per-project -core and -release groups for Fuel

As agreed on openstack-dev [0], we need separate core reviewers groups
for Fuel repositories. This commit adds fuel-specs-core group, restricts
release actions from core groups to the fuel-release group, and replaces
refs/heads/stable/* pattern with explicit mention of stable/7.0 branch
for fuel-mirror.

That last bit is necessary since we have a time gap between creating a
stable branch (at soft code freeze [1]) and handing the responsibility
for it to the fuel-stable-core team (at release). Because of this, we
can't limit merge permissions to all stable branches to the stable team,
during soft code freeze all core reviewers should remain able to merge
backported commits to the new stable branch.

[0] http://lists.openstack.org/pipermail/openstack-dev/2015-September/075093.html
[1] http://lists.openstack.org/pipermail/openstack-dev/2015-August/073110.html

Change-Id: I850cae66c660b2c35ec4c5e2c45ad57c61108af3

gerrit/acls/openstack/fuel-agent.config

@@ -1,6 +1,6 @@
 [access "refs/heads/*"]
 abandon = group fuel-agent-core
-create = group fuel-agent-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-agent-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-agent-core
@@ -10,7 +10,7 @@ exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-agent-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-astute.config

@@ -1,6 +1,6 @@
 [access "refs/heads/*"]
 abandon = group fuel-astute-core
-create = group fuel-astute-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-astute-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-astute-core
@@ -14,7 +14,7 @@ exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-astute-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-dev-tools.config

@@ -5,7 +5,7 @@ label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-dev-tools-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-dev-tools-release
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-devops.config

@@ -1,12 +1,12 @@
 [access "refs/heads/*"]
 abandon = group fuel-devops-core
-create = group fuel-devops-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-devops-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-devops-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-devops-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-docs.config

@@ -1,15 +1,15 @@
 [access "refs/for/refs/*"]
-pushMerge = group fuel-core
+pushMerge = group fuel-release
 
 [access "refs/heads/*"]
 abandon = group fuel-docs-core
-create = group fuel-docs-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-docs-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-docs-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-docs-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-library.config

@@ -1,6 +1,6 @@
 [access "refs/heads/*"]
 abandon = group fuel-library-core
-create = group fuel-library-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-library-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-library-core
@@ -14,7 +14,7 @@ exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-library-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-main.config

@@ -1,6 +1,6 @@
 [access "refs/heads/*"]
 abandon = group fuel-main-core
-create = group fuel-main-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-main-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-main-core
@@ -14,7 +14,7 @@ exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-main-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-mirror.config

@@ -1,16 +1,16 @@
 [access "refs/heads/*"]
 abandon = group fuel-mirror-core
-create = group fuel-mirror-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-mirror-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-mirror-core
 
-[access "refs/heads/stable/*"]
+[access "refs/heads/stable/7.0"]
 exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-mirror-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-nailgun-agent.config

@@ -1,6 +1,6 @@
 [access "refs/heads/*"]
 abandon = group fuel-nailgun-agent-core
-create = group fuel-nailgun-agent-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-nailgun-agent-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-nailgun-agent-core
@@ -10,7 +10,7 @@ exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-nailgun-agent-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-octane.config

@@ -1,12 +1,12 @@
 [access "refs/heads/*"]
 abandon = group fuel-octane-core
-create = group fuel-octane-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-octane-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-octane-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-octane-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-ostf.config

@@ -1,6 +1,6 @@
 [access "refs/heads/*"]
 abandon = group fuel-ostf-core
-create = group fuel-ostf-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-ostf-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-ostf-core
@@ -14,7 +14,7 @@ exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-ostf-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-qa.config

@@ -1,12 +1,12 @@
 [access "refs/heads/*"]
 abandon = group fuel-qa-core
-create = group fuel-qa-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-qa-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-qa-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-qa-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-specs.config

@@ -0,0 +1,12 @@
+[access "refs/heads/*"]
+abandon = group fuel-specs-core
+label-Code-Review = -2..+2 group fuel-specs-core
+label-Verified = -1..+1 group fuel-ci
+label-Workflow = -1..+1 group fuel-specs-core
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack/fuel-stats.config

@@ -1,12 +1,12 @@
 [access "refs/heads/*"]
 abandon = group fuel-stats-core
-create = group fuel-stats-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-stats-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-stats-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-stats-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-upgrade.config

@@ -1,12 +1,12 @@
 [access "refs/heads/*"]
 abandon = group fuel-upgrade-core
-create = group fuel-upgrade-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-upgrade-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-upgrade-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-upgrade-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel-web.config

@@ -1,6 +1,6 @@
 [access "refs/heads/*"]
 abandon = group fuel-web-core
-create = group fuel-web-core
+create = group fuel-release
 label-Code-Review = -2..+2 group fuel-web-core
 label-Verified = -1..+1 group fuel-ci
 label-Workflow = -1..+1 group fuel-web-core
@@ -14,7 +14,7 @@ exclusiveGroupPermissions = label-Workflow
 label-Workflow = -1..+1 group fuel-stable-core
 
 [access "refs/tags/*"]
-pushSignedTag = group fuel-web-core
+pushSignedTag = group fuel-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack/fuel.config

@@ -1,16 +0,0 @@
-[access "refs/heads/*"]
-abandon = group fuel-core
-create = group fuel-core
-label-Code-Review = -2..+2 group fuel-core
-label-Verified = -1..+1 group fuel-ci
-label-Workflow = -1..+1 group fuel-core
-
-[access "refs/tags/*"]
-pushSignedTag = group fuel-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true

gerrit/projects.yaml

@@ -1484,7 +1484,6 @@
   groups:
     - fuel
   description: Fuel designs and specs
-  acl-config: /home/gerrit2/acls/openstack/fuel.config
 - project: openstack/fuel-stats
   groups:
     - fuel