Add triggerer ACL to android device tester no-op jobs

I mistakenly thought that the "ci" acl_set granted this
triggerer permission. It doesn't, so the triggerer
permission has to be granted separately.

Bug: 1057074
No-Try: True
Change-Id: Ie9fb7270ff76eda2ee4b946bd1f79e94fd4f0178
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2080196
Commit-Queue: Aaron Gable <agable@chromium.org>
Commit-Queue: Garrett Beaty <gbeaty@chromium.org>
Auto-Submit: Aaron Gable <agable@chromium.org>
Reviewed-by: Garrett Beaty <gbeaty@chromium.org>
Cr-Commit-Position: refs/heads/master@{#745512}

infra/config/generated/luci-scheduler.cfg

@@ -6114,72 +6114,120 @@ job: <
 job: <
   id: "ci-beta-Android WebView L (dbg)"
   schedule: "triggered"
+  acls: <
+    role: TRIGGERER
+    granted_to: "chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  >
   acl_sets: "ci-beta"
   noop: <>
 >
 job: <
   id: "ci-stable-Android WebView L (dbg)"
   schedule: "triggered"
+  acls: <
+    role: TRIGGERER
+    granted_to: "chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  >
   acl_sets: "ci-stable"
   noop: <>
 >
 job: <
   id: "ci-beta-KitKat Phone Tester (dbg)"
   schedule: "triggered"
+  acls: <
+    role: TRIGGERER
+    granted_to: "chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  >
   acl_sets: "ci-beta"
   noop: <>
 >
 job: <
   id: "ci-stable-KitKat Phone Tester (dbg)"
   schedule: "triggered"
+  acls: <
+    role: TRIGGERER
+    granted_to: "chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  >
   acl_sets: "ci-stable"
   noop: <>
 >
 job: <
   id: "ci-beta-KitKat Tablet Tester"
   schedule: "triggered"
+  acls: <
+    role: TRIGGERER
+    granted_to: "chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  >
   acl_sets: "ci-beta"
   noop: <>
 >
 job: <
   id: "ci-stable-KitKat Tablet Tester"
   schedule: "triggered"
+  acls: <
+    role: TRIGGERER
+    granted_to: "chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  >
   acl_sets: "ci-stable"
   noop: <>
 >
 job: <
   id: "ci-beta-Lollipop Phone Tester"
   schedule: "triggered"
+  acls: <
+    role: TRIGGERER
+    granted_to: "chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  >
   acl_sets: "ci-beta"
   noop: <>
 >
 job: <
   id: "ci-stable-Lollipop Phone Tester"
   schedule: "triggered"
+  acls: <
+    role: TRIGGERER
+    granted_to: "chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  >
   acl_sets: "ci-stable"
   noop: <>
 >
 job: <
   id: "ci-beta-Lollipop Tablet Tester"
   schedule: "triggered"
+  acls: <
+    role: TRIGGERER
+    granted_to: "chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  >
   acl_sets: "ci-beta"
   noop: <>
 >
 job: <
   id: "ci-stable-Lollipop Tablet Tester"
   schedule: "triggered"
+  acls: <
+    role: TRIGGERER
+    granted_to: "chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  >
   acl_sets: "ci-stable"
   noop: <>
 >
 job: <
   id: "ci-beta-Marshmallow Tablet Tester"
   schedule: "triggered"
+  acls: <
+    role: TRIGGERER
+    granted_to: "chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  >
   acl_sets: "ci-beta"
   noop: <>
 >
 job: <
   id: "ci-stable-Marshmallow Tablet Tester"
   schedule: "triggered"
+  acls: <
+    role: TRIGGERER
+    granted_to: "chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com"
+  >
   acl_sets: "ci-stable"
   noop: <>
 >

infra/config/generators/scheduler-noop-jobs.star

@@ -42,6 +42,10 @@ _ANDROID_TEST_NOOP_JOBS = [scheduler_pb.Job(
     id = bucket + '-' + builder,
     schedule = 'triggered',
     acl_sets = [bucket],
+    acls = [scheduler_pb.Acl(
+        role = scheduler_pb.Acl.TRIGGERER,
+        granted_to = 'chromium-ci-builder@chops-service-accounts.iam.gserviceaccount.com',
+    )],
     noop = scheduler_pb.NoopTask(),
 ) for builder in _ANDROID_NON_BRANCHED_TESTERS for bucket in (
     'ci-beta',