Add a ci-sandbox project.

With the move to not using a special group for non voting CI accounts we
need a new sandbox project that allows all registered users to vote +/-1
in the Verified column.

The reason we did not modify the existing sandbox project is we do not
want to give new users that do not intend on performing CI the ability
to +/-1 Verified as they will never have to do that with normal
projects. This second sandbox project ensures other users get a
consistent experience.

Change-Id: Id70b4c5a8910d6d35742ed5cee9a9520ed2e2310

gerrit/acls/openstack-dev/ci-sandbox.config

@@ -0,0 +1,21 @@
+[access "refs/heads/*"]
+abandon = group Registered Users
+label-Code-Review = -2..+2 group Registered Users
+label-Verified = -1..+1 group Registered Users
+label-Workflow = -1..+1 group Registered Users
+
+[access "refs/heads/proposed/*"]
+abandon = group Registered Users
+label-Code-Review = -2..+2 group Registered Users
+label-Verified = -1..+1 group Registered Users
+label-Workflow = -1..+1 group Registered Users
+
+[access "refs/tags/*"]
+pushSignedTag = group infra-core
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = true
+
+[submit]
+mergeContent = true

gerrit/projects.yaml

@@ -6,6 +6,8 @@
 - project: openstack-attic/python-melangeclient
 - project: openstack-dev/bashate
   description: A pep8 equivalent for bash scripts
+- project: openstack-dev/ci-sandbox
+  use-storyboard: true
 - project: openstack-dev/cookiecutter
   description: Cookiecutter Template for new OpenStack projects
   upstream: git://github.com/emonty/cookiecutter-openstack.git

zuul/layout.yaml

@@ -2970,6 +2970,11 @@ projects:
       - name: publish-to-pypi
       - name: python-jobs
 
+  - name: openstack-dev/ci-sandbox
+    template:
+      - name: merge-check
+      - name: noop-jobs
+
   - name: openstack-dev/cookiecutter
     template:
       - name: merge-check