Make led usable for gn tryjob

This allows people in
https://chrome-infra-auth.appspot.com/auth/groups/flex-try-led-users
schedule CQ job by using led.

This is to debug gn recipe change.

Bug: 283
Change-Id: I326dd1f465226fb787d5130d20768ea7ad73e167
Reviewed-on: https://gn-review.googlesource.com/c/gn/+/13442
Reviewed-by: Petr Hosek <phosek@google.com>
Commit-Queue: Takuto Ikuta <tikuta@google.com>
diff --git a/infra/config/generated/project.cfg b/infra/config/generated/project.cfg
index 8680f97..764450f 100644
--- a/infra/config/generated/project.cfg
+++ b/infra/config/generated/project.cfg
@@ -7,7 +7,7 @@
 name: "gn"
 access: "group:all"
 lucicfg {
-  version: "1.30.9"
+  version: "1.30.11"
   package_dir: ".."
   config_dir: "generated"
   entry_point: "main.star"
diff --git a/infra/config/generated/realms.cfg b/infra/config/generated/realms.cfg
index ed90980..54791e9 100644
--- a/infra/config/generated/realms.cfg
+++ b/infra/config/generated/realms.cfg
@@ -49,4 +49,8 @@
     principals: "group:project-gn-tryjob-access"
     principals: "group:service-account-cq"
   }
+  bindings {
+    role: "role/swarming.taskTriggerer"
+    principals: "group:flex-try-led-users"
+  }
 }
diff --git a/infra/config/main.star b/infra/config/main.star
index d440d03..7985762 100755
--- a/infra/config/main.star
+++ b/infra/config/main.star
@@ -135,6 +135,12 @@
     ),
 ])
 
+luci.binding(
+    realm = "try",
+    roles = "role/swarming.taskTriggerer",
+    groups = "flex-try-led-users",
+)
+
 def try_builder(name, os, caches = None):
     builder(name, "try", os, caches)
     luci.cq_tryjob_verifier(