Cleanup gerrit ACLs

For consistency accross all ACLs, remove usage of "refs/*" section and replace with: * Move create ACLs for branches to "ref/heads/*". * Move pushSignedTag to "refs/tags/*" Change-Id: I8648a7b7b245921ddf7146fd9da31ea7b5e31d9d
2014-11-20 22:25:34 -05:00 · 2014-11-20 22:25:34 -05:00 · 40d34067d8
commit 40d34067d8
parent 33243a567b
24 changed files with 57 additions and 83 deletions
--- a/gerrit/acls/openstack-dev/hacking.config
+++ b/gerrit/acls/openstack-dev/hacking.config
@ -1,8 +1,6 @@
-[access "refs/*"]
-create = group hacking-release
-
 [access "refs/heads/*"]
 abandon = group hacking-core
+create = group hacking-release
 label-Code-Review = -2..+2 group hacking-core
 label-Workflow = -1..+1 group hacking-core

--- a/gerrit/acls/openstack-infra/elastic-recheck.config
+++ b/gerrit/acls/openstack-infra/elastic-recheck.config
@ -1,8 +1,6 @@
-[access "refs/*"]
-create = group elastic-recheck-release
-
 [access "refs/heads/*"]
 abandon = group elastic-recheck-core
+create = group elastic-recheck-release
 label-Code-Review = -2..+2 group elastic-recheck-core
 label-Workflow = -1..+1 group elastic-recheck-core

--- a/gerrit/acls/openstack-infra/gerrit.config
+++ b/gerrit/acls/openstack-infra/gerrit.config
@ -1,12 +1,9 @@
-[access "refs/*"]
-create = group infra-core
-pushSignedTag = group infra-core
-
 [access "refs/for/refs/heads/upstream/*"]
 pushMerge = group infra-core

 [access "refs/heads/*"]
 abandon = group infra-core
+create = group infra-core
 forgeAuthor = group infra-core
 label-Code-Review = -2..+2 group infra-core
 label-Workflow = -1..+1 group infra-core
@ -19,6 +16,9 @@ push = group infra-core
 pushMerge = group infra-core
 pushSignedTag = group infra-core

+[access "refs/tags/*"]
+pushSignedTag = group infra-core
+
 [receive]
 requireChangeId = true

--- a/gerrit/acls/openstack-infra/gerritbot.config
+++ b/gerrit/acls/openstack-infra/gerritbot.config
@ -1,12 +1,12 @@
-[access "refs/*"]
-create = group infra-core
-pushSignedTag = group infra-core
-
 [access "refs/heads/*"]
 abandon = group infra-core
+create = group infra-core
 label-Code-Review = -2..+2 group infra-core
 label-Workflow = -1..+1 group infra-core

+[access "refs/tags/*"]
+pushSignedTag = group infra-core
+
 [receive]
 requireChangeId = true

--- a/gerrit/acls/openstack-infra/git-review.config
+++ b/gerrit/acls/openstack-infra/git-review.config
@ -1,12 +1,12 @@
-[access "refs/*"]
-create = group infra-core
-pushSignedTag = group infra-core
-
 [access "refs/heads/*"]
 abandon = group infra-core
+create = group infra-core
 label-Code-Review = -2..+2 group infra-core
 label-Workflow = -1..+1 group infra-core

+[access "refs/tags/*"]
+pushSignedTag = group infra-core
+
 [receive]
 requireChangeId = true

--- a/gerrit/acls/openstack-infra/groups.config
+++ b/gerrit/acls/openstack-infra/groups.config
@ -1,12 +1,12 @@
-[access "refs/*"]
-create = group groups-core
-pushSignedTag = group groups-core
-
 [access "refs/heads/*"]
 abandon = group groups-core
+create = group groups-core
 label-Code-Review = -2..+2 group groups-core
 label-Workflow = -1..+1 group groups-core

+[access "refs/tags/*"]
+pushSignedTag = group groups-core
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
--- a/gerrit/acls/openstack-infra/jenkins-job-builder.config
+++ b/gerrit/acls/openstack-infra/jenkins-job-builder.config
@ -1,8 +1,6 @@
-[access "refs/*"]
-create = group jenkins-job-builder-release
-
 [access "refs/heads/*"]
 abandon = group jenkins-job-builder-core
+create = group jenkins-job-builder-release
 label-Code-Review = -2..+2 group jenkins-job-builder-core
 label-Workflow = -1..+1 group jenkins-job-builder-core

--- a/gerrit/acls/openstack-infra/meetbot.config
+++ b/gerrit/acls/openstack-infra/meetbot.config
@ -1,13 +1,13 @@
-[access "refs/*"]
-create = group infra-core
-pushSignedTag = group infra-core
-
 [access "refs/heads/*"]
 abandon = group infra-core
+create = group infra-core
 forgeAuthor = group infra-core
 label-Code-Review = -2..+2 group infra-core
 label-Workflow = -1..+1 group infra-core

+[access "refs/tags/*"]
+pushSignedTag = group infra-core
+
 [receive]
 requireChangeId = true

--- a/gerrit/acls/openstack-infra/nose-html-output.config
+++ b/gerrit/acls/openstack-infra/nose-html-output.config
@ -1,13 +1,13 @@
-[access "refs/*"]
-create = group infra-core
-pushSignedTag = group infra-core
-
 [access "refs/heads/*"]
 abandon = group infra-core
+create = group infra-core
 forgeAuthor = group infra-core
 label-Code-Review = -2..+2 group infra-core
 label-Workflow = -1..+1 group infra-core

+[access "refs/tags/*"]
+pushSignedTag = group infra-core
+
 [receive]
 requireChangeId = true

--- a/gerrit/acls/openstack-infra/statusbot.config
+++ b/gerrit/acls/openstack-infra/statusbot.config
@ -1,12 +1,12 @@
-[access "refs/*"]
-create = group infra-core
-pushSignedTag = group infra-core
-
 [access "refs/heads/*"]
 abandon = group infra-core
+create = group infra-core
 label-Code-Review = -2..+2 group infra-core
 label-Workflow = -1..+1 group infra-core

+[access "refs/tags/*"]
+pushSignedTag = group infra-core
+
 [receive]
 requireChangeId = true

--- a/gerrit/acls/openstack-infra/storyboard.config
+++ b/gerrit/acls/openstack-infra/storyboard.config
@ -1,12 +1,12 @@
-[access "refs/*"]
-create = group storyboard-core
-pushSignedTag = group storyboard-core
-
 [access "refs/heads/*"]
 abandon = group storyboard-core
+create = group storyboard-core
 label-Code-Review = -2..+2 group storyboard-core
 label-Workflow = -1..+1 group storyboard-core

+[access "refs/tags/*"]
+pushSignedTag = group storyboard-core
+
 [receive]
 requireChangeId = true

--- a/gerrit/acls/openstack/manila.config
+++ b/gerrit/acls/openstack/manila.config
@ -1,8 +1,6 @@
-[access "refs/*"]
-create = group manila-core
-
 [access "refs/heads/*"]
 abandon = group manila-core
+create = group manila-core
 label-Code-Review = -2..+2 group manila-core
 label-Workflow = -1..+1 group manila-core

--- a/gerrit/acls/stackforge/anvil.config
+++ b/gerrit/acls/stackforge/anvil.config
@ -1,8 +1,6 @@
-[access "refs/*"]
-create = group anvil-core
-
 [access "refs/heads/*"]
 abandon = group anvil-core
+create = group anvil-core
 label-Code-Review = -2..+2 group anvil-core
 label-Workflow = -1..+1 group anvil-core

--- a/gerrit/acls/stackforge/chef-cookbooks.config
+++ b/gerrit/acls/stackforge/chef-cookbooks.config
@ -1,8 +1,6 @@
-[access "refs/*"]
-create = group chef-manager-core
-
 [access "refs/heads/*"]
 abandon = group chef-manager-core
+create = group chef-manager-core
 label-Code-Review = -2..+2 group chef-manager-core
 label-Workflow = -1..+1 group chef-manager-core

--- a/gerrit/acls/stackforge/clouddocs-maven-plugin.config
+++ b/gerrit/acls/stackforge/clouddocs-maven-plugin.config
@ -1,8 +1,6 @@
-[access "refs/*"]
-create = group clouddocs-maven-plugin-core
-
 [access "refs/heads/*"]
 abandon = group clouddocs-maven-plugin-core
+create = group clouddocs-maven-plugin-core
 label-Code-Review = -2..+2 group clouddocs-maven-plugin-core
 label-Workflow = -1..+1 group clouddocs-maven-plugin-core

--- a/gerrit/acls/stackforge/driverlog.config
+++ b/gerrit/acls/stackforge/driverlog.config
@ -1,8 +1,6 @@
-[access "refs/*"]
-create = group driverlog-release
-
 [access "refs/heads/*"]
 abandon = group driverlog-core
+create = group driverlog-release
 label-Code-Review = -2..+2 group driverlog-core
 label-Workflow = -1..+1 group driverlog-core

--- a/gerrit/acls/stackforge/healthnmon.config
+++ b/gerrit/acls/stackforge/healthnmon.config
@ -1,12 +1,12 @@
-[access "refs/*"]
-create = group healthnmon-core
-pushSignedTag = group healthnmon-core
-
 [access "refs/heads/*"]
 abandon = group healthnmon-core
+create = group healthnmon-core
 label-Code-Review = -2..+2 group healthnmon-core
 label-Workflow = -1..+1 group healthnmon-core

+[access "refs/tags/*"]
+pushSignedTag = group healthnmon-core
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
--- a/gerrit/acls/stackforge/magnetodb.config
+++ b/gerrit/acls/stackforge/magnetodb.config
@ -1,8 +1,6 @@
-[access "refs/*"]
-create = group magnetodb-release
-
 [access "refs/heads/*"]
 abandon = group magnetodb-core
+create = group magnetodb-release
 label-Code-Review = -2..+2 group magnetodb-core
 label-Workflow = -1..+1 group magnetodb-core

--- a/gerrit/acls/stackforge/packstack.config
+++ b/gerrit/acls/stackforge/packstack.config
@ -1,8 +1,6 @@
-[access "refs/*"]
-create = group packstack-release
-
 [access "refs/heads/*"]
 abandon = group packstack-core
+create = group packstack-release
 label-Code-Review = -2..+2 group packstack-core
 label-Workflow = -1..+1 group packstack-core

--- a/gerrit/acls/stackforge/puppet-ceph.config
+++ b/gerrit/acls/stackforge/puppet-ceph.config
@ -1,8 +1,6 @@
-[access "refs/*"]
-create = group puppet-ceph-core
-
 [access "refs/heads/*"]
 abandon = group puppet-ceph-core
+create = group puppet-ceph-core
 label-Code-Review = -2..+2 group puppet-ceph-core
 label-Workflow = -1..+1 group puppet-ceph-core

--- a/gerrit/acls/stackforge/puppet-modules.config
+++ b/gerrit/acls/stackforge/puppet-modules.config
@ -1,8 +1,6 @@
-[access "refs/*"]
-create = group puppet-manager-core
-
 [access "refs/heads/*"]
 abandon = group puppet-manager-core
+create = group puppet-manager-core
 label-Code-Review = -2..+2 group puppet-manager-core
 label-Workflow = -1..+1 group puppet-manager-core

--- a/gerrit/acls/stackforge/python-jenkins.config
+++ b/gerrit/acls/stackforge/python-jenkins.config
@ -1,8 +1,6 @@
-[access "refs/*"]
-create = group python-jenkins-release
-
 [access "refs/heads/*"]
 abandon = group python-jenkins-core
+create = group python-jenkins-release
 label-Code-Review = -2..+2 group python-jenkins-core
 label-Workflow = -1..+1 group python-jenkins-core

--- a/gerrit/acls/stackforge/rally.config
+++ b/gerrit/acls/stackforge/rally.config
@ -1,13 +1,13 @@
-[access "refs/*"]
-create = group rally-core
-pushSignedTag = group rally-core
-
 [access "refs/heads/*"]
 abandon = group rally-core
+create = group rally-core
 label-Code-Review = -2..+2 group rally-core
 label-Workflow = -1..+1 group rally-core
 rebase = group rally-core

+[access "refs/tags/*"]
+pushSignedTag = group rally-core
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
--- a/gerrit/acls/stackforge/stackalytics.config
+++ b/gerrit/acls/stackforge/stackalytics.config
@ -1,12 +1,12 @@
-[access "refs/*"]
-create = group stackalytics-core
-pushSignedTag = group stackalytics-core
-
 [access "refs/heads/*"]
 abandon = group stackalytics-core
+create = group stackalytics-core
 label-Code-Review = -2..+2 group stackalytics-core
 label-Workflow = -1..+1 group stackalytics-core

+[access "refs/tags/*"]
+pushSignedTag = group stackalytics-core
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true