Launch 5% of prod Buildbucket builds in "realms-aware mode".

It means Swarming will use ACLs defined in realms.cfg when
authorizing Buildbucket calls (this will eventually be default).

Enable realms-aware mode on 100% on cr-buildbucket-dev builds.

R=gbeaty@chromium.org
BUG=1136313

Change-Id: I3c4a6fd4d85c64310f30223abeeb199ef97af1fe
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2466488Reviewed-by: Garrett Beaty <gbeaty@chromium.org>
Commit-Queue: Vadim Shtayura <vadimsh@chromium.org>
Cr-Commit-Position: refs/heads/master@{#816356}

infra/config/dev/dev.star

@@ -54,6 +54,9 @@ luci.realm(
     ],
 )
 
+# Launch Swarming tasks in "realms-aware mode", crbug.com/1136313.
+luci.builder.defaults.experiments.set({"luci.use_realms": 100})
+
 exec("//dev/swarming.star")
 
 exec("//dev/subprojects/chromium/subproject.star")

infra/config/generated/cr-buildbucket-dev.cfg

@@ -39,6 +39,10 @@ buckets {
       execution_timeout_secs: 10800
       build_numbers: YES
       service_account: "chromium-ci-builder-dev@chops-service-accounts.iam.gserviceaccount.com"
+      experiments {
+        key: "luci.use_realms"
+        value: 100
+      }
       resultdb {
         enable: true
         bq_exports {
@@ -66,6 +70,10 @@ buckets {
       execution_timeout_secs: 10800
       build_numbers: YES
       service_account: "chromium-ci-builder-dev@chops-service-accounts.iam.gserviceaccount.com"
+      experiments {
+        key: "luci.use_realms"
+        value: 100
+      }
       resultdb {
         enable: true
         bq_exports {
@@ -93,6 +101,10 @@ buckets {
       execution_timeout_secs: 10800
       build_numbers: YES
       service_account: "chromium-ci-builder-dev@chops-service-accounts.iam.gserviceaccount.com"
+      experiments {
+        key: "luci.use_realms"
+        value: 100
+      }
       resultdb {
         enable: true
         bq_exports {
@@ -121,6 +133,10 @@ buckets {
       execution_timeout_secs: 10800
       build_numbers: YES
       service_account: "chromium-ci-builder-dev@chops-service-accounts.iam.gserviceaccount.com"
+      experiments {
+        key: "luci.use_realms"
+        value: 100
+      }
       resultdb {
         enable: true
         bq_exports {
@@ -148,6 +164,10 @@ buckets {
       execution_timeout_secs: 10800
       build_numbers: YES
       service_account: "chromium-ci-builder-dev@chops-service-accounts.iam.gserviceaccount.com"
+      experiments {
+        key: "luci.use_realms"
+        value: 100
+      }
       resultdb {
         enable: true
         bq_exports {
@@ -175,6 +195,10 @@ buckets {
       execution_timeout_secs: 10800
       build_numbers: YES
       service_account: "chromium-ci-builder-dev@chops-service-accounts.iam.gserviceaccount.com"
+      experiments {
+        key: "luci.use_realms"
+        value: 100
+      }
       resultdb {
         enable: true
         bq_exports {
@@ -202,6 +226,10 @@ buckets {
       execution_timeout_secs: 10800
       build_numbers: YES
       service_account: "chromium-ci-builder-dev@chops-service-accounts.iam.gserviceaccount.com"
+      experiments {
+        key: "luci.use_realms"
+        value: 100
+      }
       resultdb {
         enable: true
         bq_exports {

infra/config/main.star

@@ -118,6 +118,9 @@ luci.realm(
     ],
 )
 
+# Launch a portion of Swarming tasks in "realms-aware mode", crbug.com/1136313.
+luci.builder.defaults.experiments.set({"luci.use_realms": 5})
+
 exec("//swarming.star")
 
 exec("//recipes.star")