@ realms { } bindings { role: "role/swarming.poolViewer" - principals: "group:all" + principals: "group:googlers" } bindings { role: "role/swarming.taskTriggerer" diff --git a/tools/luci/config/main.star b/tools/luci/config/main.star index 2c530ba229..42ee495bbc 100755 --- a/tools/luci/config/main.star +++ b/tools/luci/config/main.star @@ -47,7 +47,6 @@ luci.project( scheduler = "luci-scheduler.appspot.com", swarming = "chromium-swarm.appspot.com", acls = [ - # Publicly readable. acl.entry( roles = [ acl.BUILDBUCKET_READER, @@ -55,7 +54,7 @@ luci.project( acl.PROJECT_CONFIGS_READER, acl.SCHEDULER_READER, ], - groups = "all", + groups = "googlers", ), acl.entry( roles = [ @@ -76,7 +75,7 @@ luci.project( ), luci.binding( roles = "role/swarming.poolViewer", - groups = "all", + groups = "googlers", ), ], ) |