Add new group to SCHEDULER_OWNERS
Adds the new project-dawn-schedulers auth group to the list of
groups with the SCHEDULER_OWNER role for Dawn builders. This should
allow Dawn team members pause/trigger/etc. Dawn builders.
Bug: 365624677
Change-Id: Ib7face69d7c0e28ceb00d4131e5aead23dc6e299
Reviewed-on: https://dawn-review.googlesource.com/c/dawn/+/206100
Reviewed-by: David Neto <dneto@google.com>
Commit-Queue: Brian Sheedy <bsheedy@google.com>
Auto-Submit: Brian Sheedy <bsheedy@google.com>
diff --git a/infra/config/global/generated/luci-scheduler.cfg b/infra/config/global/generated/luci-scheduler.cfg
index 28dc35c..f9f54f5 100644
--- a/infra/config/global/generated/luci-scheduler.cfg
+++ b/infra/config/global/generated/luci-scheduler.cfg
@@ -284,6 +284,10 @@
granted_to: "group:project-dawn-admins"
}
acls {
+ role: OWNER
+ granted_to: "group:project-dawn-schedulers"
+ }
+ acls {
granted_to: "group:all"
}
}
diff --git a/infra/config/global/generated/realms.cfg b/infra/config/global/generated/realms.cfg
index 5292f13..3155cab 100644
--- a/infra/config/global/generated/realms.cfg
+++ b/infra/config/global/generated/realms.cfg
@@ -29,6 +29,7 @@
bindings {
role: "role/scheduler.owner"
principals: "group:project-dawn-admins"
+ principals: "group:project-dawn-schedulers"
}
bindings {
role: "role/scheduler.reader"
diff --git a/infra/config/global/main.star b/infra/config/global/main.star
index 9a8d175..42af106 100755
--- a/infra/config/global/main.star
+++ b/infra/config/global/main.star
@@ -61,7 +61,10 @@
roles = [
acl.SCHEDULER_OWNER,
],
- groups = "project-dawn-admins",
+ groups = [
+ "project-dawn-admins",
+ "project-dawn-schedulers",
+ ],
),
acl.entry(
roles = [
