| commit | 4fb5748ffc4141724a18084e5293cbc51d2812ab | [log] [tgz] |
|---|---|---|
| author | Rico Wind <ricow@google.com> | Mon Sep 27 18:28:27 2021 +0200 |
| committer | Rico Wind <ricow@google.com> | Mon Sep 27 18:28:27 2021 +0200 |
| tree | 4f0e3343a1c1931769f479444027ac0f1d6fb937 | |
| parent | 49a6bfe9db50543643ac2b82d48372046e6feee7 [diff] |
Fix scheduler owner Bug: 193100371 Change-Id: I21575f8c5d3f9e20bb65bf267cccb06d513133dc
diff --git a/infra/config/global/generated/luci-scheduler.cfg b/infra/config/global/generated/luci-scheduler.cfg index 3b8e7b9..7a816ee 100644 --- a/infra/config/global/generated/luci-scheduler.cfg +++ b/infra/config/global/generated/luci-scheduler.cfg
@@ -534,6 +534,14 @@ acl_sets { name: "ci" acls { + role: OWNER + granted_to: "luci-scheduler@appspot.gserviceaccount.com" + } + acls { + role: OWNER + granted_to: "group:project-r8-committers" + } + acls { granted_to: "group:all" } }
diff --git a/infra/config/global/generated/realms.cfg b/infra/config/global/generated/realms.cfg index 07dbef1..269f014 100644 --- a/infra/config/global/generated/realms.cfg +++ b/infra/config/global/generated/realms.cfg
@@ -24,6 +24,11 @@ principals: "group:all" } bindings { + role: "role/scheduler.owner" + principals: "group:project-r8-committers" + principals: "user:luci-scheduler@appspot.gserviceaccount.com" + } + bindings { role: "role/scheduler.reader" principals: "group:all" }
diff --git a/infra/config/global/main.star b/infra/config/global/main.star index 2c24c87..f775c7d 100755 --- a/infra/config/global/main.star +++ b/infra/config/global/main.star
@@ -31,6 +31,8 @@ acl.entry( [ acl.BUILDBUCKET_TRIGGERER, + acl.SCHEDULER_OWNER, + ], groups = [ "project-r8-committers"