Configure stable branch ACLs for non-Oslo libs

Now that we are releasing stable branches of all of our libraries, we
need to configure the permissions in those branches to use the
stable-maint teams.

For projects with foo-stable-maint, use those teams.

For projects with foo-milestone, use those teams.

For projects with neither, amend the ACLs without making them exclusive
to add stable-maint-core and leave foo-core.

Also remove the blocks related to "proposed" branches, since we don't
use those for libraries.

Change-Id: I6fb79132d954c8cccdbd0c0584aa7acbe4655fef

gerrit/acls/openstack/ceilometermiddleware.config

@@ -3,6 +3,13 @@ abandon = group ceilometer-core
 label-Code-Review = -2..+2 group ceilometer-core
 label-Workflow = -1..+1 group ceilometer-core
 
+[access "refs/heads/stable/*"]
+abandon = group ceilometer-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group ceilometer-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group ceilometer-stable-maint
+
 [access "refs/tags/*"]
 pushSignedTag = group ceilometer-release
 

gerrit/acls/openstack/django_openstack_auth.config

@@ -3,10 +3,12 @@ abandon = group horizon-core
 label-Code-Review = -2..+2 group horizon-core
 label-Workflow = -1..+1 group horizon-core
 
-[access "refs/heads/proposed/*"]
-abandon = group horizon-milestone
-label-Code-Review = -2..+2 group horizon-milestone
-label-Workflow = -1..+1 group horizon-milestone
+[access "refs/heads/stable/*"]
+abandon = group horizon-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group horizon-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group horizon-stable-maint
 
 [access "refs/tags/*"]
 pushSignedTag = group horizon-release

gerrit/acls/openstack/keystonemiddleware.config

@@ -3,6 +3,13 @@ abandon = group keystone-core
 label-Code-Review = -2..+2 group keystone-core
 label-Workflow = -1..+1 group keystone-core
 
+[access "refs/heads/stable/*"]
+abandon = group keystone-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group keystone-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group keystone-stable-maint
+
 [access "refs/tags/*"]
 pushSignedTag = group keystone-release
 

gerrit/acls/openstack/pycadf.config

@@ -3,6 +3,11 @@ abandon = group pycadf-core
 label-Code-Review = -2..+2 group pycadf-core
 label-Workflow = -1..+1 group pycadf-core
 
+[access "refs/heads/stable/*"]
+abandon = group stable-maint-core
+label-Code-Review = -2..+2 group stable-maint-core
+label-Workflow = -1..+1 group stable-maint-core
+
 [access "refs/tags/*"]
 pushSignedTag = group pycadf-release
 

gerrit/acls/openstack/python-barbicanclient.config

@@ -3,6 +3,11 @@ abandon = group barbican-core
 label-Code-Review = -2..+2 group barbican-core
 label-Workflow = -1..+1 group barbican-core
 
+[access "refs/heads/stable/*"]
+abandon = group stable-maint-core
+label-Code-Review = -2..+2 group stable-maint-core
+label-Workflow = -1..+1 group stable-maint-core
+
 [access "refs/tags/*"]
 pushSignedTag = group barbican-core
 

gerrit/acls/openstack/python-ceilometerclient.config

@@ -3,10 +3,12 @@ abandon = group ceilometer-core
 label-Code-Review = -2..+2 group ceilometer-core
 label-Workflow = -1..+1 group ceilometer-core
 
-[access "refs/heads/proposed/*"]
-abandon = group ceilometer-milestone
-label-Code-Review = -2..+2 group ceilometer-milestone
-label-Workflow = -1..+1 group ceilometer-milestone
+[access "refs/heads/stable/*"]
+abandon = group ceilometer-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group ceilometer-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group ceilometer-stable-maint
 
 [access "refs/tags/*"]
 pushSignedTag = group ceilometer-release

gerrit/acls/openstack/python-cinderclient.config

@@ -3,10 +3,12 @@ abandon = group cinder-core
 label-Code-Review = -2..+2 group cinder-core
 label-Workflow = -1..+1 group cinder-core
 
-[access "refs/heads/proposed/*"]
-abandon = group cinder-milestone
-label-Code-Review = -2..+2 group cinder-milestone
-label-Workflow = -1..+1 group cinder-milestone
+[access "refs/heads/stable/*"]
+abandon = group cinder-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group cinder-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group cinder-stable-maint
 
 [access "refs/tags/*"]
 pushSignedTag = group cinder-release

gerrit/acls/openstack/python-designateclient.config

@@ -3,6 +3,13 @@ abandon = group designate-core
 label-Code-Review = -2..+2 group designate-core
 label-Workflow = -1..+1 group designate-core
 
+[access "refs/heads/stable/*"]
+abandon = group designate-milestone
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group designate-milestone
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group designate-milestone
+
 [access "refs/tags/*"]
 pushSignedTag = group designate-release
 

gerrit/acls/openstack/python-glanceclient.config

@@ -3,10 +3,12 @@ abandon = group glance-core
 label-Code-Review = -2..+2 group glance-core
 label-Workflow = -1..+1 group glance-core
 
-[access "refs/heads/proposed/*"]
-abandon = group glance-milestone
-label-Code-Review = -2..+2 group glance-milestone
-label-Workflow = -1..+1 group glance-milestone
+[access "refs/heads/stable/*"]
+abandon = group glance-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group glance-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group glance-stable-maint
 
 [access "refs/tags/*"]
 pushSignedTag = group glance-release

gerrit/acls/openstack/python-heatclient.config

@@ -3,10 +3,12 @@ abandon = group heat-core
 label-Code-Review = -2..+2 group heat-core
 label-Workflow = -1..+1 group heat-core
 
-[access "refs/heads/proposed/*"]
-abandon = group heat-milestone
-label-Code-Review = -2..+2 group heat-milestone
-label-Workflow = -1..+1 group heat-milestone
+[access "refs/heads/stable/*"]
+abandon = group heat-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group heat-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group heat-stable-maint
 
 [access "refs/tags/*"]
 pushSignedTag = group heat-release

gerrit/acls/openstack/python-ironicclient.config

@@ -3,9 +3,11 @@ abandon = group ironic-core
 label-Code-Review = -2..+2 group ironic-core
 label-Workflow = -1..+1 group ironic-core
 
-[access "refs/heads/proposed/*"]
+[access "refs/heads/stable/*"]
 abandon = group ironic-milestone
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
 label-Code-Review = -2..+2 group ironic-milestone
+label-Code-Review = -1..+1 group Registered Users
 label-Workflow = -1..+1 group ironic-milestone
 
 [access "refs/tags/*"]

gerrit/acls/openstack/python-keystoneclient.config

@@ -3,10 +3,12 @@ abandon = group keystone-core
 label-Code-Review = -2..+2 group keystone-core
 label-Workflow = -1..+1 group keystone-core
 
-[access "refs/heads/proposed/*"]
-abandon = group keystone-milestone
-label-Code-Review = -2..+2 group keystone-milestone
-label-Workflow = -1..+1 group keystone-milestone
+[access "refs/heads/stable/*"]
+abandon = group keystone-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group keystone-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group keystone-stable-maint
 
 [access "refs/tags/*"]
 pushSignedTag = group keystone-release

gerrit/acls/openstack/python-neutronclient.config

@@ -3,10 +3,12 @@ abandon = group neutron-core
 label-Code-Review = -2..+2 group neutron-core
 label-Workflow = -1..+1 group neutron-core
 
-[access "refs/heads/proposed/*"]
-abandon = group neutron-milestone
-label-Code-Review = -2..+2 group neutron-milestone
-label-Workflow = -1..+1 group neutron-milestone
+[access "refs/heads/stable/*"]
+abandon = group neutron-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group neutron-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group neutron-stable-maint
 
 [access "refs/tags/*"]
 pushSignedTag = group neutron-release

gerrit/acls/openstack/python-novaclient.config

@@ -3,10 +3,12 @@ abandon = group python-novaclient-core
 label-Code-Review = -2..+2 group python-novaclient-core
 label-Workflow = -1..+1 group python-novaclient-core
 
-[access "refs/heads/proposed/*"]
-abandon = group nova-milestone
-label-Code-Review = -2..+2 group nova-milestone
-label-Workflow = -1..+1 group nova-milestone
+[access "refs/heads/stable/*"]
+abandon = group nova-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group nova-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group nova-stable-maint
 
 [access "refs/tags/*"]
 pushSignedTag = group nova-release

gerrit/acls/openstack/python-openstackclient.config

@@ -3,10 +3,10 @@ abandon = group python-openstackclient-core
 label-Code-Review = -2..+2 group python-openstackclient-core
 label-Workflow = -1..+1 group python-openstackclient-core
 
-[access "refs/heads/proposed/*"]
-abandon = group python-openstackclient-milestone
-label-Code-Review = -2..+2 group python-openstackclient-milestone
-label-Workflow = -1..+1 group python-openstackclient-milestone
+[access "refs/heads/stable/*"]
+abandon = group stable-maint-core
+label-Code-Review = -2..+2 group stable-maint-core
+label-Workflow = -1..+1 group stable-maint-core
 
 [access "refs/tags/*"]
 pushSignedTag = group python-openstackclient-milestone

gerrit/acls/openstack/python-saharaclient.config

@@ -4,6 +4,13 @@ label-Code-Review = -2..+2 group sahara-core
 label-Verified = -1..+1 group sahara-ci
 label-Workflow = -1..+1 group sahara-core
 
+[access "refs/heads/stable/*"]
+abandon = group sahara-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group sahara-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group sahara-stable-maint
+
 [access "refs/tags/*"]
 pushSignedTag = group sahara-release
 

gerrit/acls/openstack/python-swiftclient.config

@@ -6,10 +6,12 @@ abandon = group swift-core
 label-Code-Review = -2..+2 group swift-core
 label-Workflow = -1..+1 group swift-core
 
-[access "refs/heads/proposed/*"]
-abandon = group swift-milestone
-label-Code-Review = -2..+2 group swift-milestone
-label-Workflow = -1..+1 group swift-milestone
+[access "refs/heads/stable/*"]
+abandon = group swift-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group swift-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group swift-stable-maint
 
 [access "refs/tags/*"]
 pushSignedTag = group swift-release

gerrit/acls/openstack/python-troveclient.config

@@ -4,10 +4,12 @@ label-Code-Review = -2..+2 group trove-core
 label-Verified = -1..+1 group trove-ci
 label-Workflow = -1..+1 group trove-core
 
-[access "refs/heads/proposed/*"]
-abandon = group trove-milestone
-label-Code-Review = -2..+2 group trove-milestone
-label-Workflow = -1..+1 group trove-milestone
+[access "refs/heads/stable/*"]
+abandon = group trove-stable-maint
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group trove-stable-maint
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group trove-stable-maint
 
 [access "refs/tags/*"]
 pushSignedTag = group trove-release

gerrit/acls/openstack/python-zaqarclient.config

@@ -3,6 +3,13 @@ abandon = group zaqar-core
 label-Code-Review = -2..+2 group zaqar-core
 label-Workflow = -1..+1 group zaqar-core
 
+[access "refs/heads/stable/*"]
+abandon = group zaqar-milestone
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+label-Code-Review = -2..+2 group zaqar-milestone
+label-Code-Review = -1..+1 group Registered Users
+label-Workflow = -1..+1 group zaqar-milestone
+
 [access "refs/tags/*"]
 pushSignedTag = group zaqar-release