From 9b2cd683aca725c0774738d8cc23ccfe2fa0c09d Mon Sep 17 00:00:00 2001 From: Brian Sheedy Date: Thu, 12 Sep 2024 19:40:49 +0000 Subject: [PATCH] Add new group to SCHEDULER_OWNERS Adds the new project-dawn-schedulers auth group to the list of groups with the SCHEDULER_OWNER role for Dawn builders. This should allow Dawn team members pause/trigger/etc. Dawn builders. Bug: 365624677 Change-Id: Ib7face69d7c0e28ceb00d4131e5aead23dc6e299 Reviewed-on: https://dawn-review.googlesource.com/c/dawn/+/206100 Reviewed-by: David Neto Commit-Queue: Brian Sheedy Auto-Submit: Brian Sheedy --- infra/config/global/generated/luci-scheduler.cfg | 4 ++++ infra/config/global/generated/realms.cfg | 1 + infra/config/global/main.star | 5 ++++- 3 files changed, 9 insertions(+), 1 deletion(-) diff --git a/infra/config/global/generated/luci-scheduler.cfg b/infra/config/global/generated/luci-scheduler.cfg index 28dc35c646b..f9f54f5fbd1 100644 --- a/infra/config/global/generated/luci-scheduler.cfg +++ b/infra/config/global/generated/luci-scheduler.cfg @@ -283,6 +283,10 @@ acl_sets { role: OWNER granted_to: "group:project-dawn-admins" } + acls { + role: OWNER + granted_to: "group:project-dawn-schedulers" + } acls { granted_to: "group:all" } diff --git a/infra/config/global/generated/realms.cfg b/infra/config/global/generated/realms.cfg index 5292f13403d..3155cab3f63 100644 --- a/infra/config/global/generated/realms.cfg +++ b/infra/config/global/generated/realms.cfg @@ -29,6 +29,7 @@ realms { bindings { role: "role/scheduler.owner" principals: "group:project-dawn-admins" + principals: "group:project-dawn-schedulers" } bindings { role: "role/scheduler.reader" diff --git a/infra/config/global/main.star b/infra/config/global/main.star index 9a8d175168b..42af106c07a 100755 --- a/infra/config/global/main.star +++ b/infra/config/global/main.star @@ -61,7 +61,10 @@ luci.project( roles = [ acl.SCHEDULER_OWNER, ], - groups = "project-dawn-admins", + groups = [ + "project-dawn-admins", + "project-dawn-schedulers", + ], ), acl.entry( roles = [