commit fe32bcbe7af6b1f7b71cd88158ecaa7e0f1a5d3e
author Austin Eng <enga@chromium.org> Wed Aug 16 21:08:14 2023 +0000
committer Dawn LUCI CQ <dawn-scoped@luci-project-accounts.iam.gserviceaccount.com> Wed Aug 16 21:08:14 2023 +0000
tree b30736ff82e710e626d2d8bf8d6f3d7ec458059d
parent 7803cd75ecd62a1ec7d6dc479d558ae84640fc44

Add taskServiceAccount role to dawn-automated-expectations@

Bug: dawn:1940
Change-Id: I8275f8e5267144f932a54a816a4a6084e469523d
Reviewed-on: https://dawn-review.googlesource.com/c/dawn/+/147263
Kokoro: Austin Eng <enga@chromium.org>
Commit-Queue: Austin Eng <enga@chromium.org>
Reviewed-by: Ryan Harrison <rharrison@chromium.org>

infra/config/global/generated/realms.cfg

diff --git a/infra/config/global/generated/realms.cfg b/infra/config/global/generated/realms.cfg
index 94dd87b..2c301b0 100644
--- a/infra/config/global/generated/realms.cfg
+++ b/infra/config/global/generated/realms.cfg
@@ -34,6 +34,10 @@
     role: "role/scheduler.reader"
     principals: "group:all"
   }
+  bindings {
+    role: "role/swarming.taskServiceAccount"
+    principals: "user:dawn-automated-expectations@chops-service-accounts.iam.gserviceaccount.com"
+  }
 }
 realms {
   name: "ci"

infra/config/global/main.star

diff --git a/infra/config/global/main.star b/infra/config/global/main.star
index c91ff52..c7d9104 100755
--- a/infra/config/global/main.star
+++ b/infra/config/global/main.star
@@ -51,6 +51,10 @@
             roles = "role/configs.validator",
             users = "dawn-try-builder@chops-service-accounts.iam.gserviceaccount.com",
         ),
+        luci.binding(
+            roles = "role/swarming.taskServiceAccount",
+            users = "dawn-automated-expectations@chops-service-accounts.iam.gserviceaccount.com",
+        ),
     ],
 )