zuul/tests/fixtures/config/shadow/main.yaml

- tenant:
    name: tenant-one
    source:
      gerrit:
        config-projects:
          - local-config
        untrusted-projects:
          - stdlib:
              shadow: local-config
          - org/project