GitLab

lucicfg does not allow for arbitrarily settings ACLs on jobs and
triggers, instead triggers get the scheduler ACLs for the associated
bucket and ACLs for jobs are based on what is necessary for whatever
triggers it. Segmenting the parent trigger ACLs based on what the
service account of the parent is matches what will be produced by
lucicfg. This avoids adding additional ACLs to a large portion of the
builders.

Bug: 1011908
Change-Id: I8a2b3309016c58b27da929abd4dce5c82abff9c3
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2031186Reviewed-by: Aaron Gable <agable@chromium.org>
Commit-Queue: Garrett Beaty <gbeaty@chromium.org>
Cr-Commit-Position: refs/heads/master@{#736946}