opendev
/
infra-manual
Code Issues Proposed changes

New subsection on voting third-party CI permission 

Voting third-party CI permission grants in Gerrit ACLs are a bit
nuanced, so explain them in some detail and provide an example
similar to the others in that section.

Change-Id: I3849036f3f4c753d0c5c8f377ad164a019f3b7d2
This commit is contained in:
Jeremy Stanley 2017-05-03 14:39:42 +00:00 committed by Andreas Jaeger
parent 23603bd762
commit e3c6b457c8
1 changed files with 27 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
doc/source/creators.rst
View File

@ -441,16 +441,41 @@ The ``exclusiveGroupPermissions`` avoids the inheritance from
privileges to the stable team and add back the default privileges for
owners of a change, gerrit administrators, and all users.
Voting Third-Party CI
~~~~~~~~~~~~~~~~~~~~~
To allow some third-party CI systems to vote Verify +1 or -1 on
proposed changes for your project, add a ``label-Verified`` rule to
the ``refs/heads/*`` section::
[access "refs/heads/*"]
abandon = group <projectname>-core
label-Code-Review = -2..+2 group <projectname>-core
label-Verified = -1..+1 group <projectname>-ci
label-Workflow = -1..+1 group <projectname>-core
Optionally, if you only want them to be able to Verify +1 you can
adjust the vote range to ``0..+1`` instead.
Once the project is created it is strongly recommended you go to the
*General* settings for the ``<projectname>-ci`` group in Gerrit's
WebUI and switch the *Owners* field to your ``<projectname>-core``
group (or ``<projectname>-release`` if you have one) so that it is
no longer self-managed, allowing your project team to control the
membership without needing to be members of the group themselves.
Extended ACL File
~~~~~~~~~~~~~~~~~
So, if your project requires the ICLA signed, has a release team
that will create tags and branches, create a
``gerrit/acls/openstack/<projectname>.config`` like::
that will create tags and branches, and allow voting third-party CI
systems, create a ``gerrit/acls/openstack/<projectname>.config``
like::
[access "refs/heads/*"]
abandon = group <projectname>-core
create = group <projectname>-release
label-Code-Review = -2..+2 group <projectname>-core
label-Verified = -1..+1 group <projectname>-ci
label-Workflow = -1..+1 group <projectname>-core
[access "refs/tags/*"]