- admin-rule:
    name: local-admin
    conditions:
      - iss: zuul.opendev.org
- admin-rule:
    name: tenant-group
    conditions:
      - groups: "{tenant.name}"
- admin-rule:
    name: infra-root
    conditions:
      - groups: "infra-root"

- tenant:
    name: opendev
    admin-rules: &admin_rules
      - local-admin
      - infra-root
      - tenant-group
    default-ansible-version: '9'
    max-nodes-per-job: 10
    source:
      gerrit:
        config-projects:
          - opendev/project-config
          - opendev/base-jobs
        untrusted-projects:
          - zuul/zuul-jobs
          - inaugust/inaugust.com
          - inaugust/src.sh
          - inaugust/ttrun
          - opendev/bindep
          - opendev/engagement
          - opendev/gear
          - opendev/git-review
          - opendev/zuul-jobs:
              # During nodepool-in-zuul development, explicitly opt-in
              # to the experimental config objects.
              include:
                - job
                - nodeset
                - secret
                - project
                - project-template
                - semaphore
                - queue
                - image
                - flavor
                - label
                - section
                - provider
          - openinfralabs/contrib
          - wandertracks/system-config
          - wandertracks/signalk-wandertracks
          - wandertracks/wandertracks
          - wandertracks/wandertracks-web
          - wandertracks/wanders.cloud
          - waterwanders/waterwanders
          # Include some projects without config for use in
          # required-projects
          - include: []
            projects:
              - opendev/jeepyb
              - opendev/zone-opendev.org
              - opendev/zone-zuul-ci.org
              - openstack/diskimage-builder
              - openstack/magnum
              - openstack/openstacksdk
              - zuul/nodepool
      github:
        untrusted-projects:
          # Don't load any configuration from these projects because we
          # don't gate them, so they could wedge our config.
          - include: []
            projects:
              # Sorting projects alphabetically will help merge conflicts.
              - ansible/ansible
              - pytest-dev/pytest-testinfra
      googlesource:
        untrusted-projects:
          - include: []
            projects: &googlesource_projects
              - jgit
              - gerrit
              - plugins/checks
              - plugins/codemirror-editor
              - plugins/commit-message-length-validator
              - plugins/delete-project
              - plugins/download-commands
              - plugins/gitiles
              - plugins/hooks
              - plugins/importer
              - plugins/its-base
              - plugins/its-storyboard
              - plugins/javamelody
              - plugins/plugin-manager
              - plugins/rename-project
              - plugins/replication
              - plugins/reviewers
              - plugins/reviewnotes
              - plugins/singleusergroup
              - plugins/verify-status
              - plugins/webhooks
              - plugins/zuul-results-summary
              - java-prettify
              - polymer-bridges
              - zuul/jobs

- tenant:
    name: openstack
    admin-rules: *admin_rules
    default-ansible-version: '9'
    max-nodes-per-job: 10
    source:
      gerrit:
        config-projects:
          - openstack/project-config
          # Include the minimal amount of configuration from this repo. In
          # particular we don't want to include the project defs which cause
          # jobs to run for this repo in this tenant.
          - opendev/base-jobs:
              shadow: openstack/project-config
              include:
                - job
                - secret
                - nodeset
          - zuul/zuul-base-jobs:
              shadow:
                - opendev/base-jobs
                - openstack/project-config
        untrusted-projects:
          # Order matters, load common job repos first
          - zuul/zuul-jobs:
              shadow: openstack/project-config
          - openstack/openstack-zuul-jobs
          - openstack/openstack-zuul-roles
          # devstack and tempest all define things expected
          # to be widely used.
          - openstack/devstack
          - openstack/tempest
          # openstack-ansible-tests is used across multiple
          # roles including ansible-hardening
          - openstack/openstack-ansible-tests
          # After this point, sorting projects alphabetically will help
          # merge conflicts
          - airship/airshipctl
          - airship/airshipui
          - airship/apis
          - airship/armada
          - airship/armada-go
          - airship/armada-operator
          - airship/charts
          - airship/deckhand
          - airship/divingbell
          - airship/docs
          - airship/drydock
          - airship/election
          - airship/gerrit-to-github-bot
          - airship/go-redfish
          - airship/governance
          - airship/hostconfig-operator
          - airship/image-builder
          - airship/images
          - airship/kubernetes-entrypoint
          - airship/maas
          - airship/pegleg
          - airship/porthole
          - airship/promenade
          - airship/shipyard
          - airship/sip
          - airship/specs
          - airship/spyglass
          - airship/spyglass-plugin-xls
          - airship/tempest-plugin
          - airship/treasuremap
          - airship/vino
          - airship/zuul-airship-roles
          - cfn/cfn-overview
          - cfn/cfn-security
          - cfn/computing-native
          - cfn/computing-offload
          - cfn/ubiquitous-computing-scheduling
          - cfn/use-case-and-architecture
          - cirros/cirros
          - jjb/jenkins-job-builder
          - jjb/python-jenkins
          - limestone/ci-cloud-config
          - opendev/afsmon
          - opendev/ansible-role-cloud-launcher
          - opendev/ansible-role-puppet
          - opendev/askbot-theme
          - opendev/ci-sandbox:
              exclude: pipeline
          - opendev/dstat_graph
          - opendev/elastic-recheck
          - opendev/germqtt
          - opendev/gerritbot
          - opendev/gerritlib
          - opendev/git-restack
          - opendev/glean
          - opendev/grafyaml
          - opendev/infra-manual
          - opendev/infra-openafs-deb
          - opendev/infra-specs
          - opendev/infra-vhd-util-deb
          - opendev/irc-meetings
          - opendev/jeepyb
          - opendev/lodgeit
          - opendev/log-classify
          - opendev/log_processor
          - opendev/lpmqtt
          - opendev/meetbot
          - opendev/mqtt_statsd
          - opendev/netlify-sandbox
          - opendev/project-config-example
          - opendev/publications
          - opendev/puppet-bup
          - opendev/puppet-elastic_recheck
          - opendev/puppet-ethercalc
          - opendev/puppet-httpd
          - opendev/puppet-jeepyb
          - opendev/puppet-logrotate
          - opendev/puppet-mysql_backup
          - opendev/puppet-openstack_infra_spec_helper
          - opendev/puppet-pip
          - opendev/puppet-project_config
          - opendev/puppet-redis
          - opendev/puppet-reviewday
          - opendev/puppet-simpleproxy
          - opendev/puppet-ssh
          - opendev/puppet-storyboard
          - opendev/puppet-tmpreaper
          - opendev/puppet-ulimit
          - opendev/puppet-user
          - opendev/puppet-vcsrepo
          - opendev/puppet-zanata
          - opendev/python-storyboardclient
          - opendev/sandbox
          - opendev/statusbot
          - opendev/storyboard
          - opendev/storyboard-vue
          - opendev/storyboard-webclient
          - opendev/subunit2sql
          - opendev/system-config
          - opendev/yaml2ical
          - opendev/zone-gating.dev
          - opendev/zone-opendev.org
          - opendev/zone-zuul-ci.org
          - openinfra/ansible-role-refstack-client
          - openinfra/edge-computing-group
          - openinfra/four-opens
          - openinfra/groups
          - openinfra/groups-static-pages
          - openinfra/interop
          - openinfra/odsreg
          - openinfra/openstack-map
          - openinfra/openstackweb
          - openinfra/python-tempestconf
          - openinfra/refstack
          - openinfra/refstack-client
          - openinfra/transparency-policy
          - openinfra/way
          - openstack/adjutant
          - openstack/adjutant-ui
          - openstack/ansible-collection-kolla
          - openstack/ansible-collections-openstack
          - openstack/ansible-config_template
          - openstack/ansible-hardening
          - openstack/ansible-plugin-container-connection
          - openstack/ansible-role-atos-hsm
          - openstack/ansible-role-frrouting
          - openstack/ansible-role-lunasa-hsm
          - openstack/ansible-role-pki
          - openstack/ansible-role-proxysql
          - openstack/ansible-role-python_venv_build
          - openstack/ansible-role-qdrouterd
          - openstack/ansible-role-systemd_mount
          - openstack/ansible-role-systemd_networkd
          - openstack/ansible-role-systemd_service
          - openstack/ansible-role-thales-hsm
          - openstack/ansible-role-uwsgi
          - openstack/ansible-role-vault
          - openstack/ansible-role-zookeeper
          - openstack/aodh
          - openstack/api-sig
          - openstack/api-site
          - openstack/arch-design
          - openstack/auto-scaling-sig
          - openstack/automaton
          - openstack/barbican
          - openstack/barbican-specs
          - openstack/barbican-tempest-plugin
          - openstack/barbican-ui
          - openstack/bashate
          - openstack/bifrost
          - openstack/blazar
          - openstack/blazar-dashboard
          - openstack/blazar-nova
          - openstack/blazar-specs
          - openstack/blazar-tempest-plugin
          - openstack/bugdaystats
          - openstack/castellan
          - openstack/ceilometer
          - openstack/ceilometermiddleware
          - openstack/charm-aodh
          - openstack/charm-aodh-k8s
          - openstack/charm-barbican
          - openstack/charm-barbican-k8s
          - openstack/charm-barbican-softhsm
          - openstack/charm-barbican-vault
          - openstack/charm-ceilometer
          - openstack/charm-ceilometer-k8s
          - openstack/charm-ceilometer-agent
          - openstack/charm-ceph-dashboard
          - openstack/charm-ceph-fs
          - openstack/charm-ceph-iscsi
          - openstack/charm-ceph-mon
          - openstack/charm-ceph-nfs
          - openstack/charm-ceph-osd
          - openstack/charm-ceph-proxy
          - openstack/charm-ceph-radosgw
          - openstack/charm-ceph-rbd-mirror
          - openstack/charm-cinder
          - openstack/charm-cinder-backup
          - openstack/charm-cinder-backup-swift-proxy
          - openstack/charm-cinder-ceph
          - openstack/charm-cinder-ceph-k8s
          - openstack/charm-cinder-dell-emc-powerstore
          - openstack/charm-cinder-ibm-storwize-svc
          - openstack/charm-cinder-infinidat
          - openstack/charm-cinder-k8s
          - openstack/charm-cinder-lvm
          - openstack/charm-cinder-netapp
          - openstack/charm-cinder-nfs
          - openstack/charm-cinder-nimblestorage
          - openstack/charm-cinder-purestorage
          - openstack/charm-cinder-solidfire
          - openstack/charm-cinder-three-par
          - openstack/charm-cloudkitty
          - openstack/charm-deployment-guide
          - openstack/charm-designate
          - openstack/charm-designate-bind
          - openstack/charm-designate-bind-k8s
          - openstack/charm-designate-k8s
          - openstack/charm-glance
          - openstack/charm-glance-k8s
          - openstack/charm-glance-simplestreams-sync
          - openstack/charm-glusterfs
          - openstack/charm-gnocchi
          - openstack/charm-gnocchi-k8s
          - openstack/charm-guide
          - openstack/charm-hacluster
          - openstack/charm-heat
          - openstack/charm-heat-k8s
          - openstack/charm-horizon-k8s
          - openstack/charm-infinidat-tools
          - openstack/charm-interface-barbican-secrets
          - openstack/charm-interface-bgp
          - openstack/charm-interface-bind-rndc
          - openstack/charm-interface-ceph-client
          - openstack/charm-interface-ceph-mds
          - openstack/charm-interface-ceph-rbd-mirror
          - openstack/charm-interface-cinder-backend
          - openstack/charm-interface-cinder-backup
          - openstack/charm-interface-dashboard-plugin
          - openstack/charm-interface-designate
          - openstack/charm-interface-gnocchi
          - openstack/charm-interface-hacluster
          - openstack/charm-interface-ironic-api
          - openstack/charm-interface-keystone
          - openstack/charm-interface-keystone-admin
          - openstack/charm-interface-keystone-credentials
          - openstack/charm-interface-keystone-domain-backend
          - openstack/charm-interface-keystone-fid-service-provider
          - openstack/charm-interface-keystone-notifications
          - openstack/charm-interface-magpie
          - openstack/charm-interface-manila-plugin
          - openstack/charm-interface-mysql-innodb-cluster
          - openstack/charm-interface-mysql-router
          - openstack/charm-interface-mysql-shared
          - openstack/charm-interface-neutron-load-balancer
          - openstack/charm-interface-neutron-plugin
          - openstack/charm-interface-neutron-plugin-api-subordinate
          - openstack/charm-interface-nova-cell
          - openstack/charm-interface-nova-compute
          - openstack/charm-interface-odl-controller-api
          - openstack/charm-interface-openstack-ha
          - openstack/charm-interface-ovsdb-manager
          - openstack/charm-interface-pacemaker-remote
          - openstack/charm-interface-placement
          - openstack/charm-interface-rabbitmq
          - openstack/charm-interface-service-control
          - openstack/charm-interface-websso-fid-service-provider
          - openstack/charm-ironic
          - openstack/charm-ironic-api
          - openstack/charm-ironic-conductor
          - openstack/charm-ironic-dashboard
          - openstack/charm-keystone
          - openstack/charm-keystone-k8s
          - openstack/charm-keystone-kerberos
          - openstack/charm-keystone-ldap
          - openstack/charm-keystone-ldap-k8s
          - openstack/charm-keystone-openidc
          - openstack/charm-keystone-saml-mellon
          - openstack/charm-layer-ceph
          - openstack/charm-layer-ceph-base
          - openstack/charm-layer-openstack
          - openstack/charm-layer-openstack-api
          - openstack/charm-layer-openstack-principle
          - openstack/charm-magnum
          - openstack/charm-magnum-dashboard
          - openstack/charm-magnum-k8s
          - openstack/charm-magpie
          - openstack/charm-manila
          - openstack/charm-manila-dashboard
          - openstack/charm-manila-flashblade
          - openstack/charm-manila-ganesha
          - openstack/charm-manila-generic
          - openstack/charm-manila-glusterfs
          - openstack/charm-manila-infinidat
          - openstack/charm-manila-netapp
          - openstack/charm-masakari
          - openstack/charm-masakari-monitors
          - openstack/charm-mistral
          - openstack/charm-murano
          - openstack/charm-mysql-innodb-cluster
          - openstack/charm-mysql-router
          - openstack/charm-neutron-api
          - openstack/charm-neutron-api-odl
          - openstack/charm-neutron-api-plugin-arista
          - openstack/charm-neutron-api-plugin-ironic
          - openstack/charm-neutron-api-plugin-ovn
          - openstack/charm-neutron-dynamic-routing
          - openstack/charm-neutron-gateway
          - openstack/charm-neutron-k8s
          - openstack/charm-neutron-openvswitch
          - openstack/charm-nova-cell-controller
          - openstack/charm-nova-cloud-controller
          - openstack/charm-nova-compute
          - openstack/charm-nova-compute-nvidia-vgpu
          - openstack/charm-nova-compute-proxy
          - openstack/charm-nova-k8s
          - openstack/charm-nova-lxd
          - openstack/charm-octavia
          - openstack/charm-octavia-dashboard
          - openstack/charm-octavia-diskimage-retrofit
          - openstack/charm-octavia-k8s
          - openstack/charm-odl-controller
          - openstack/charm-openstack-dashboard
          - openstack/charm-openstack-exporter-k8s
          - openstack/charm-openstack-hypervisor
          - openstack/charm-openstack-loadbalancer
          - openstack/charm-openvswitch-odl
          - openstack/charm-ops-interface-ceph-client
          - openstack/charm-ops-interface-ceph-iscsi-admin-access
          - openstack/charm-ops-interface-openstack-loadbalancer
          - openstack/charm-ops-interface-tls-certificates
          - openstack/charm-ops-openstack
          - openstack/charm-ops-sunbeam
          - openstack/charm-pacemaker-remote
          - openstack/charm-panko
          - openstack/charm-percona-cluster
          - openstack/charm-placement
          - openstack/charm-placement-k8s
          - openstack/charm-rabbitmq-server
          - openstack/charm-specs
          - openstack/charm-swift-proxy
          - openstack/charm-swift-storage
          - openstack/charm-tempest
          - openstack/charm-trilio-data-mover
          - openstack/charm-trilio-dm-api
          - openstack/charm-trilio-horizon-plugin
          - openstack/charm-trilio-wlm
          - openstack/charm-trove
          - openstack/charm-vault
          - openstack/charm-watcher
          - openstack/charm-watcher-dashboard
          - openstack/charm-zuul-jobs
          - openstack/charms.ceph
          - openstack/charms.openstack
          - openstack/ci-log-processing
          - openstack/cinder
          - openstack/cinder-specs
          - openstack/cinder-tempest-plugin
          - openstack/cinderlib
          - openstack/cliff
          - openstack/cloudkitty
          - openstack/cloudkitty-dashboard
          - openstack/cloudkitty-specs
          - openstack/cloudkitty-tempest-plugin
          - openstack/codegenerator
          - openstack/constellations
          - openstack/contributor-guide
          - openstack/cookiecutter
          - openstack/coverage2sql
          - openstack/cyborg
          - openstack/cyborg-specs
          - openstack/cyborg-tempest-plugin
          - openstack/debtcollector
          - openstack/designate
          - openstack/designate-dashboard
          - openstack/designate-specs
          - openstack/designate-tempest-plugin
          - openstack/devstack-plugin-amqp1
          - openstack/devstack-plugin-ceph
          - openstack/devstack-plugin-container
          - openstack/devstack-plugin-cookiecutter
          - openstack/devstack-plugin-kafka
          - openstack/devstack-plugin-nfs
          - openstack/devstack-plugin-open-cas
          - openstack/devstack-tools
          - openstack/devstack-vagrant
          - openstack/diskimage-builder
          - openstack/election
          - openstack/eslint-config-openstack
          - openstack/etcd3gw
          - openstack/freezer
          - openstack/freezer-api
          - openstack/freezer-dr
          - openstack/freezer-specs
          - openstack/freezer-tempest-plugin
          - openstack/freezer-web-ui
          - openstack/futurist
          - openstack/glance
          - openstack/glance-specs
          - openstack/glance-tempest-plugin
          - openstack/glance_store
          - openstack/goal-tools
          - openstack/governance
          - openstack/governance-sigs
          - openstack/governance-website
          - openstack/grenade
          - openstack/ha-guide
          - openstack/hacking
          - openstack/heat
          - openstack/heat-agents
          - openstack/heat-cfntools
          - openstack/heat-dashboard
          - openstack/heat-specs
          - openstack/heat-tempest-plugin
          - openstack/heat-templates
          - openstack/heat-translator
          - openstack/horizon
          - openstack/i18n
          - openstack/ideas
          - openstack/ironic
          - openstack/ironic-inspector
          - openstack/ironic-inspector-specs
          - openstack/ironic-lib
          - openstack/ironic-prometheus-exporter
          - openstack/ironic-python-agent
          - openstack/ironic-python-agent-builder
          - openstack/ironic-specs
          - openstack/ironic-tempest-plugin
          - openstack/ironic-ui
          - openstack/karma-subunit-reporter
          - openstack/kayobe
          - openstack/kayobe-config
          - openstack/kayobe-config-dev
          - openstack/keystone
          - openstack/keystone-specs
          - openstack/keystone-tempest-plugin
          - openstack/keystoneauth
          - openstack/keystonemiddleware
          - openstack/kolla
          - openstack/kolla-ansible
          - openstack/kuryr
          - openstack/kuryr-kubernetes
          - openstack/kuryr-libnetwork
          - openstack/kuryr-tempest-plugin
          - openstack/large-scale
          - openstack/ldappool
          - openstack/liberasurecode
          - openstack/loci
          - openstack/logstash-filters
          - openstack/magnum
          - openstack/magnum-capi-helm
          - openstack/magnum-capi-helm-charts
          - openstack/magnum-specs
          - openstack/magnum-tempest-plugin
          - openstack/magnum-ui
          - openstack/manila
          - openstack/manila-image-elements
          - openstack/manila-specs
          - openstack/manila-tempest-plugin
          - openstack/manila-test-image
          - openstack/manila-ui
          - openstack/masakari
          - openstack/masakari-dashboard
          - openstack/masakari-monitors
          - openstack/masakari-specs
          - openstack/metalsmith
          - openstack/microversion-parse
          - openstack/mistral
          - openstack/mistral-dashboard
          - openstack/mistral-extra
          - openstack/mistral-lib
          - openstack/mistral-specs
          - openstack/mistral-tempest-plugin
          - openstack/molteniron
          - openstack/monasca-agent
          - openstack/monasca-api
          - openstack/monasca-ceilometer
          - openstack/monasca-common
          - openstack/monasca-events-api
          - openstack/monasca-grafana-datasource
          - openstack/monasca-kibana-plugin
          - openstack/monasca-log-api
          - openstack/monasca-notification
          - openstack/monasca-persister
          - openstack/monasca-specs
          - openstack/monasca-statsd
          - openstack/monasca-tempest-plugin
          - openstack/monasca-thresh
          - openstack/monasca-transform
          - openstack/monasca-ui
          - openstack/multi-arch-sig
          - openstack/networking-bagpipe
          - openstack/networking-baremetal
          - openstack/networking-bgpvpn
          - openstack/networking-generic-switch
          - openstack/networking-midonet
          - openstack/networking-odl
          - openstack/networking-sfc
          - openstack/neutron
          - openstack/neutron-dynamic-routing
          - openstack/neutron-fwaas
          - openstack/neutron-fwaas-dashboard
          - openstack/neutron-lib
          - openstack/neutron-specs
          - openstack/neutron-tempest-plugin
          - openstack/neutron-vpnaas
          - openstack/neutron-vpnaas-dashboard
          - openstack/nose-html-output
          - openstack/nova
          - openstack/nova-specs
          - openstack/octavia
          - openstack/octavia-dashboard
          - openstack/octavia-lib
          - openstack/octavia-tempest-plugin
          - openstack/openapi
          - openstack/openstack
          - openstack/openstack-ansible
          - openstack/openstack-ansible-apt_package_pinning
          - openstack/openstack-ansible-ceph_client
          - openstack/openstack-ansible-galera_client
          - openstack/openstack-ansible-galera_server
          - openstack/openstack-ansible-haproxy_server
          - openstack/openstack-ansible-lxc_container_create
          - openstack/openstack-ansible-lxc_hosts
          - openstack/openstack-ansible-memcached_server
          - openstack/openstack-ansible-nspawn_container_create
          - openstack/openstack-ansible-nspawn_hosts
          - openstack/openstack-ansible-openstack_hosts
          - openstack/openstack-ansible-openstack_openrc
          - openstack/openstack-ansible-ops
          - openstack/openstack-ansible-os_adjutant
          - openstack/openstack-ansible-os_aodh
          - openstack/openstack-ansible-os_barbican
          - openstack/openstack-ansible-os_blazar
          - openstack/openstack-ansible-os_ceilometer
          - openstack/openstack-ansible-os_cinder
          - openstack/openstack-ansible-os_cloudkitty
          - openstack/openstack-ansible-os_congress
          - openstack/openstack-ansible-os_designate
          - openstack/openstack-ansible-os_glance
          - openstack/openstack-ansible-os_gnocchi
          - openstack/openstack-ansible-os_heat
          - openstack/openstack-ansible-os_horizon
          - openstack/openstack-ansible-os_ironic
          - openstack/openstack-ansible-os_karbor
          - openstack/openstack-ansible-os_keystone
          - openstack/openstack-ansible-os_magnum
          - openstack/openstack-ansible-os_manila
          - openstack/openstack-ansible-os_masakari
          - openstack/openstack-ansible-os_mistral
          - openstack/openstack-ansible-os_monasca
          - openstack/openstack-ansible-os_monasca-agent
          - openstack/openstack-ansible-os_murano
          - openstack/openstack-ansible-os_neutron
          - openstack/openstack-ansible-os_nova
          - openstack/openstack-ansible-os_octavia
          - openstack/openstack-ansible-os_panko
          - openstack/openstack-ansible-os_placement
          - openstack/openstack-ansible-os_rally
          - openstack/openstack-ansible-os_sahara
          - openstack/openstack-ansible-os_senlin
          - openstack/openstack-ansible-os_skyline
          - openstack/openstack-ansible-os_swift
          - openstack/openstack-ansible-os_tacker
          - openstack/openstack-ansible-os_tempest
          - openstack/openstack-ansible-os_trove
          - openstack/openstack-ansible-os_zun
          - openstack/openstack-ansible-plugins
          - openstack/openstack-ansible-rabbitmq_server
          - openstack/openstack-ansible-repo_server
          - openstack/openstack-ansible-rsyslog_client
          - openstack/openstack-ansible-rsyslog_server
          - openstack/openstack-ansible-specs
          - openstack/openstack-doc-tools
          - openstack/openstack-helm
          - openstack/openstack-helm-images
          - openstack/openstack-helm-infra
          - openstack/openstack-helm-plugin
          - openstack/openstack-manuals
          - openstack/openstack-nose
          - openstack/openstack-planet
          - openstack/openstackclient
          - openstack/openstackdocstheme
          - openstack/openstacksdk
          - openstack/operations-guide
          - openstack/os-api-ref
          - openstack/os-apply-config
          - openstack/os-brick
          - openstack/os-client-config
          - openstack/os-collect-config
          - openstack/os-ken
          - openstack/os-performance-tools
          - openstack/os-refresh-config
          - openstack/os-resource-classes
          - openstack/os-service-types
          - openstack/os-test-images
          - openstack/os-testr
          - openstack/os-traits
          - openstack/os-vif
          - openstack/osc-lib
          - openstack/osc-placement
          - openstack/oslo-cookiecutter
          - openstack/oslo-specs
          - openstack/oslo.cache
          - openstack/oslo.concurrency
          - openstack/oslo.config
          - openstack/oslo.context
          - openstack/oslo.db
          - openstack/oslo.i18n
          - openstack/oslo.limit
          - openstack/oslo.log
          - openstack/oslo.messaging
          - openstack/oslo.metrics
          - openstack/oslo.middleware
          - openstack/oslo.policy
          - openstack/oslo.privsep
          - openstack/oslo.reports
          - openstack/oslo.rootwrap
          - openstack/oslo.serialization
          - openstack/oslo.service
          - openstack/oslo.tools
          - openstack/oslo.upgradecheck
          - openstack/oslo.utils
          - openstack/oslo.versionedobjects
          - openstack/oslo.vmware
          - openstack/oslotest
          - openstack/osops
          - openstack/osprofiler
          - openstack/ossa
          - openstack/ovn-bgp-agent
          - openstack/ovn-octavia-provider
          - openstack/ovsdbapp
          - openstack/panko
          - openstack/pbr
          - openstack/performance-docs
          - openstack/placement
          - openstack/project-team-guide
          - openstack/ptgbot
          - openstack/publiccloud-sig
          - openstack/puppet-aodh
          - openstack/puppet-barbican
          - openstack/puppet-ceilometer
          - openstack/puppet-ceph
          - openstack/puppet-cinder
          - openstack/puppet-cloudkitty
          - openstack/puppet-designate
          - openstack/puppet-glance
          - openstack/puppet-gnocchi
          - openstack/puppet-heat
          - openstack/puppet-horizon
          - openstack/puppet-ironic
          - openstack/puppet-keystone
          - openstack/puppet-magnum
          - openstack/puppet-manila
          - openstack/puppet-mistral
          - openstack/puppet-neutron
          - openstack/puppet-nova
          - openstack/puppet-octavia
          - openstack/puppet-openstack-cookiecutter
          - openstack/puppet-openstack-guide
          - openstack/puppet-openstack-integration
          - openstack/puppet-openstack-specs
          - openstack/puppet-openstack_extras
          - openstack/puppet-openstack_spec_helper
          - openstack/puppet-openstacklib
          - openstack/puppet-oslo
          - openstack/puppet-ovn
          - openstack/puppet-placement
          - openstack/puppet-swift
          - openstack/puppet-tempest
          - openstack/puppet-trove
          - openstack/puppet-vitrage
          - openstack/puppet-vswitch
          - openstack/puppet-watcher
          - openstack/puppet-zaqar
          - openstack/pycadf
          - openstack/pyeclib
          - openstack/pymod2pkg
          - openstack/python-adjutantclient
          - openstack/python-aodhclient
          - openstack/python-barbicanclient
          - openstack/python-blazarclient
          - openstack/python-brick-cinderclient-ext
          - openstack/python-cinderclient
          - openstack/python-cloudkittyclient
          - openstack/python-cyborgclient
          - openstack/python-designateclient
          - openstack/python-dracclient
          - openstack/python-freezerclient
          - openstack/python-glanceclient
          - openstack/python-heatclient
          - openstack/python-ironic-inspector-client
          - openstack/python-ironicclient
          - openstack/python-keystoneclient
          - openstack/python-magnumclient
          - openstack/python-manilaclient
          - openstack/python-masakariclient
          - openstack/python-mistralclient
          - openstack/python-monascaclient
          - openstack/python-neutronclient
          - openstack/python-novaclient
          - openstack/python-observabilityclient
          - openstack/python-octaviaclient
          - openstack/python-openstackclient
          - openstack/python-pankoclient
          - openstack/python-swiftclient
          - openstack/python-tackerclient
          - openstack/python-troveclient
          - openstack/python-venusclient
          - openstack/python-vitrageclient
          - openstack/python-watcherclient
          - openstack/python-zaqarclient
          - openstack/python-zunclient
          - openstack/qa-specs
          - openstack/rally
          - openstack/rally-openstack
          - openstack/rbd-iscsi-client
          - openstack/release-test
          - openstack/releases
          - openstack/renderspec
          - openstack/reno
          - openstack/requestsexceptions
          - openstack/requirements
          - openstack/reviewday
          - openstack/reviewstats
          - openstack/rpm-packaging
          - openstack/rpm-packaging-tools
          - openstack/security-doc
          - openstack/self-healing-sig
          - openstack/service-types-authority
          - openstack/shade
          - openstack/skyline-apiserver
          - openstack/skyline-console
          - openstack/specs-cookiecutter
          - openstack/sphinx-feature-classification
          - openstack/stackviz
          - openstack/stevedore
          - openstack/storlets
          - openstack/sunbeam-charms
          - openstack/sushy
          - openstack/sushy-oem-idrac
          - openstack/sushy-tools
          - openstack/swift
          - openstack/swift-bench
          - openstack/tacker
          - openstack/tacker-horizon
          - openstack/tacker-specs
          - openstack/tap-as-a-service
          - openstack/taskflow
          - openstack/telemetry-specs
          - openstack/telemetry-tempest-plugin
          - openstack/tempest-plugin-cookiecutter
          - openstack/tempest-stress
          - openstack/tenks
          - openstack/tooz
          - openstack/tosca-parser
          - openstack/training-guides
          - openstack/tripleo-ci
          - openstack/tripleo-ci-health-queries
          - openstack/trove
          - openstack/trove-dashboard
          - openstack/trove-specs
          - openstack/trove-tempest-plugin
          - openstack/ui-cookiecutter
          - openstack/upstream-institute-virtual-environment
          - openstack/venus
          - openstack/venus-dashboard
          - openstack/venus-specs
          - openstack/venus-tempest-plugin
          - openstack/virtualbmc
          - openstack/virtualpdu
          - openstack/vitrage
          - openstack/vitrage-dashboard
          - openstack/vitrage-specs
          - openstack/vitrage-tempest-plugin
          - openstack/watcher
          - openstack/watcher-dashboard
          - openstack/watcher-specs
          - openstack/watcher-tempest-plugin
          - openstack/whereto
          - openstack/whitebox-tempest-plugin
          - openstack/xstatic-angular
          - openstack/xstatic-angular-bootstrap
          - openstack/xstatic-angular-fileupload
          - openstack/xstatic-angular-gettext
          - openstack/xstatic-angular-lrdragndrop
          - openstack/xstatic-angular-material
          - openstack/xstatic-angular-notify
          - openstack/xstatic-angular-smart-table
          - openstack/xstatic-angular-uuid
          - openstack/xstatic-angular-vis
          - openstack/xstatic-bootstrap-datepicker
          - openstack/xstatic-bootstrap-scss
          - openstack/xstatic-bootswatch
          - openstack/xstatic-d3
          - openstack/xstatic-dagre
          - openstack/xstatic-dagre-d3
          - openstack/xstatic-filesaver
          - openstack/xstatic-graphlib
          - openstack/xstatic-hogan
          - openstack/xstatic-jasmine
          - openstack/xstatic-jquery-migrate
          - openstack/xstatic-jquery.quicksearch
          - openstack/xstatic-jquery.tablesorter
          - openstack/xstatic-js-yaml
          - openstack/xstatic-jsencrypt
          - openstack/xstatic-json2yaml
          - openstack/xstatic-lodash
          - openstack/xstatic-magic-search
          - openstack/xstatic-mdi
          - openstack/xstatic-moment
          - openstack/xstatic-moment-timezone
          - openstack/xstatic-rickshaw
          - openstack/xstatic-roboto-fontface
          - openstack/xstatic-spin
          - openstack/yaql
          - openstack/zaqar
          - openstack/zaqar-specs
          - openstack/zaqar-tempest-plugin
          - openstack/zaqar-ui
          - openstack/zun
          - openstack/zun-tempest-plugin
          - openstack/zun-ui
          - performa/os-faults
          - performa/shaker
          - sardonic/sardonic
          - starlingx/ansible-playbooks
          - starlingx/app-cstate-management
          - starlingx/app-dell-storage
          - starlingx/app-distributed-cloud
          - starlingx/app-gen-tool
          - starlingx/app-harbor
          - starlingx/app-intel-device-plugins
          - starlingx/app-intel-ethernet-operator
          - starlingx/app-istio
          - starlingx/app-kubernetes-power-manager
          - starlingx/app-kubevirt
          - starlingx/app-node-feature-discovery
          - starlingx/app-node-interface-metrics-exporter
          - starlingx/app-openbao
          - starlingx/app-oran-o2
          - starlingx/app-power-metrics
          - starlingx/app-rook-ceph
          - starlingx/app-security-profiles-operator
          - starlingx/app-sriov-fec-operator
          - starlingx/app-sts-silicom
          - starlingx/apt-ostree
          - starlingx/audit-armada-app
          - starlingx/cert-manager-armada-app
          - starlingx/clients
          - starlingx/compile
          - starlingx/config
          - starlingx/config-files
          - starlingx/containers
          - starlingx/distcloud
          - starlingx/distcloud-client
          - starlingx/docs
          - starlingx/election
          - starlingx/fault
          - starlingx/governance
          - starlingx/gplv2
          - starlingx/gplv3
          - starlingx/gui
          - starlingx/ha
          - starlingx/helm-charts
          - starlingx/integ
          - starlingx/jenkins-pipelines
          - starlingx/kernel
          - starlingx/manifest
          - starlingx/meta-starlingx
          - starlingx/metal
          - starlingx/metrics-server-armada-app
          - starlingx/monitor-armada-app
          - starlingx/monitoring
          - starlingx/nfv
          - starlingx/nginx-ingress-controller-armada-app
          - starlingx/oidc-auth-armada-app
          - starlingx/openstack-armada-app
          - starlingx/platform-armada-app
          - starlingx/portieris-armada-app
          - starlingx/ptp-notification-armada-app
          - starlingx/public-keys
          - starlingx/rook-ceph
          - starlingx/root
          - starlingx/SDO-rv-service
          - starlingx/snmp-armada-app
          - starlingx/specs
          - starlingx/stx-puppet
          - starlingx/test
          - starlingx/tis-repo
          - starlingx/tools
          - starlingx/update
          - starlingx/upstream
          - starlingx/utilities
          - starlingx/utils
          - starlingx/vault-armada-app
          - starlingx/virt
          - starlingx/virtual-deployment
          - starlingx/zuul-jobs
          - ttygroup/boartty
          - ttygroup/gertty
          - x/alexandria
          - x/almanach
          - x/ansible-role-bindep
          - x/ansible-role-fedmsg
          - x/ansible-role-jenkins
          - x/ansible-role-jenkins-job-builder
          - x/ansible-role-jenkins-plugins
          - x/ansible-tripleo-ipa-server
          - x/apmec
          - x/apmec-horizon
          - x/bansho
          - x/bareon
          - x/bareon-allocator
          - x/bareon-api
          - x/bareon-image-elements
          - x/bareon-ironic
          - x/bareon-specs
          - x/bilean
          - x/broadview-collector
          - x/broadview-lib
          - x/broadview-ui
          - x/browbeat
          - x/cathead
          - x/ceilometer-zvm
          - x/certbot-dns-openstack
          - x/charm-6wind-virtual-accelerator
          - x/charm-interface-barbican-hsm
          - x/charm-interface-ovsdb
          - x/charm-neutron-api-plumgrid
          - x/charm-ovn-central
          - x/charm-ovn-central-k8s
          - x/charm-ovn-chassis
          - x/charm-ovn-dedicated-chassis
          - x/charm-ovn-relay-k8s
          - x/charm-plumgrid-director
          - x/charm-plumgrid-edge
          - x/charm-plumgrid-gateway
          - x/ci-cd-pipeline-app-murano
          - x/cinder-fusioncompute
          - x/cisco-ironic-contrib
          - x/ciwatch
          - x/cl-openstack-client
          - x/cloudbase-init
          - x/cloudcafe
          - x/cloudpulse
          - x/cloudroast
          - x/coats
          - x/cognitive
          - x/compass-adapters
          - x/compass-core
          - x/compass-install
          - x/compass-specs
          - x/compass-web
          - x/conveyor
          - x/coupler
          - x/cursive
          - x/daisycloud-core
          - x/dash-stack
          - x/delimiter
          - x/devstack-plugin-additional-pkg-repos
          - x/devstack-plugin-glusterfs
          - x/devstack-plugin-hdfs
          - x/devstack-plugin-libvirt-qemu
          - x/devstack-plugin-mariadb
          - x/devstack-plugin-tar-installer
          - x/devstack-plugin-tobiko
          - x/devstack-plugin-vmax
          - x/distil
          - x/distil-ui
          - x/doc8
          - x/docker-machine-openstack
          - x/downpour
          - x/drbd-devstack
          - x/driverlog
          - x/ec2-driver
          - x/ekko
          - x/entropy
          - x/fenix
          - x/fixtures-git
          - x/flame
          - x/flare
          - x/foxnut
          - x/gabbi-tempest
          - x/gerrit-dash-creator
          - x/giftwrap
          - x/git-nit
          - x/git-os-job
          - x/git-repo-manifests
          - x/git-upstream
          - x/gitdm
          - x/glare-specs
          - x/gluon
          - x/golang-client
          - x/golang-commons
          - x/gos-brick
          - x/group-based-policy
          - x/group-based-policy-automation
          - x/group-based-policy-specs
          - x/group-based-policy-ui
          - x/gyan
          - x/gyan-dashboard
          - x/gyan-specs
          - x/horizon-mellanox
          - x/hurricane
          - x/inception
          - x/infra-ansible
          - x/intel-nfv-ci-tests
          - x/interop-workloads
          - x/iotronic
          - x/iotronic-lightning-rod
          - x/iotronic-ui
          - x/ipa-example-hardware-managers
          - x/ironic-staging-drivers
          - x/jacket
          - x/jenkins-plugins-for-murano
          - x/k8s-cloud-provider
          - x/k8s-docker-suite-app-murano
          - x/kiloeyes
          - x/kingbird
          - x/kingbird-dashboard
          - x/kloudbuster
          - x/kosmos
          - x/kosmos-specs
          - x/ku.stella
          - x/kwapi
          - x/marshal
          - x/meghdwar
          - x/merlin
          - x/meteos
          - x/meteos-ui
          - x/microstack
          - x/microstack-specs
          - x/mitmstack
          - x/mogan-specs
          - x/mogan-ui
          - x/monasca-vagrant
          - x/mors
          - x/murano-plugin-networking-sfc
          - x/namos
          - x/nemesis
          - x/nerd-reviewer
          - x/networking-6wind
          - x/networking-ale-omniswitch
          - x/networking-ansible
          - x/networking-arista
          - x/networking-avaya
          - x/networking-bigswitch
          - x/networking-brocade
          - x/networking-cisco
          - x/networking-cumulus
          - x/networking-dpm
          - x/networking-edge-vpn
          - x/networking-extreme
          - x/networking-fortinet
          - x/networking-fujitsu
          - x/networking-gluon
          - x/networking-h3c
          - x/networking-hpe
          - x/networking-huawei
          - x/networking-icc
          - x/networking-infoblox
          - x/networking-l2gw
          - x/networking-l2gw-tempest-plugin
          - x/networking-lagopus
          - x/networking-lenovo
          - x/networking-mlnx
          - x/networking-nec
          - x/networking-omnipath
          - x/networking-ovs-dpdk
          - x/networking-peregrine
          - x/networking-plumgrid
          - x/networking-spp
          - x/networking-vpp
          - x/networking-vsphere
          - x/networking-zte
          - x/networking-zvm
          - x/neutron-interconnection
          - x/nfv-filters
          - x/nova-dpm
          - x/nova-fusioncompute
          - x/nova-mksproxy
          - x/nova-solver-scheduler
          - x/nova-zvm-virt-driver
          - x/novajoin
          - x/novajoin-tempest-plugin
          - x/oaktree
          - x/oaktreemodel
          - x/omni
          - x/ooi
          - x/opencafe
          - x/openstack-mentoring-scripts
          - x/openstack-resource-agents
          - x/openstack-resource-agents-specs
          - x/openstack-service-broker
          - x/openstack-spaceport
          - x/ops-telecom-nfv
          - x/os-dpm
          - x/os-http
          - x/os-log-merger
          - x/os-namos
          - x/os-xenapi
          - x/osc-summit-counter
          - x/osel
          - x/osops-coda
          - x/osops-example-configs
          - x/osops-tools-contrib
          - x/osops-tools-generic
          - x/osops-tools-logging
          - x/osops-tools-monitoring
          - x/ospurge
          - x/packetary
          - x/packetary-specs
          - x/packstack
          - x/pandaman
          - x/performa
          - x/picasso
          - x/poppy
          - x/poppy-ui
          - x/powervc-driver
          - x/proliantutils
          - x/promstat
          - x/puppet-autossh
          - x/puppet-fenix
          - x/puppet-midonet
          - x/puppet-modulesync-configs
          - x/puppet-n1k-vsm
          - x/puppet-setproxy
          - x/puppet-surveil
          - x/pyghmi
          - x/python-almanachclient
          - x/python-apmecclient
          - x/python-bileanclient
          - x/python-cloudpulseclient
          - x/python-cognitiveclient
          - x/python-distilclient
          - x/python-don
          - x/python-fenixclient
          - x/python-glareclient
          - x/python-group-based-policy-client
          - x/python-gyanclient
          - x/python-hnvclient
          - x/python-iotronicclient
          - x/python-k8sclient
          - x/python-kingbirdclient
          - x/python-meteosclient
          - x/python-moganclient
          - x/python-namosclient
          - x/python-oneviewclient
          - x/python-opentsdbclient
          - x/python-picassoclient
          - x/python-redfish
          - x/python-rsdclient
          - x/python-scciclient
          - x/python-surveilclient
          - x/python-tatuclient
          - x/python-valenceclient
          - x/quark
          - x/radar
          - x/ramdisk-func-test
          - x/ranger
          - x/ranger-agent
          - x/ranger-tempest-plugin
          - x/rsd-lib
          - x/rsd-virt-for-nova
          - x/sahara-ci-config
          - x/scalpels
          - x/shovel
          - x/shovel-horizon
          - x/siss
          - x/slogging
          - x/snap-ceilometer
          - x/snap-cinder
          - x/snap-glance
          - x/snap-gnocchi
          - x/snap-keystone
          - x/snap-neutron
          - x/snap-nova
          - x/snap-nova-hypervisor
          - x/snap-openstackclients
          - x/snap-rally
          - x/snap-tempest
          - x/snap.openstack
          - x/solar
          - x/solar-resources
          - x/spanner
          - x/spectroscope
          - x/sqlalchemy-migrate
          - x/stackalytics
          - x/stacklight-integration-tests
          - x/stacktach
          - x/stacktach-klugman
          - x/stacktach-notification-utils
          - x/stacktach-notigen
          - x/stacktach-quince
          - x/stacktach-quincy
          - x/stacktach-sandbox
          - x/stacktach-shoebox
          - x/stacktach-simport
          - x/stacktach-stackdistiller
          - x/stacktach-timex
          - x/stacktach-winchester
          - x/stackube
          - x/steth
          - x/surveil
          - x/surveil-specs
          - x/swift-ceph-backend
          - x/swift3
          - x/swiftonfile
          - x/swiftonhpss
          - x/synergy-scheduler-manager
          - x/synergy-service
          - x/tap-as-a-service-dashboard
          - x/tap-as-a-service-tempest-plugin
          - x/tatu
          - x/tatu-dashboard
          - x/telcowg-usecases
          - x/terracotta
          - x/third-party-ci-tools
          - x/timmy
          - x/tobiko
          - x/trio2o
          - x/turbo-hipster
          - x/vahana
          - x/valence
          - x/valence-specs
          - x/valet
          - x/vm-bm-wg
          - x/vmtp
          - x/vmware-nsx-tempest-plugin
          - x/vmware-nsxlib
          - x/vmware-vspc
          - x/whitebox-neutron-tempest-plugin
          - x/wsme
          - x/xenapi-os-testing
          - x/xstatic-angular-cookies
          - x/xstatic-angular-mock
          - x/xstatic-angular-sanitize
          - x/xstatic-jquery.bootstrap.wizard
          - x/xstatic-qunit
          - zuul/nodepool:
              include: ['job', 'secret', 'nodeset']
          - zuul/zuul:
              include: ['job', 'secret', 'nodeset']
          # Include some projects without config for use in
          # required-projects
          - include: []
            projects:
              - opendev/gear
              - zuul/zuul-registry
              - zuul/zuul-client
      github:
        untrusted-projects:
          # Don't load any configuration from these projects because we
          # don't gate them, so they could wedge our config.
          - include: []
            projects:
              # Sorting projects alphabetically will help merge conflicts.
              - ansible/ansible
              - ansible-collections/ansible.posix
              - ansible-collections/ansible.netcommon
              - ansible-collections/ansible.utils
              - ansible-collections/community.crypto
              - ansible-collections/community.general
              - ansible-collections/community.libvirt
              - ansible-collections/openvswitch.openvswitch
              - ceph/ceph-ansible
              - cherrypy/cherrypy
              - eventlet/eventlet
              - gnocchixyz/gnocchi
              - gtest-org/ansible
              - harlowja/fasteners
              - infrawatch/collectd-config-ansible-role
              - infrawatch/functional-tests
              - infrawatch/qdr-config-ansible-role
              - infrawatch/sg-core
              - kubernetes-incubator/kubespray
              - metal3-io/metal3-dev-env
              - mtreinish/stestr
              - novnc/novnc
              - openvswitch/ovs
              - pytest-dev/pytest-testinfra
              - sphinx-doc/sphinx
              - sqlalchemy/alembic
              - sqlalchemy/dogpile.cache
              - sqlalchemy/sqlalchemy
              - stackhpc/ansible-role-dell-powerconnect-switch
              - stackhpc/ansible-role-grafana-conf
              - stackhpc/ansible-role-libvirt-host
              - stackhpc/ansible-role-libvirt-vm
              - stackhpc/ansible-role-luks
              - stackhpc/ansible-role-mellanox-switch
              - stackhpc/ansible-role-os-images
              - stackhpc/ansible-role-os-ironic-state
              - stackhpc/ansible-role-os-networks
              - stackhpc/ansible-role-os-openstackclient
              - stackhpc/ansible-role-os-openstacksdk
              - stackhpc/ansible-role-systemd-networkd
              - stackhpc/ansible-timezone
              - stackhpc/drac
              - stackhpc/drac-facts
              - svinota/pyroute2
              - swiftstack/ProxyFS
              - DPDK/dpdk
      googlesource:
        untrusted-projects:
          - include: []
            projects: *googlesource_projects

- tenant:
    name: vexxhost
    admin-rules: *admin_rules
    default-ansible-version: '9'
    max-nodes-per-job: 10
    source:
      gerrit:
        config-projects:
          # Include the minimal amount of configuration from this repo. In
          # particular we don't want to include the project defs which cause
          # jobs to run for this repo in this tenant.
          - opendev/base-jobs:
              include:
                - job
                - secret
                - nodeset
          - vexxhost/project-config
        untrusted-projects:
          - zuul/zuul-jobs
          - vexxhost/ansible-collection-atmosphere
          - vexxhost/ansible-role-base-server
          - vexxhost/ansible-role-docker-distribution
          - vexxhost/ansible-role-openmanage
          - vexxhost/ansible-role-wireguard
          - vexxhost/atmosphere
          - vexxhost/docker-images
          - vexxhost/documentation
          - vexxhost/google-directory-api-linux-agent
          - vexxhost/helm-charts
          - vexxhost/kue
          - vexxhost/libvirtd_exporter
          - vexxhost/lodgeit-helm
          - vexxhost/network_exporter
          - vexxhost/node-labeler
          - vexxhost/openstack-monitoring
          - vexxhost/openstack-operator
          - vexxhost/openstack-tools
          - vexxhost/openvswitch_exporter
          - vexxhost/rally_exporter
          - vexxhost/rbac-helm
          - vexxhost/smokeping_prober-helm
          - vexxhost/tempest-pushgateway
          # Include some projects with job config for cross-tenant
          # jobs
          - include: [job, nodeset]
            projects:
              - openstack/devstack
              - openstack/tempest
          # Include some projects without config for use in
          # required-projects
          - include: []
            projects:
              - openstack/barbican
              - openstack/barbican-tempest-plugin
              - openstack/cinder
              - openstack/devstack-plugin-ceph
              - openstack/glance
              - openstack/heat
              - openstack/heat-tempest-plugin
              - openstack/horizon
              - openstack/keystone
              - openstack/loci
              - openstack/magnum
              - openstack/magnum-tempest-plugin
              - openstack/monasca-agent
              - openstack/monasca-api
              - openstack/monasca-ceilometer
              - openstack/monasca-common
              - openstack/monasca-events-api
              - openstack/monasca-notification
              - openstack/monasca-persister
              - openstack/monasca-statsd
              - openstack/monasca-tempest-plugin
              - openstack/monasca-thresh
              - openstack/monasca-transform
              - openstack/neutron
              - openstack/nova
              - openstack/openstack-helm-images
              - openstack/openstack-zuul-jobs
              - openstack/oslo.cache
              - openstack/oslo.concurrency
              - openstack/oslo.config
              - openstack/oslo.context
              - openstack/oslo.db
              - openstack/oslo.i18n
              - openstack/oslo.log
              - openstack/oslo.messaging
              - openstack/oslo.middleware
              - openstack/oslo.policy
              - openstack/oslo.privsep
              - openstack/oslo.reports
              - openstack/oslo.rootwrap
              - openstack/oslo.serialization
              - openstack/oslo.service
              - openstack/oslo.utils
              - openstack/oslo.versionedobjects
              - openstack/oslo.vmware
              - openstack/placement
              - openstack/requirements
              - openstack/swift

- tenant:
    name: zuul
    admin-rules: *admin_rules
    default-ansible-version: '9'
    max-nodes-per-job: 10
    source:
      gerrit:
        config-projects:
          - zuul/project-config
          # Include the minimal amount of configuration from this repo. In
          # particular we don't want to include the project defs which cause
          # jobs to run for this repo in this tenant.
          - opendev/base-jobs:
              include:
                - job
                - secret
                - nodeset
          - zuul/zuul-base-jobs:
              extra-config-paths:
                - zuul-tests.d/
              shadow:
                - opendev/base-jobs
                - zuul/project-config
        untrusted-projects:
          - zuul/zuul-jobs:
              extra-config-paths:
                - zuul-tests.d/
          - zuul/nodepool
          - zuul/zuul
          - zuul/zuul-client
          - zuul/zuul-helm
          - zuul/zuul-operator
          - zuul/zuul-preview
          - zuul/zuul-registry
          - zuul/zuul-sphinx
          - zuul/zuul-storage-proxy
          - zuul/zuul-website
          - zuul/zuul-website-media
          - zuul/gating.dev
          - zuul/gcp-authdaemon
          # Include some projects without config for use in
          # required-projects
          - include: []
            projects:
              - opendev/gear
              - opendev/glean
              - opendev/jeepyb
              - opendev/zone-opendev.org
              - opendev/zone-zuul-ci.org
              - openstack/diskimage-builder
              - openstack/openstacksdk
              - openstack/project-config
              - openstack/requirements
          # Include some projects with job config for cross-tenant
          # jobs
          - include: [job, secret, nodeset]
            projects:
              - opendev/system-config
      github:
        untrusted-projects:
          # Don't load any configuration from these projects because we
          # don't gate them, so they could wedge our config.
          - include: []
            projects:
              # Sorting projects alphabetically will help merge conflicts.
              - ansible/ansible
              - cherrypy/cherrypy
              - pytest-dev/pytest-testinfra
              - sphinx-contrib/openapi
              - sqlalchemy/dogpile.cache
      googlesource:
        untrusted-projects:
          - include: []
            projects: *googlesource_projects

# 3rd party CI for Python Cryptographic Authority
# https://github.com/pyca
- tenant:
    name: pyca
    admin-rules: *admin_rules
    default-ansible-version: '9'
    max-nodes-per-job: 1
    source:
      gerrit:
        config-projects:
          - pyca/project-config
          # Include the minimal amount of configuration from this repo. In
          # particular we don't want to include the project defs which cause
          # jobs to run for this repo in this tenant.
          - opendev/base-jobs:
              include:
                - job
                - secret
                - nodeset
        untrusted-projects:
          - pyca/infra
          - zuul/zuul-jobs
      github:
        untrusted-projects:
          - pyca/cryptography
          - google/wycheproof:
              include: []

# 3rd party CI for Python Packaging Authority
# https://github.com/pypa
- tenant:
    name: pypa
    admin-rules: *admin_rules
    default-ansible-version: '9'
    max-nodes-per-job: 1
    source:
      gerrit:
        config-projects:
          - pypa/project-config
          # Include the minimal amount of configuration from this repo. In
          # particular we don't want to include the project defs which cause
          # jobs to run for this repo in this tenant.
          - opendev/base-jobs:
              include:
                - job
                - secret
                - nodeset
        untrusted-projects:
          - zuul/zuul-jobs
      github:
        untrusted-projects:
          - pypa/pip

- tenant:
    name: volvocars
    admin-rules: *admin_rules
    default-ansible-version: '9'
    max-nodes-per-job: 10
    source:
      gerrit:
        config-projects:
          # Include the minimal amount of configuration from this repo. In
          # particular we don't want to include the project defs which cause
          # jobs to run for this repo in this tenant.
          - opendev/base-jobs:
              include:
                - job
                - secret
                - nodeset
          - volvocars/project-config
        untrusted-projects:
          - zuul/zuul-jobs
          - volvocars/powertrain-build