Add new group to SCHEDULER_OWNERS

Adds the new project-dawn-schedulers auth group to the list of groups with the SCHEDULER_OWNER role for Dawn builders. This should allow Dawn team members pause/trigger/etc. Dawn builders. Bug: 365624677 Change-Id: Ib7face69d7c0e28ceb00d4131e5aead23dc6e299 Reviewed-on: https://dawn-review.googlesource.com/c/dawn/+/206100 Reviewed-by: David Neto <[email protected]> Commit-Queue: Brian Sheedy <[email protected]> Auto-Submit: Brian Sheedy <[email protected]>
google · Sep 12, 2024 · 9b2cd68 · 9b2cd68
1 parent 59c9377
commit 9b2cd68
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 1 deletion.
diff --git a/infra/config/global/generated/luci-scheduler.cfg b/infra/config/global/generated/luci-scheduler.cfg
@@ -283,6 +283,10 @@ acl_sets {
     role: OWNER
     granted_to: "group:project-dawn-admins"
   }
+  acls {
+    role: OWNER
+    granted_to: "group:project-dawn-schedulers"
+  }
   acls {
     granted_to: "group:all"
   }

diff --git a/infra/config/global/generated/realms.cfg b/infra/config/global/generated/realms.cfg
@@ -29,6 +29,7 @@ realms {
   bindings {
     role: "role/scheduler.owner"
     principals: "group:project-dawn-admins"
+    principals: "group:project-dawn-schedulers"
   }
   bindings {
     role: "role/scheduler.reader"

diff --git a/infra/config/global/main.star b/infra/config/global/main.star
@@ -61,7 +61,10 @@ luci.project(
             roles = [
                 acl.SCHEDULER_OWNER,
             ],
-            groups = "project-dawn-admins",
+            groups = [
+                "project-dawn-admins",
+                "project-dawn-schedulers",
+            ],
         ),
         acl.entry(
             roles = [