Allow findit to trigger tasks in chromium:ci realm.

Bug: 1155403
Change-Id: Ic0180a304fd0b5bcc460834e4914e3a4717b22d6
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2589198
Auto-Submit: Joey Scarr <jsca@chromium.org>
Commit-Queue: Garrett Beaty <gbeaty@chromium.org>
Reviewed-by: Garrett Beaty <gbeaty@chromium.org>
Cr-Commit-Position: refs/heads/master@{#836654}

infra/config/generated/realms.cfg

@@ -75,6 +75,7 @@ realms {
   bindings {
     role: "role/swarming.taskTriggerer"
     principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+    principals: "user:findit-for-me@appspot.gserviceaccount.com"
   }
 }
 realms {
@@ -144,6 +145,7 @@ realms {
     principals: "project:chromium-m87"
     principals: "project:chromium-m88"
     principals: "user:chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+    principals: "user:findit-for-me@appspot.gserviceaccount.com"
   }
 }
 realms {

infra/config/swarming.star

@@ -64,7 +64,12 @@ swarming.pool_realm(
 swarming.task_triggerers(
     builder_realm = "ci",
     pool_realm = "pools/ci",
-    users = ["chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"],
+    users = [
+        "chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com",
+
+        # Used by Findit to re-run swarming tasks for bisection purposes.
+        "findit-for-me@appspot.gserviceaccount.com",
+    ],
 )
 
 # Realm with bots that run try builds.