releases/tools/aclfixer.py
Thierry Carrez 082bec74fc aclfixer.py: Remove swift-bench from exceptions
ACL for swift-bench was fixed in:
https://review.openstack.org/#/c/575071/

Change-Id: I06c525f8ae97b9217340d6df740ec66bc67263b5
2018-06-22 14:31:37 +02:00

136 lines
3.9 KiB
Python
Executable File

#!/usr/bin/python
#
# Tool to generate a patch to remove direct tagging / branch-creating
# rights for official OpenStack deliverables
#
# Copyright 2018 Thierry Carrez <thierry@openstack.org>
# All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
import argparse
import os
import re
import sys
import yaml
TEAM_EXCEPTIONS = [
# Teams that are likely to be moved off TC governance
'Infrastructure',
'RefStack',
# Deployment tool teams with externally-released artifacts
'OpenStack Charms',
'Chef OpenStack',
'OpenStack-Helm',
# Others
'rally',
]
WILDCARD_REPO_EXCEPTIONS = [
]
REPO_EXCEPTIONS = [
'openstack/manila-image-elements',
'openstack/manila-test-image',
]
def is_a_repo_exception(repo):
for pattern in WILDCARD_REPO_EXCEPTIONS:
if re.match(pattern, repo):
return True
return repo in REPO_EXCEPTIONS
def is_a_team_exception(team):
return team in TEAM_EXCEPTIONS
def acl_patch(repo, fullfilename):
newcontent = ""
with open(fullfilename) as aclfile:
skip = False
for line in aclfile:
# Skip until start of next section if in skip mode
if skip:
if line.startswith('['):
skip = False
else:
continue
# Remove [access ref/tags/*] sections
if line.startswith('[access "refs/tag'):
skip = True
continue
# Remove 'create' lines
if line.startswith('create ='):
continue
# Copy the current line over
newcontent += line
with open(fullfilename, 'w') as aclfile:
aclfile.write(newcontent)
def main(args=sys.argv[1:]):
parser = argparse.ArgumentParser()
parser.add_argument('project_config_repo')
parser.add_argument('governance_repo')
parser.add_argument(
'--dryrun',
default=False,
help='do not actually do anything',
action='store_true')
args = parser.parse_args(args)
# Load repo/aclfile mapping from Gerrit config
projectsyaml = os.path.join(args.project_config_repo, 'gerrit', 'projects.yaml')
acl = {}
config = yaml.load(open(projectsyaml))
for project in config:
aclfilename = project.get('acl-config')
if aclfilename:
(head, tail) = os.path.split(aclfilename)
acl[project['project']] = os.path.join(os.path.basename(head),
tail)
else:
acl[project['project']] = project['project'] + '.config'
aclbase = os.path.join(args.project_config_repo, 'gerrit', 'acls')
governanceyaml = os.path.join(args.governance_repo, 'reference', 'projects.yaml')
teams = yaml.load(open(governanceyaml))
for tname, team in teams.iteritems():
if is_a_team_exception(tname):
print('--- %s --- (SKIPPED)' % tname)
continue
print('=== %s ===' % tname)
for dname, deliverable in team['deliverables'].iteritems():
for repo in deliverable.get('repos'):
if is_a_repo_exception(repo):
print('%s - Skipping' % repo)
else:
print('%s - Patching %s' % (repo, acl[repo]))
if not args.dryrun:
acl_patch(repo, os.path.join(aclbase, acl[repo]))
if __name__ == '__main__':
main()