Update infra project ACLs

To support the changes outlined in Iea53a45bb533968a13a85c0e7fbb0787325e4095
update the ACLs for all current infra projects.  The general approach is to
create a -core and -release group for every infra project, and then, if they
share commonalities, deal with that by using group inclusion in Gerrit.  This
reduces friction when adding core members to new projects.

The intent of this change is normalize all of the relevant configs so that
the -core group is used for reviews and the -release group for tags.  No
current infra projects have stable branches, so ACLs for proposed/ branches
were removed.  Similarly branch creation permissions were removed.  The
contributor agreement flag should not be changed.

Work will need to be done in Gerrit to set up these new groups before
this change merges for a seamless transition.

Change-Id: I44750a59e377593d89538c2e590eb78303c8e413

gerrit/acls/openstack-dev/openstack-nose.config

@@ -3,10 +3,8 @@ abandon = group openstack-nose-core
 label-Code-Review = -2..+2 group openstack-nose-core
 label-Workflow = -1..+1 group openstack-nose-core
 
-[access "refs/heads/proposed/*"]
+[access "refs/tags/*"]
-abandon = group openstack-nose-milestone
+pushSignedTag = group openstack-nose-release
-label-Code-Review = -2..+2 group openstack-nose-milestone
-label-Workflow = -1..+1 group openstack-nose-milestone
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/activity-board.config

@@ -4,7 +4,7 @@ label-Code-Review = -2..+2 group activity-board-core
 label-Workflow = -1..+1 group activity-board-core
 
 [access "refs/tags/*"]
-pushSignedTag = group activity-board-core
+pushSignedTag = group activity-board-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/ansible-build-image.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group ansible-build-image-core
+label-Code-Review = -2..+2 group ansible-build-image-core
+label-Workflow = -1..+1 group ansible-build-image-core
+
+[access "refs/tags/*"]
+pushSignedTag = group ansible-build-image-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/ansible-puppet.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group ansible-puppet-core
+label-Code-Review = -2..+2 group ansible-puppet-core
+label-Workflow = -1..+1 group ansible-puppet-core
+
+[access "refs/tags/*"]
+pushSignedTag = group ansible-puppet-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/ansible-system.config

@@ -1,13 +0,0 @@
-[access "refs/heads/*"]
-abandon = group infra-core
-label-Code-Review = -2..+2 group infra-core
-label-Workflow = -1..+1 group infra-core
-
-[access "refs/tags/*"]
-pushSignedTag = group infra-core
-
-[receive]
-requireChangeId = true
-
-[submit]
-mergeContent = true

gerrit/acls/openstack-infra/askbot-theme.config

@@ -1,6 +1,3 @@
-[access "refs/for/refs/*"]
-pushMerge = group askbot-theme-release
-
 [access "refs/heads/*"]
 abandon = group askbot-theme-core
 label-Code-Review = -2..+2 group askbot-theme-core

gerrit/acls/openstack-infra/bugdaystats.config

@@ -1,10 +1,10 @@
 [access "refs/heads/*"]
-abandon = group infra-core
+abandon = group bugdaystats-core
-label-Code-Review = -2..+2 group infra-core
+label-Code-Review = -2..+2 group bugdaystats-core
-label-Workflow = -1..+1 group infra-core
+label-Workflow = -1..+1 group bugdaystats-core
 
 [access "refs/tags/*"]
-pushSignedTag = group infra-core
+pushSignedTag = group bugdaystats-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/devstack-gate.config

@@ -3,6 +3,9 @@ abandon = group devstack-gate-core
 label-Code-Review = -2..+2 group devstack-gate-core
 label-Workflow = -1..+1 group devstack-gate-core
 
+[access "refs/tags/*"]
+pushSignedTag = group devstack-gate-release
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true

gerrit/acls/openstack-infra/elastic-recheck.config

@@ -1,6 +1,5 @@
 [access "refs/heads/*"]
 abandon = group elastic-recheck-core
-create = group elastic-recheck-release
 label-Code-Review = -2..+2 group elastic-recheck-core
 label-Workflow = -1..+1 group elastic-recheck-core
 

gerrit/acls/openstack-infra/gear.config

@@ -1,10 +1,10 @@
 [access "refs/heads/*"]
-abandon = group infra-core
+abandon = group gear-core
-label-Code-Review = -2..+2 group infra-core
+label-Code-Review = -2..+2 group gear-core
-label-Workflow = -1..+1 group infra-core
+label-Workflow = -1..+1 group gear-core
 
 [access "refs/tags/*"]
-pushSignedTag = group infra-core
+pushSignedTag = group gear-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/gearman-plugin.config

@@ -4,7 +4,7 @@ label-Code-Review = -2..+2 group gearman-plugin-core
 label-Workflow = -1..+1 group gearman-plugin-core
 
 [access "refs/tags/*"]
-pushSignedTag = group gearman-plugin-core
+pushSignedTag = group gearman-plugin-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/gerrit.config

@@ -16,9 +16,6 @@ push = group infra-core
 pushMerge = group infra-core
 pushSignedTag = group infra-core
 
-[access "refs/tags/*"]
-pushSignedTag = group infra-core
-
 [receive]
 requireChangeId = true
 

gerrit/acls/openstack-infra/gerritbot.config

@@ -1,11 +1,10 @@
 [access "refs/heads/*"]
-abandon = group infra-core
+abandon = group gerritbot-core
-create = group infra-core
+label-Code-Review = -2..+2 group gerritbot-core
-label-Code-Review = -2..+2 group infra-core
+label-Workflow = -1..+1 group gerritbot-core
-label-Workflow = -1..+1 group infra-core
 
 [access "refs/tags/*"]
-pushSignedTag = group infra-core
+pushSignedTag = group gerritbot-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/gerritlib.config

@@ -1,10 +1,10 @@
 [access "refs/heads/*"]
-abandon = group infra-core
+abandon = group gerritlib-core
-label-Code-Review = -2..+2 group infra-core
+label-Code-Review = -2..+2 group gerritlib-core
-label-Workflow = -1..+1 group infra-core
+label-Workflow = -1..+1 group gerritlib-core
 
 [access "refs/tags/*"]
-pushSignedTag = group infra-core
+pushSignedTag = group gerritlib-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/git-review.config

@@ -1,11 +1,10 @@
 [access "refs/heads/*"]
-abandon = group infra-core
+abandon = group git-review-core
-create = group infra-core
+label-Code-Review = -2..+2 group git-review-core
-label-Code-Review = -2..+2 group infra-core
+label-Workflow = -1..+1 group git-review-core
-label-Workflow = -1..+1 group infra-core
 
 [access "refs/tags/*"]
-pushSignedTag = group infra-core
+pushSignedTag = group git-review-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/gitdm.config

@@ -1,10 +1,10 @@
 [access "refs/heads/*"]
-abandon = group stats-core
+abandon = group gitdm-core
-label-Code-Review = -2..+2 group stats-core
+label-Code-Review = -2..+2 group gitdm-core
-label-Workflow = -1..+1 group stats-core
+label-Workflow = -1..+1 group gitdm-core
 
 [access "refs/tags/*"]
-pushSignedTag = group stats-core
+pushSignedTag = group gitdm-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/glean.config

@@ -1,13 +1,10 @@
-[access "refs/for/refs/*"]
-pushMerge = group infra-core
-
 [access "refs/heads/*"]
-abandon = group infra-core
+abandon = group glean-core
-label-Code-Review = -2..+2 group infra-core
+label-Code-Review = -2..+2 group glean-core
-label-Workflow = -1..+1 group infra-core
+label-Workflow = -1..+1 group glean-core
 
 [access "refs/tags/*"]
-pushSignedTag = group infra-core
+pushSignedTag = group glean-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/groups.config

@@ -1,11 +1,10 @@
 [access "refs/heads/*"]
 abandon = group groups-core
-create = group groups-core
 label-Code-Review = -2..+2 group groups-core
 label-Workflow = -1..+1 group groups-core
 
 [access "refs/tags/*"]
-pushSignedTag = group groups-core
+pushSignedTag = group groups-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/irc-meetings.config

@@ -3,6 +3,9 @@ abandon = group irc-meetings-core
 label-Code-Review = -2..+2 group irc-meetings-core
 label-Workflow = -1..+1 group irc-meetings-core
 
+[access "refs/tags/*"]
+pushSignedTag = group irc-meetings-release
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true

gerrit/acls/openstack-infra/jeepyb.config

@@ -1,10 +1,10 @@
 [access "refs/heads/*"]
-abandon = group infra-core
+abandon = group jeepyb-core
-label-Code-Review = -2..+2 group infra-core
+label-Code-Review = -2..+2 group jeepyb-core
-label-Workflow = -1..+1 group infra-core
+label-Workflow = -1..+1 group jeepyb-core
 
 [access "refs/tags/*"]
-pushSignedTag = group infra-core
+pushSignedTag = group jeepyb-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/jenkins-job-builder.config

@@ -1,6 +1,5 @@
 [access "refs/heads/*"]
 abandon = group jenkins-job-builder-core
-create = group jenkins-job-builder-release
 label-Code-Review = -2..+2 group jenkins-job-builder-core
 label-Workflow = -1..+1 group jenkins-job-builder-core
 

gerrit/acls/openstack-infra/lodgeit.config

@@ -1,7 +1,10 @@
 [access "refs/heads/*"]
-abandon = group infra-core
+abandon = group lodgeit-core
-label-Code-Review = -2..+2 group infra-core
+label-Code-Review = -2..+2 group lodgeit-core
-label-Workflow = -1..+1 group infra-core
+label-Workflow = -1..+1 group lodgeit-core
+
+[access "refs/tags/*"]
+pushSignedTag = group lodgeit-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/meetbot.config

@@ -1,12 +1,10 @@
 [access "refs/heads/*"]
-abandon = group infra-core
+abandon = group meetbot-core
-create = group infra-core
+label-Code-Review = -2..+2 group meetbot-core
-forgeAuthor = group infra-core
+label-Workflow = -1..+1 group meetbot-core
-label-Code-Review = -2..+2 group infra-core
-label-Workflow = -1..+1 group infra-core
 
 [access "refs/tags/*"]
-pushSignedTag = group infra-core
+pushSignedTag = group meetbot-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/nodepool.config

@@ -1,13 +1,10 @@
-[access "refs/for/refs/*"]
-pushMerge = group infra-core
-
 [access "refs/heads/*"]
-abandon = group infra-core
+abandon = group nodepool-core
-label-Code-Review = -2..+2 group infra-core
+label-Code-Review = -2..+2 group nodepool-core
-label-Workflow = -1..+1 group infra-core
+label-Workflow = -1..+1 group nodepool-core
 
 [access "refs/tags/*"]
-pushSignedTag = group infra-core
+pushSignedTag = group nodepool-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/nose-html-output.config

@@ -1,12 +1,10 @@
 [access "refs/heads/*"]
-abandon = group infra-core
+abandon = group nose-html-output-core
-create = group infra-core
+label-Code-Review = -2..+2 group nose-html-output-core
-forgeAuthor = group infra-core
+label-Workflow = -1..+1 group nose-html-output-core
-label-Code-Review = -2..+2 group infra-core
-label-Workflow = -1..+1 group infra-core
 
 [access "refs/tags/*"]
-pushSignedTag = group infra-core
+pushSignedTag = group nose-html-output-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/odsreg.config

@@ -4,7 +4,7 @@ label-Code-Review = -2..+2 group odsreg-core
 label-Workflow = -1..+1 group odsreg-core
 
 [access "refs/tags/*"]
-pushSignedTag = group odsreg-core
+pushSignedTag = group odsreg-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/openstackid-resources.config

@@ -0,0 +1,14 @@
+[access "refs/heads/*"]
+abandon = group openstackid-resources-core
+label-Code-Review = -2..+2 group openstackid-resources-core
+label-Workflow = -1..+1 group openstackid-resources-core
+
+[access "refs/tags/*"]
+pushSignedTag = group openstackid-resources-release
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/openstackid.config

@@ -8,7 +8,6 @@ pushSignedTag = group openstackid-release
 
 [receive]
 requireChangeId = true
-requireContributorAgreement = true
 
 [submit]
 mergeContent = true

gerrit/acls/openstack-infra/os-loganalyze.config

@@ -4,7 +4,7 @@ label-Code-Review = -2..+2 group os-loganalyze-core
 label-Workflow = -1..+1 group os-loganalyze-core
 
 [access "refs/tags/*"]
-pushSignedTag = group os-loganalyze-core
+pushSignedTag = group os-loganalyze-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/project-config.config

@@ -3,6 +3,9 @@ abandon = group project-config-core
 label-Code-Review = -2..+2 group project-config-core
 label-Workflow = -1..+1 group project-config-core
 
+[access "refs/tags/*"]
+pushSignedTag = group project-config-release
+
 [receive]
 requireChangeId = true
 

gerrit/acls/openstack-infra/publications.config

@@ -1,10 +1,10 @@
 [access "refs/heads/*"]
-abandon = group infra-core
+abandon = group publications-core
-label-Code-Review = -2..+2 group infra-core
+label-Code-Review = -2..+2 group publications-core
-label-Workflow = -1..+1 group infra-core
+label-Workflow = -1..+1 group publications-core
 
 [access "refs/tags/*"]
-pushSignedTag = group infra-core
+pushSignedTag = group publications-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/puppet-accessbot.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-accessbot-core
+label-Code-Review = -2..+2 group puppet-accessbot-core
+label-Workflow = -1..+1 group puppet-accessbot-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-accessbot-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-ansible.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-ansible-core
+label-Code-Review = -2..+2 group puppet-ansible-core
+label-Workflow = -1..+1 group puppet-ansible-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-ansible-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-apparmor.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-apparmor-core
+label-Code-Review = -2..+2 group puppet-apparmor-core
+label-Workflow = -1..+1 group puppet-apparmor-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-apparmor-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-askbot.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-askbot-core
+label-Code-Review = -2..+2 group puppet-askbot-core
+label-Workflow = -1..+1 group puppet-askbot-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-askbot-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-asterisk.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-asterisk-core
+label-Code-Review = -2..+2 group puppet-asterisk-core
+label-Workflow = -1..+1 group puppet-asterisk-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-asterisk-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-bandersnatch.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-bandersnatch-core
+label-Code-Review = -2..+2 group puppet-bandersnatch-core
+label-Workflow = -1..+1 group puppet-bandersnatch-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-bandersnatch-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-bugdaystats.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-bugdaystats-core
+label-Code-Review = -2..+2 group puppet-bugdaystats-core
+label-Workflow = -1..+1 group puppet-bugdaystats-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-bugdaystats-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-bup.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-bup-core
+label-Code-Review = -2..+2 group puppet-bup-core
+label-Workflow = -1..+1 group puppet-bup-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-bup-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-cgit.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-cgit-core
+label-Code-Review = -2..+2 group puppet-cgit-core
+label-Workflow = -1..+1 group puppet-cgit-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-cgit-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-dashboard.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-dashboard-core
+label-Code-Review = -2..+2 group puppet-dashboard-core
+label-Workflow = -1..+1 group puppet-dashboard-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-dashboard-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-diskimage_builder.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-diskimage_builder-core
+label-Code-Review = -2..+2 group puppet-diskimage_builder-core
+label-Workflow = -1..+1 group puppet-diskimage_builder-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-diskimage_builder-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-drupal.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-drupal-core
+label-Code-Review = -2..+2 group puppet-drupal-core
+label-Workflow = -1..+1 group puppet-drupal-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-drupal-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-elastic_recheck.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-elastic_recheck-core
+label-Code-Review = -2..+2 group puppet-elastic_recheck-core
+label-Workflow = -1..+1 group puppet-elastic_recheck-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-elastic_recheck-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-elasticsearch.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-elasticsearch-core
+label-Code-Review = -2..+2 group puppet-elasticsearch-core
+label-Workflow = -1..+1 group puppet-elasticsearch-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-elasticsearch-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-etherpad_lite.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-etherpad_lite-core
+label-Code-Review = -2..+2 group puppet-etherpad_lite-core
+label-Workflow = -1..+1 group puppet-etherpad_lite-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-etherpad_lite-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-exim.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-exim-core
+label-Code-Review = -2..+2 group puppet-exim-core
+label-Workflow = -1..+1 group puppet-exim-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-exim-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-gerrit.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-gerrit-core
+label-Code-Review = -2..+2 group puppet-gerrit-core
+label-Workflow = -1..+1 group puppet-gerrit-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-gerrit-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-gerritbot.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-gerritbot-core
+label-Code-Review = -2..+2 group puppet-gerritbot-core
+label-Workflow = -1..+1 group puppet-gerritbot-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-gerritbot-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-github.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-github-core
+label-Code-Review = -2..+2 group puppet-github-core
+label-Workflow = -1..+1 group puppet-github-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-github-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-graphite.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-graphite-core
+label-Code-Review = -2..+2 group puppet-graphite-core
+label-Workflow = -1..+1 group puppet-graphite-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-graphite-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-haveged.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-haveged-core
+label-Code-Review = -2..+2 group puppet-haveged-core
+label-Workflow = -1..+1 group puppet-haveged-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-haveged-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-httpd.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-httpd-core
+label-Code-Review = -2..+2 group puppet-httpd-core
+label-Workflow = -1..+1 group puppet-httpd-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-httpd-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-iptables.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-iptables-core
+label-Code-Review = -2..+2 group puppet-iptables-core
+label-Workflow = -1..+1 group puppet-iptables-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-iptables-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-jeepyb.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-jeepyb-core
+label-Code-Review = -2..+2 group puppet-jeepyb-core
+label-Workflow = -1..+1 group puppet-jeepyb-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-jeepyb-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-jenkins.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-jenkins-core
+label-Code-Review = -2..+2 group puppet-jenkins-core
+label-Workflow = -1..+1 group puppet-jenkins-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-jenkins-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-kerberos.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-kerberos-core
+label-Code-Review = -2..+2 group puppet-kerberos-core
+label-Workflow = -1..+1 group puppet-kerberos-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-kerberos-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-kibana.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-kibana-core
+label-Code-Review = -2..+2 group puppet-kibana-core
+label-Workflow = -1..+1 group puppet-kibana-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-kibana-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-lodgeit.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-lodgeit-core
+label-Code-Review = -2..+2 group puppet-lodgeit-core
+label-Workflow = -1..+1 group puppet-lodgeit-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-lodgeit-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-log_processor.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-log_processor-core
+label-Code-Review = -2..+2 group puppet-log_processor-core
+label-Workflow = -1..+1 group puppet-log_processor-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-log_processor-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-logrotate.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-logrotate-core
+label-Code-Review = -2..+2 group puppet-logrotate-core
+label-Workflow = -1..+1 group puppet-logrotate-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-logrotate-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-logstash.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-logstash-core
+label-Code-Review = -2..+2 group puppet-logstash-core
+label-Workflow = -1..+1 group puppet-logstash-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-logstash-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-mailman.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-mailman-core
+label-Code-Review = -2..+2 group puppet-mailman-core
+label-Workflow = -1..+1 group puppet-mailman-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-mailman-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-mediawiki.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-mediawiki-core
+label-Code-Review = -2..+2 group puppet-mediawiki-core
+label-Workflow = -1..+1 group puppet-mediawiki-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-mediawiki-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-meetbot.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-meetbot-core
+label-Code-Review = -2..+2 group puppet-meetbot-core
+label-Workflow = -1..+1 group puppet-meetbot-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-meetbot-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-mysql_backup.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-mysql_backup-core
+label-Code-Review = -2..+2 group puppet-mysql_backup-core
+label-Workflow = -1..+1 group puppet-mysql_backup-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-mysql_backup-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-nodepool.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-nodepool-core
+label-Code-Review = -2..+2 group puppet-nodepool-core
+label-Workflow = -1..+1 group puppet-nodepool-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-nodepool-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-openafs.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-openafs-core
+label-Code-Review = -2..+2 group puppet-openafs-core
+label-Workflow = -1..+1 group puppet-openafs-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-openafs-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-openstackci.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-openstackci-core
+label-Code-Review = -2..+2 group puppet-openstackci-core
+label-Workflow = -1..+1 group puppet-openstackci-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-openstackci-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-openstackid.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-openstackid-core
+label-Code-Review = -2..+2 group puppet-openstackid-core
+label-Workflow = -1..+1 group puppet-openstackid-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-openstackid-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-packagekit.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-packagekit-core
+label-Code-Review = -2..+2 group puppet-packagekit-core
+label-Workflow = -1..+1 group puppet-packagekit-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-packagekit-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-pgsql_backup.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-pgsql_backup-core
+label-Code-Review = -2..+2 group puppet-pgsql_backup-core
+label-Workflow = -1..+1 group puppet-pgsql_backup-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-pgsql_backup-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-pip.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-pip-core
+label-Code-Review = -2..+2 group puppet-pip-core
+label-Workflow = -1..+1 group puppet-pip-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-pip-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-planet.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-planet-core
+label-Code-Review = -2..+2 group puppet-planet-core
+label-Workflow = -1..+1 group puppet-planet-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-planet-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-project_config.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-project_config-core
+label-Code-Review = -2..+2 group puppet-project_config-core
+label-Workflow = -1..+1 group puppet-project_config-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-project_config-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-puppet.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-puppet-core
+label-Code-Review = -2..+2 group puppet-puppet-core
+label-Workflow = -1..+1 group puppet-puppet-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-puppet-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-redis.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-redis-core
+label-Code-Review = -2..+2 group puppet-redis-core
+label-Workflow = -1..+1 group puppet-redis-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-redis-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-releasestatus.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-releasestatus-core
+label-Code-Review = -2..+2 group puppet-releasestatus-core
+label-Workflow = -1..+1 group puppet-releasestatus-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-releasestatus-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-reviewday.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-reviewday-core
+label-Code-Review = -2..+2 group puppet-reviewday-core
+label-Workflow = -1..+1 group puppet-reviewday-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-reviewday-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-simpleproxy.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-simpleproxy-core
+label-Code-Review = -2..+2 group puppet-simpleproxy-core
+label-Workflow = -1..+1 group puppet-simpleproxy-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-simpleproxy-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-snmpd.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-snmpd-core
+label-Code-Review = -2..+2 group puppet-snmpd-core
+label-Workflow = -1..+1 group puppet-snmpd-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-snmpd-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-ssh.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-ssh-core
+label-Code-Review = -2..+2 group puppet-ssh-core
+label-Workflow = -1..+1 group puppet-ssh-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-ssh-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-ssl_cert_check.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-ssl_cert_check-core
+label-Code-Review = -2..+2 group puppet-ssl_cert_check-core
+label-Workflow = -1..+1 group puppet-ssl_cert_check-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-ssl_cert_check-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-statusbot.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-statusbot-core
+label-Code-Review = -2..+2 group puppet-statusbot-core
+label-Workflow = -1..+1 group puppet-statusbot-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-statusbot-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-storyboard.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-storyboard-core
+label-Code-Review = -2..+2 group puppet-storyboard-core
+label-Workflow = -1..+1 group puppet-storyboard-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-storyboard-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-subunit2sql.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-subunit2sql-core
+label-Code-Review = -2..+2 group puppet-subunit2sql-core
+label-Workflow = -1..+1 group puppet-subunit2sql-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-subunit2sql-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-sudoers.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-sudoers-core
+label-Code-Review = -2..+2 group puppet-sudoers-core
+label-Workflow = -1..+1 group puppet-sudoers-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-sudoers-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-system.config

@@ -1,13 +0,0 @@
-[access "refs/heads/*"]
-abandon = group infra-core
-label-Code-Review = -2..+2 group infra-core
-label-Workflow = -1..+1 group infra-core
-
-[access "refs/tags/*"]
-pushSignedTag = group infra-core
-
-[receive]
-requireChangeId = true
-
-[submit]
-mergeContent = true

gerrit/acls/openstack-infra/puppet-tmpreaper.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-tmpreaper-core
+label-Code-Review = -2..+2 group puppet-tmpreaper-core
+label-Workflow = -1..+1 group puppet-tmpreaper-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-tmpreaper-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-ulimit.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-ulimit-core
+label-Code-Review = -2..+2 group puppet-ulimit-core
+label-Workflow = -1..+1 group puppet-ulimit-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-ulimit-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-unattended_upgrades.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-unattended_upgrades-core
+label-Code-Review = -2..+2 group puppet-unattended_upgrades-core
+label-Workflow = -1..+1 group puppet-unattended_upgrades-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-unattended_upgrades-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-unbound.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-unbound-core
+label-Code-Review = -2..+2 group puppet-unbound-core
+label-Workflow = -1..+1 group puppet-unbound-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-unbound-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-user.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-user-core
+label-Code-Review = -2..+2 group puppet-user-core
+label-Workflow = -1..+1 group puppet-user-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-user-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-vcsrepo.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-vcsrepo-core
+label-Code-Review = -2..+2 group puppet-vcsrepo-core
+label-Workflow = -1..+1 group puppet-vcsrepo-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-vcsrepo-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-vinz.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-vinz-core
+label-Code-Review = -2..+2 group puppet-vinz-core
+label-Workflow = -1..+1 group puppet-vinz-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-vinz-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-yum.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-yum-core
+label-Code-Review = -2..+2 group puppet-yum-core
+label-Workflow = -1..+1 group puppet-yum-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-yum-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-zanata.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-zanata-core
+label-Code-Review = -2..+2 group puppet-zanata-core
+label-Workflow = -1..+1 group puppet-zanata-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-zanata-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/puppet-zuul.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group puppet-zuul-core
+label-Code-Review = -2..+2 group puppet-zuul-core
+label-Workflow = -1..+1 group puppet-zuul-core
+
+[access "refs/tags/*"]
+pushSignedTag = group puppet-zuul-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack-infra/pypi-mirror.config

@@ -4,7 +4,7 @@ label-Code-Review = -2..+2 group pypi-mirror-core
 label-Workflow = -1..+1 group pypi-mirror-core
 
 [access "refs/tags/*"]
-pushSignedTag = group pypi-mirror-core
+pushSignedTag = group pypi-mirror-release
 
 [receive]
 requireChangeId = true

gerrit/acls/openstack-infra/python-storyboardclient.config

@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group python-storyboardclient-core
+label-Code-Review = -2..+2 group python-storyboardclient-core
+label-Workflow = -1..+1 group python-storyboardclient-core
+
+[access "refs/tags/*"]
+pushSignedTag = group python-storyboardclient-release
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true