openstack/project-config
Code Issues Proposed changes
5153e232cd
project-config/gerrit/acls/pyca/project-config.config

14 lines
330 B
Plaintext
Raw Normal View History

Add pyca/project-config This is the project-config repo for the pyca CI tenant proposed in a follow-on I99759f107aaa99e87ddbe83eea462ff725d949ee. This gives us a place to do things in a trusted repo like store keys for uploading results to an API, etc. Change-Id: I52deb23eb0a60b92492a034f85dbaa736add2cf5
2020-07-27 11:09:34 +10:00
[access "refs/heads/*"]
abandon = group opendev-project-config-core
label-Code-Review = -2..+2 group opendev-project-config-core
label-Workflow = -1..+1 group opendev-project-config-core
[access "refs/tags/*"]
Work around signed tag regression from Gerrit 3.4 Upon upgrading from Gerrit 3.3 to 3.4, a regression was observed in which jgit no longer returns signatures in its tag messages, causing Gerrit to misidentify signed tags as unsigned (annotated) tags. Because our ACLs only allow signed tags to be pushed, this regression prevents Gerrit from accepting them now. Temporarily grant permission to push unsigned tags to anyone who has permission to push signed ones. We will revert that as soon as a fixed Gerrit is in place, but in the meantime users will be warned to take care when pushing tags so that they don't accidentally push actually unsigned tags to Gerrit. Also, the pushSignedTag keyword was deprecated in favor of the new createSignedTag name, so go ahead and update to that while we're doing this so that we can limit the amount of churn across all these ACLs. Documentation will be corrected to recommend the new format in a separate change, but update the ACL linter now to prevent the old syntax from being used in new projects. This workaround was already tested on opendev/bindep in the parent Iad8c1f83e247c9a8bcf5b4f530f7b83663e1f793 change, and confirmed to function as intended. Change-Id: Ia426ea36b4e6877fdce5725ff1e00ae02c62e3f4
2022-01-25 17:06:12 +00:00
createSignedTag = group opendev-project-config-release
Add pyca/project-config This is the project-config repo for the pyca CI tenant proposed in a follow-on I99759f107aaa99e87ddbe83eea462ff725d949ee. This gives us a place to do things in a trusted repo like store keys for uploading results to an API, etc. Change-Id: I52deb23eb0a60b92492a034f85dbaa736add2cf5
2020-07-27 11:09:34 +10:00
[receive]
requireChangeId = true
[submit]
mergeContent = true
Copy Permalink