Fix logdog
Bug: 193100371
Change-Id: Ie30ceef37990eb8100851ce2c87e1e10788f2e89
diff --git a/infra/config/global/generated/luci-logdog.cfg b/infra/config/global/generated/luci-logdog.cfg
new file mode 100644
index 0000000..57dada0
--- /dev/null
+++ b/infra/config/global/generated/luci-logdog.cfg
@@ -0,0 +1,9 @@
+# Auto-generated by lucicfg.
+# Do not modify manually.
+#
+# For the schema of this file, see ProjectConfig message:
+# https://luci-config.appspot.com/schemas/projects:luci-logdog.cfg
+
+reader_auth_groups: "all"
+writer_auth_groups: "luci-logdog-r8-writers"
+archive_gs_bucket: "logdog-r8-archive"
diff --git a/infra/config/global/generated/realms.cfg b/infra/config/global/generated/realms.cfg
index 269f014..de02ce6 100644
--- a/infra/config/global/generated/realms.cfg
+++ b/infra/config/global/generated/realms.cfg
@@ -24,6 +24,10 @@
principals: "group:all"
}
bindings {
+ role: "role/logdog.writer"
+ principals: "group:luci-logdog-r8-writers"
+ }
+ bindings {
role: "role/scheduler.owner"
principals: "group:project-r8-committers"
principals: "user:luci-scheduler@appspot.gserviceaccount.com"
diff --git a/infra/config/global/main.star b/infra/config/global/main.star
index f775c7d..6274213 100755
--- a/infra/config/global/main.star
+++ b/infra/config/global/main.star
@@ -41,7 +41,14 @@
"luci-scheduler@appspot.gserviceaccount.com"
]
),
-
+ acl.entry(
+ [
+ acl.LOGDOG_WRITER,
+ ],
+ groups = [
+ "luci-logdog-r8-writers"
+ ],
+ ),
],
bindings = [
luci.binding(
@@ -55,6 +62,9 @@
],
)
+luci.logdog(gs_bucket = "logdog-r8-archive")
+
+
# Allow the given users to use LUCI `led` tool and "Debug" button
# inside the given bucket & pool security realms.
def led_users(*, pool_realm, builder_realm, groups):
