Introduce read-only ACL and start using it

instead of creating a separate ACL file for each repo that is read-only,
create a new read-only config file and use that. This avoids
duplications and makes it easier to mark repos read-only.

This change covers only the first few repos, further repos will be done
in a followup.

Change-Id: I7264070a085eb999167e050016fee37eab1770b7

gerrit/acls/openstack/cookbook-openstack-bare-metal.config

@@ -1,2 +0,0 @@
-[project]
-state = read only

gerrit/acls/openstack/cookbook-openstack-data-processing.config

@@ -1,2 +0,0 @@
-[project]
-state = read only

gerrit/acls/openstack/cookbook-openstack-database.config

@@ -1,2 +0,0 @@
-[project]
-state = read only

gerrit/acls/openstack/cookbook-openstack-object-storage.config

@@ -1,2 +0,0 @@
-[project]
-state = read only

gerrit/acls/openstack/designate-msdnsagent.config

@@ -1,2 +0,0 @@
-[project]
-state = read only

gerrit/projects.yaml

@@ -1349,7 +1349,7 @@
   description: Automated Test Case Repository for OpenStack. Based on CloudCAFE.
 - project: openstack/cloudv-ostf-adapter
   description: Fuel-independent OSTF adapter for Cloud Validation
-  acl-config: /home/gerrit2/acls/openstack/cloudv.config
+  acl-config: /home/gerrit2/acls/openstack/read-only.config
   groups:
     - cloudv
 - project: openstack/cognitive
@@ -1403,6 +1403,7 @@
     - openstack-chef
   docimpact-group: openstack-chef
   description: Chef Cookbook - OpenStack Bare Metal
+  acl-config: /home/gerrit2/acls/openstack/read-only.config
 - project: openstack/cookbook-openstack-block-storage
   groups:
     - openstack-chef
@@ -1438,11 +1439,13 @@
     - openstack-chef
   docimpact-group: openstack-chef
   description: Chef Cookbook - OpenStack Data Processing Service
+  acl-config: /home/gerrit2/acls/openstack/read-only.config
 - project: openstack/cookbook-openstack-database
   groups:
     - openstack-chef
   docimpact-group: openstack-chef
   description: Chef Cookbook - OpenStack Database as a Service
+  acl-config: /home/gerrit2/acls/openstack/read-only.config
 - project: openstack/cookbook-openstack-identity
   groups:
     - openstack-chef
@@ -1472,6 +1475,7 @@
     - openstack-chef
   docimpact-group: openstack-chef
   description: Chef Cookbook - OpenStack Object Storage
+  acl-config: /home/gerrit2/acls/openstack/read-only.config
 - project: openstack/cookbook-openstack-ops-database
   groups:
     - openstack-chef
@@ -3471,6 +3475,7 @@
   docimpact-group: designate
   groups:
     - designate
+  acl-config: /home/gerrit2/acls/openstack/read-only.config
 - project: openstack/designate-specs
   description: OpenStack DNS As A Service (Designate) Specifications
   groups: