Use same ACL for all OpenStack-Ansible Projects

Individual role ACLs and groups were never used, so all cores are
limited to openstack-ansible-core group.

Thus there's no reason to carry different ACLs and single one should be
used for all group owned repos.

Change-Id: Ic52318d17266353e7578583f302ae9286c137000
This commit is contained in:
Dmitriy Rabotyagov 2022-01-11 22:18:38 +02:00
parent 0a8cb7b85b
commit 1906b1f21b
21 changed files with 20 additions and 340 deletions

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_adjutant-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_adjutant-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_adjutant-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_aodh-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_aodh-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_aodh-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_blazar-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_blazar-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_blazar-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_ceilometer-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_ceilometer-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_ceilometer-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_cloudkitty-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_cloudkitty-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_cloudkitty-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_congress-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_congress-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_congress-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_designate-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_designate-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_designate-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_gnocchi-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_gnocchi-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_gnocchi-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_ironic-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_ironic-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_ironic-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_karbor-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_karbor-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_karbor-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_masakari-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_masakari-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_masakari-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_neutron-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_neutron-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_neutron-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_octavia-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_octavia-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_octavia-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_panko-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_panko-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_panko-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_sahara-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_sahara-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_sahara-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_senlin-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_senlin-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_senlin-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_swift-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_swift-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_swift-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_tacker-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_tacker-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_tacker-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_trove-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_trove-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_trove-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -1,17 +0,0 @@
[access]
inheritFrom = openstack/meta-config
[access "refs/heads/*"]
abandon = group openstack-ansible-core
abandon = group openstack-ansible-os_zun-core
label-Code-Review = -2..+2 group openstack-ansible-core
label-Code-Review = -2..+2 group openstack-ansible-os_zun-core
label-Workflow = -1..+1 group openstack-ansible-core
label-Workflow = -1..+1 group openstack-ansible-os_zun-core
[receive]
requireChangeId = true
requireContributorAgreement = true
[submit]
mergeContent = true

View File

@ -4065,6 +4065,7 @@
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_almanach
description: RETIRED, Role os_almanach for OpenStack-Ansible
acl-config: /home/gerrit2/acls/openstack/retired.config
@ -4073,6 +4074,7 @@
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_barbican
description: Role os_barbican for OpenStack-Ansible
groups:
@ -4084,11 +4086,13 @@
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_ceilometer
description: Role os_ceilometer for OpenStack-Ansible
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_cinder
description: Role os_cinder for OpenStack-Ansible
groups:
@ -4100,16 +4104,19 @@
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_congress
description: DEPRECATED, Role os_congress for OpenStack-Ansible
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_designate
description: Role os_designate for OpenStack-Ansible
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_freezer
description: RETIRED, Role os_freezer for OpenStack-Ansible
acl-config: /home/gerrit2/acls/openstack/retired.config
@ -4124,6 +4131,7 @@
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_heat
description: Role os_heat for OpenStack-Ansible
groups:
@ -4141,11 +4149,13 @@
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_karbor
description: DEPRECATED, Role os_karbor for OpenStack-Ansible
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_keystone
description: Role os_keystone for OpenStack-Ansible
groups:
@ -4169,6 +4179,7 @@
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_mistral
description: Role os_mistral for OpenStack-Ansible
groups:
@ -4204,6 +4215,7 @@
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_nova
description: Role os_nova for OpenStack-Ansible
groups:
@ -4215,11 +4227,13 @@
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_panko
description: DEPRECATED, Role os_panko for OpenStack-Ansible
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_placement
description: Role os_placement for OpenStack-Ansible
groups:
@ -4237,6 +4251,7 @@
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_searchlight
description: RETIRED, Role os_searchlight for OpenStack-Ansible
acl-config: /home/gerrit2/acls/openstack/retired.config
@ -4245,16 +4260,19 @@
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_swift
description: Role os_swift for OpenStack-Ansible
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_tacker
description: Role os_tacker for OpenStack-Ansible
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_tempest
description: Role os_tempest for OpenStack-Ansible
groups:
@ -4266,6 +4284,7 @@
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-os_watcher
description: RETIRED, Role os_watcher for OpenStack-Ansible
acl-config: /home/gerrit2/acls/openstack/retired.config
@ -4277,6 +4296,7 @@
groups:
- openstack-ansible
docimpact-group: openstack-ansible
acl-config: /home/gerrit2/acls/openstack/openstack-ansible.config
- project: openstack/openstack-ansible-pip_install
description: RETIRED, Role pip_install for OpenStack-Ansible
acl-config: /home/gerrit2/acls/openstack/retired.config