Remove unsigned tagging permission from projects

Now that we have a fix in place for Gerrit's tag signature detection
regression, remove the unsafe permission for pushing unsigned tags
to return everything to the state we had prior to the 3.4 upgrade.

Change-Id: Ia9afb5fb4be311cca59d3e1cf3b7bc611184fe15
changes/35/826335/2
Jeremy Stanley 1 year ago
parent 83ca7a97f9
commit 0d066f954d

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group airshipctl-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group airshipui-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group airshipapis-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group armada-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group airship-charts-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group deckhand-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group divingbell-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group airship-docs-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group drydock-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group airship-election-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group gerrit-to-github-bot-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group go-redfish-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group airship-governance-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group hostconfig-operator-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group airship-images-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group airship-kubernetes-entrypoint-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group pegleg-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group porthole-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group promenade-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group shipyard-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group sip-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group spyglass-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group airship-tempest-plugin-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -11,7 +11,6 @@ label-Workflow = -1..+1 group treasuremap-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group vino-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group zuul-airship-roles-core
[access "refs/tags/*"]
createSignedTag = group airship-release
createTag = group airship-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group inaugust-core
[access "refs/tags/*"]
createSignedTag = group inaugust-core
createTag = group inaugust-core
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group jenkins-job-builder-core
[access "refs/tags/*"]
createSignedTag = group jenkins-job-builder-release
createTag = group jenkins-job-builder-release
[receive]
requireChangeId = true

@ -6,7 +6,6 @@ label-Workflow = -1..+1 group python-jenkins-core
[access "refs/tags/*"]
createSignedTag = group python-jenkins-release
createTag = group python-jenkins-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group afsmon-core
[access "refs/tags/*"]
createSignedTag = group afsmon-core
createTag = group afsmon-core
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group ansible-role-cloud-launcher-core
[access "refs/tags/*"]
createSignedTag = group ansible-role-cloud-launcher-release
createTag = group ansible-role-cloud-launcher-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group ansible-role-puppet-core
[access "refs/tags/*"]
createSignedTag = group ansible-role-puppet-release
createTag = group ansible-role-puppet-release
[receive]
requireChangeId = true

@ -8,7 +8,6 @@ label-Workflow = -1..+1 group askbot-theme-core
[access "refs/tags/*"]
createSignedTag = group askbot-theme-release
createTag = group askbot-theme-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group opendev-base-jobs-core
[access "refs/tags/*"]
createSignedTag = group opendev-base-jobs-release
createTag = group opendev-base-jobs-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group bindep-core
[access "refs/tags/*"]
createSignedTag = group bindep-release
createTag = group bindep-release
[receive]
requireChangeId = true

@ -6,7 +6,6 @@ label-Workflow = -1..+1 group Registered Users
[access "refs/tags/*"]
createSignedTag = group infra-core
createTag = group infra-core
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group dstat_graph-core
[access "refs/tags/*"]
createSignedTag = group dstat_graph-core
createTag = group dstat_graph-core
[receive]
requireChangeId = true

@ -6,7 +6,6 @@ label-Workflow = -1..+1 group elastic-recheck-core
[access "refs/tags/*"]
createSignedTag = group elastic-recheck-release
createTag = group elastic-recheck-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group engagement-core
[access "refs/tags/*"]
createSignedTag = group engagement-release
createTag = group engagement-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group gear-core
[access "refs/tags/*"]
createSignedTag = group gear-release
createTag = group gear-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group germqtt-core
[access "refs/tags/*"]
createSignedTag = group germqtt-release
createTag = group germqtt-release
[receive]
requireChangeId = true

@ -11,7 +11,6 @@ label-Workflow = -1..+1 group gerrit-core
[access "refs/heads/upstream/*"]
create = group gerrit-core
createSignedTag = group gerrit-core
createTag = group gerrit-core
forgeAuthor = group gerrit-core
forgeCommitter = group gerrit-core
push = group gerrit-core

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group gerritbot-core
[access "refs/tags/*"]
createSignedTag = group gerritbot-release
createTag = group gerritbot-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group gerritlib-core
[access "refs/tags/*"]
createSignedTag = group gerritlib-release
createTag = group gerritlib-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group git-restack-core
[access "refs/tags/*"]
createSignedTag = group git-restack-release
createTag = group git-restack-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group git-review-core
[access "refs/tags/*"]
createSignedTag = group git-review-release
createTag = group git-review-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group glean-core
[access "refs/tags/*"]
createSignedTag = group glean-release
createTag = group glean-release
[receive]
requireChangeId = true

@ -6,7 +6,6 @@ label-Workflow = -1..+1 group grafyaml-core
[access "refs/tags/*"]
createSignedTag = group grafyaml-release
createTag = group grafyaml-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group infra-manual-core
[access "refs/tags/*"]
createSignedTag = group infra-manual-release
createTag = group infra-manual-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group irc-meetings-core
[access "refs/tags/*"]
createSignedTag = group irc-meetings-release
createTag = group irc-meetings-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group jeepyb-core
[access "refs/tags/*"]
createSignedTag = group jeepyb-release
createTag = group jeepyb-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group lodgeit-core
[access "refs/tags/*"]
createSignedTag = group lodgeit-release
createTag = group lodgeit-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group log-processor-core
[access "refs/tags/*"]
createSignedTag = group log-processor-release
createTag = group log-processor-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group lpmqtt-core
[access "refs/tags/*"]
createSignedTag = group lpmqtt-release
createTag = group lpmqtt-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group meetbot-core
[access "refs/tags/*"]
createSignedTag = group meetbot-release
createTag = group meetbot-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group mqtt_statsd-core
[access "refs/tags/*"]
createSignedTag = group mqtt_statsd-release
createTag = group mqtt_statsd-release
[receive]
requireChangeId = true

@ -7,7 +7,6 @@ label-Workflow = -1..+1 group netlify-sandbox-core
[access "refs/tags/*"]
createSignedTag = group netlify-sandbox-release
createTag = group netlify-sandbox-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group opendev-project-config-core
[access "refs/tags/*"]
createSignedTag = group opendev-project-config-release
createTag = group opendev-project-config-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group publications-core
[access "refs/tags/*"]
createSignedTag = group publications-release
createTag = group publications-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-apparmor-core
[access "refs/tags/*"]
createSignedTag = group puppet-apparmor-release
createTag = group puppet-apparmor-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-askbot-core
[access "refs/tags/*"]
createSignedTag = group puppet-askbot-release
createTag = group puppet-askbot-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-asterisk-core
[access "refs/tags/*"]
createSignedTag = group puppet-asterisk-release
createTag = group puppet-asterisk-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-bandersnatch-core
[access "refs/tags/*"]
createSignedTag = group puppet-bandersnatch-release
createTag = group puppet-bandersnatch-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-bugdaystats-core
[access "refs/tags/*"]
createSignedTag = group puppet-bugdaystats-release
createTag = group puppet-bugdaystats-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-bup-core
[access "refs/tags/*"]
createSignedTag = group puppet-bup-release
createTag = group puppet-bup-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-ciwatch-core
[access "refs/tags/*"]
createSignedTag = group puppet-ciwatch-release
createTag = group puppet-ciwatch-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-diskimage_builder-core
[access "refs/tags/*"]
createSignedTag = group puppet-diskimage_builder-release
createTag = group puppet-diskimage_builder-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-elastic_recheck-core
[access "refs/tags/*"]
createSignedTag = group puppet-elastic_recheck-release
createTag = group puppet-elastic_recheck-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-elasticsearch-core
[access "refs/tags/*"]
createSignedTag = group puppet-elasticsearch-release
createTag = group puppet-elasticsearch-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-ethercalc-core
[access "refs/tags/*"]
createSignedTag = group puppet-ethercalc-release
createTag = group puppet-ethercalc-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-germqtt-core
[access "refs/tags/*"]
createSignedTag = group puppet-germqtt-release
createTag = group puppet-germqtt-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-grafyaml-core
[access "refs/tags/*"]
createSignedTag = group puppet-grafyaml-release
createTag = group puppet-grafyaml-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-graphite-core
[access "refs/tags/*"]
createSignedTag = group puppet-graphite-release
createTag = group puppet-graphite-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-haveged-core
[access "refs/tags/*"]
createSignedTag = group puppet-haveged-release
createTag = group puppet-haveged-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-hound-core
[access "refs/tags/*"]
createSignedTag = group puppet-hound-release
createTag = group puppet-hound-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-httpd-core
[access "refs/tags/*"]
createSignedTag = group puppet-httpd-release
createTag = group puppet-httpd-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-jeepyb-core
[access "refs/tags/*"]
createSignedTag = group puppet-jeepyb-release
createTag = group puppet-jeepyb-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-jenkins-core
[access "refs/tags/*"]
createSignedTag = group puppet-jenkins-release
createTag = group puppet-jenkins-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-kerberos-core
[access "refs/tags/*"]
createSignedTag = group puppet-kerberos-release
createTag = group puppet-kerberos-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-kibana-core
[access "refs/tags/*"]
createSignedTag = group puppet-kibana-release
createTag = group puppet-kibana-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-lodgeit-core
[access "refs/tags/*"]
createSignedTag = group puppet-lodgeit-release
createTag = group puppet-lodgeit-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-log_processor-core
[access "refs/tags/*"]
createSignedTag = group puppet-log_processor-release
createTag = group puppet-log_processor-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-logrotate-core
[access "refs/tags/*"]
createSignedTag = group puppet-logrotate-release
createTag = group puppet-logrotate-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-logstash-core
[access "refs/tags/*"]
createSignedTag = group puppet-logstash-release
createTag = group puppet-logstash-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-lpmqtt-core
[access "refs/tags/*"]
createSignedTag = group puppet-lpmqtt-release
createTag = group puppet-lpmqtt-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-mailman-core
[access "refs/tags/*"]
createSignedTag = group puppet-mailman-release
createTag = group puppet-mailman-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-mediawiki-core
[access "refs/tags/*"]
createSignedTag = group puppet-mediawiki-release
createTag = group puppet-mediawiki-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-meetbot-core
[access "refs/tags/*"]
createSignedTag = group puppet-meetbot-release
createTag = group puppet-meetbot-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-mosquitto-core
[access "refs/tags/*"]
createSignedTag = group puppet-mosquitto-release
createTag = group puppet-mosquitto-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-mqtt_statsd-core
[access "refs/tags/*"]
createSignedTag = group puppet-mqtt_statsd-release
createTag = group puppet-mqtt_statsd-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-mysql_backup-core
[access "refs/tags/*"]
createSignedTag = group puppet-mysql_backup-release
createTag = group puppet-mysql_backup-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-nodepool-core
[access "refs/tags/*"]
createSignedTag = group puppet-nodepool-release
createTag = group puppet-nodepool-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-openafs-core
[access "refs/tags/*"]
createSignedTag = group puppet-openafs-release
createTag = group puppet-openafs-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-openstack_health-core
[access "refs/tags/*"]
createSignedTag = group puppet-openstack_health-release
createTag = group puppet-openstack_health-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-openstack_infra_spec_helper-core
[access "refs/tags/*"]
createSignedTag = group puppet-openstack_infra_spec_helper-release
createTag = group puppet-openstack_infra_spec_helper-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-openstackci-core
[access "refs/tags/*"]
createSignedTag = group puppet-openstackci-release
createTag = group puppet-openstackci-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-pgsql_backup-core
[access "refs/tags/*"]
createSignedTag = group puppet-pgsql_backup-release
createTag = group puppet-pgsql_backup-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-pip-core
[access "refs/tags/*"]
createSignedTag = group puppet-pip-release
createTag = group puppet-pip-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-planet-core
[access "refs/tags/*"]
createSignedTag = group puppet-planet-release
createTag = group puppet-planet-release
[receive]
requireChangeId = true

@ -5,7 +5,6 @@ label-Workflow = -1..+1 group puppet-project_config-core
[access "refs/tags/*"]
createSignedTag = group puppet-project_config-release
createTag = group puppet-project_config-release
[receive]
requireChangeId = true

Some files were not shown because too many files have changed in this diff Show More

Loading…
Cancel
Save