Reland: Enforce SignCLA

Change-Id: Ie3cbe413dc6ef042ddbfc5ee9244e6a19a71855e
diff --git a/groups b/groups
index fca0a30..0a7cf3c 100644
--- a/groups
+++ b/groups
@@ -1,15 +1,17 @@
-# UUID                                  	Group Name
+# UUID                                                        	Group Name
 #
-090e2829b3a2ff324d5c288f4c7bb82d3389fa8e	owners-override
-5bfa1e6d0fc0cd988605571affca89e60a7aa1a1	bot-commit-bots
-b8e19f14ecb618ea6c5d3dca892a7d80105ed6af	gerrit-submit-requirements-admins
-cria:project-dawn-committers            	cria/project-dawn-committers
-d88594eff8d639cb82d00cdda77f3ec69a8463a0	dawn-scoped@luci-project-accounts.iam.gserviceaccount.com
-e8a7a6ec5578b7b3fb664b063b34b1278f7409e2	tint-scoped@luci-project-accounts.iam.gserviceaccount.com
-global:Anonymous-Users                  	Anonymous Users
-global:Project-Owners                   	Project Owners
-global:Registered-Users                 	Registered Users
-mdb:chrome-git-admins                   	mdb/chrome-git-admins
-mdb:copybara-git-readers                	mdb/copybara-git-readers
-mdb:webgpu-dawn-admin                   	mdb/webgpu-dawn-admin
-mdb:webgpu-tint-admin                   	mdb/webgpu-tint-admin
+090e2829b3a2ff324d5c288f4c7bb82d3389fa8e			owners-override
+5bfa1e6d0fc0cd988605571affca89e60a7aa1a1			bot-commit-bots
+b8e19f14ecb618ea6c5d3dca892a7d80105ed6af			gerrit-submit-requirements-admins
+cria:project-dawn-committers            			cria/project-dawn-committers
+d88594eff8d639cb82d00cdda77f3ec69a8463a0			dawn-scoped@luci-project-accounts.iam.gserviceaccount.com
+e8a7a6ec5578b7b3fb664b063b34b1278f7409e2			tint-scoped@luci-project-accounts.iam.gserviceaccount.com
+global:Anonymous-Users                  			Anonymous Users
+global:Project-Owners                   			Project Owners
+global:Registered-Users                 			Registered Users
+google:AI2Pq9r_ksT_hfUOny8swsG8krQwPL5eOM0hGHf4QWGOPdy9igqsdhs	google/google-union:signcla
+mdb:chrome-git-admins                   			mdb/chrome-git-admins
+mdb:copybara-git-readers                			mdb/copybara-git-readers
+mdb:google-cla-gerrit-robot-accounts				mdb/google-cla-gerrit-robot-accounts
+mdb:webgpu-dawn-admin                   			mdb/webgpu-dawn-admin
+mdb:webgpu-tint-admin                   			mdb/webgpu-tint-admin
diff --git a/project.config b/project.config
index 0d0b684..29c26a4 100644
--- a/project.config
+++ b/project.config
@@ -5,6 +5,13 @@
 	requireSignedOffBy = false
 	requireChangeId = true
 	enableSignedPush = false
+[accounts]
+	sameGroupVisibility = deny group google/google-union:signcla
+[contributor-agreement "Google CLA"]
+	description = Google Contributor License Agreement
+	agreementUrl = static/cla.html
+	accepted = group google/google-union:signcla
+	accepted = group mdb/google-cla-gerrit-robot-accounts
 [submit]
 	mergeContent = true
 [access "refs/*"]