From 95e1e6bb142043b36034d7bca014747527980dae Mon Sep 17 00:00:00 2001 From: Yuanjun Huang Date: Mon, 2 May 2022 15:11:32 -0700 Subject: [PATCH] [Config] Add service accounts for the example builder Bug:1300370 Change-Id: Ie8a3260c8539ea1aea736cc0f4bb4bfd61ac5871 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3622237 Reviewed-by: Dennis Kempin Tested-by: kokoro Commit-Queue: Yuanjun Huang --- infra/config/generated/cr-buildbucket.cfg | 1 + infra/config/generated/realms.cfg | 4 ++++ infra/config/main.star | 1 + 3 files changed, 6 insertions(+) diff --git a/infra/config/generated/cr-buildbucket.cfg b/infra/config/generated/cr-buildbucket.cfg index d4d54aafff..67556497e1 100644 --- a/infra/config/generated/cr-buildbucket.cfg +++ b/infra/config/generated/cr-buildbucket.cfg @@ -26,6 +26,7 @@ buckets { '{' ' "recipe": "hello_world"' '}' + service_account: "crosvm-luci-ci-builder@crosvm-infra.iam.gserviceaccount.com" experiments { key: "luci.recipes.use_python3" value: 100 diff --git a/infra/config/generated/realms.cfg b/infra/config/generated/realms.cfg index 2cf7abd533..62221125a9 100644 --- a/infra/config/generated/realms.cfg +++ b/infra/config/generated/realms.cfg @@ -57,6 +57,10 @@ realms { } realms { name: "ci" + bindings { + role: "role/buildbucket.builderServiceAccount" + principals: "user:crosvm-luci-ci-builder@crosvm-infra.iam.gserviceaccount.com" + } bindings { role: "role/buildbucket.triggerer" principals: "group:mdb/crosvm-acl-luci-admin" diff --git a/infra/config/main.star b/infra/config/main.star index b29e239a28..152bd658c1 100755 --- a/infra/config/main.star +++ b/infra/config/main.star @@ -122,4 +122,5 @@ luci.builder( name = "hello_world", ), schedule = "with 1m interval", + service_account = "crosvm-luci-ci-builder@crosvm-infra.iam.gserviceaccount.com", )