go.chromium.org/luci@v0.0.0-20240309015107-7cdc2e660f33/lucicfg/testdata/scheduler/dedups_triggerer_acl.star (about)

     1  luci.project(
     2      name = "project",
     3      buildbucket = "cr-buildbucket.appspot.com",
     4      scheduler = "luci-scheduler.appspot.com",
     5      swarming = "chromium-swarm.appspot.com",
     6  )
     7  
     8  luci.recipe(
     9      name = "noop",
    10      cipd_package = "noop",
    11  )
    12  
    13  luci.bucket(name = "ci")
    14  
    15  luci.builder(
    16      name = "b1",
    17      bucket = "ci",
    18      executable = "noop",
    19      service_account = "account@example.com",
    20  )
    21  luci.builder(
    22      name = "b2",
    23      bucket = "ci",
    24      executable = "noop",
    25      service_account = "account@example.com",
    26  )
    27  
    28  luci.builder(
    29      name = "b3",
    30      bucket = "ci",
    31      executable = "noop",
    32      triggered_by = ["b1", "b2"],
    33  )
    34  
    35  # Expect configs:
    36  #
    37  # === cr-buildbucket.cfg
    38  # buckets {
    39  #   name: "ci"
    40  #   swarming {
    41  #     builders {
    42  #       name: "b1"
    43  #       swarming_host: "chromium-swarm.appspot.com"
    44  #       recipe {
    45  #         name: "noop"
    46  #         cipd_package: "noop"
    47  #         cipd_version: "refs/heads/main"
    48  #       }
    49  #       service_account: "account@example.com"
    50  #     }
    51  #     builders {
    52  #       name: "b2"
    53  #       swarming_host: "chromium-swarm.appspot.com"
    54  #       recipe {
    55  #         name: "noop"
    56  #         cipd_package: "noop"
    57  #         cipd_version: "refs/heads/main"
    58  #       }
    59  #       service_account: "account@example.com"
    60  #     }
    61  #     builders {
    62  #       name: "b3"
    63  #       swarming_host: "chromium-swarm.appspot.com"
    64  #       recipe {
    65  #         name: "noop"
    66  #         cipd_package: "noop"
    67  #         cipd_version: "refs/heads/main"
    68  #       }
    69  #     }
    70  #   }
    71  # }
    72  # ===
    73  #
    74  # === luci-scheduler.cfg
    75  # job {
    76  #   id: "b3"
    77  #   realm: "ci"
    78  #   acls {
    79  #     role: TRIGGERER
    80  #     granted_to: "account@example.com"
    81  #   }
    82  #   acl_sets: "ci"
    83  #   buildbucket {
    84  #     server: "cr-buildbucket.appspot.com"
    85  #     bucket: "luci.project.ci"
    86  #     builder: "b3"
    87  #   }
    88  # }
    89  # acl_sets {
    90  #   name: "ci"
    91  # }
    92  # ===
    93  #
    94  # === project.cfg
    95  # name: "project"
    96  # ===
    97  #
    98  # === realms.cfg
    99  # realms {
   100  #   name: "@root"
   101  # }
   102  # realms {
   103  #   name: "ci"
   104  #   bindings {
   105  #     role: "role/buildbucket.builderServiceAccount"
   106  #     principals: "user:account@example.com"
   107  #   }
   108  # }
   109  # ===