Add findit account to project-chromium-ci-task-accounts auth group |
||||
Issue descriptionNeeded to fix: https://luci-scheduler.appspot.com/jobs/chromium/export-bot-db-to-findit-gs Findit's service account for builder linux_chromium_bot_db_exporter under the luci.chromium.ci bucket: findit-builder@chops-service-accounts.iam.gserviceaccount.com
,
Jul 18
I misread that, you want findit task account in luci.chromium.ci bucket. that's a chrome-infra-auth change.
,
Jul 18
Added, try again.
,
Jul 18
So it turns out a task account can't belong to more than one pool, since it defeats all sort of assumptions. Explanation here: https://chrome-internal.googlesource.com/infradata/config/+/master/configs/luci-token-server/service_accounts.cfg#6 Can you move linux_chromium_bot_db_exporter to one of the findit buckets?
,
Jul 18
An account can be shared by multiple pools, but it is undesirable (if avoidable). Let me know if its absolutely impossible to move linux_chromium_bot_db_exporter to findit bucket, I'll help with setting up account sharing. Another option it just to use chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com account already present on chromium.ci pool.
,
Aug 17
|
||||
►
Sign in to add a comment |
||||
Comment 1 by hinoka@chromium.org
, Jul 18