)]}'
{"id":"openstack%2Fproject-config~782830","triplet_id":"openstack%2Fproject-config~master~Ifb7ef3870b2c2d876a3dbe21a4ad7a930f09ee5c","project":"openstack/project-config","branch":"master","topic":"openstack-releases","hashtags":[],"change_id":"Ifb7ef3870b2c2d876a3dbe21a4ad7a930f09ee5c","subject":"Add an empty project for an OpenStack base ACL","status":"MERGED","created":"2021-03-24 17:44:15.000000000","updated":"2021-04-14 18:25:38.000000000","submitted":"2021-04-14 18:21:11.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"782830-openstack-releases","meta_rev_id":"4b85a0249c336ae67c81e775c2d065799480395b","_number":782830,"virtual_id_number":782830,"owner":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:gate","value":2,"date":"2021-04-14 18:21:10.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},{"value":0,"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},{"value":0,"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},{"value":2,"date":"2021-04-14 14:37:54.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},{"value":2,"date":"2021-04-14 12:51:59.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2021-04-14 18:09:34.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},{"value":0,"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},{"value":0,"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2021-03-24 17:51:44.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2021-04-14 12:51:59.000000000","updated_by":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"reviewer":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"state":"REVIEWER"},{"updated":"2021-04-14 14:37:54.000000000","updated_by":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"reviewer":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"state":"REVIEWER"}],"messages":[{"id":"7ea5c0a57f6cba0c1513a2be05c2e8ca22003888","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"date":"2021-03-24 17:44:15.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"f985cc362e265359db8a07dd0a3974228bb4aa90","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-03-24 17:51:44.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-zuul-jobs-linters https://zuul.opendev.org/t/openstack/build/4974ad263e464b389526b2fce18ca9c1 : SUCCESS in 5m 56s\n- project-config-gerrit https://zuul.opendev.org/t/openstack/build/0f407d2ff39644029a2fce3c3e2d76d4 : FAILURE in 3m 57s","accounts_in_message":[],"_revision_number":1},{"id":"4267bad2ce92deedcb0472c0f5dbf967c15827f5","author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"date":"2021-03-24 19:48:27.000000000","message":"Patch Set 1:\n\nYeah, I expected this would fail our config linter due to a lack of some \"typical\" ACL content.\n\nIt dawns on me that there\u0027s also an alternative approach. Instead of relying on Gerrit\u0027s inheritance feature, we could precompile project config files. This would mean that configs composed from multiple files couldn\u0027t rely on the exclusive permissions toggles as an override between component snippets, but maybe that\u0027s actually a feature. Anyway, it\u0027s worth having the discussion.","accounts_in_message":[],"_revision_number":1},{"id":"b8a35d8018900d259681b0ffe5a38e29361f92ba","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"date":"2021-04-13 18:33:24.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"be81583c78f6afdb306b5ffffa05f6fd3f1c8554","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-04-13 18:39:56.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-zuul-jobs-linters https://zuul.opendev.org/t/openstack/build/e49a8e11a68f4743be65945b909d1a7b : SUCCESS in 5m 47s\n- project-config-gerrit https://zuul.opendev.org/t/openstack/build/9818c03f02194b7f908d3b014e51be59 : SUCCESS in 4m 13s","accounts_in_message":[],"_revision_number":2},{"id":"41dd4d2a848195872d8f436db25d53572f858c25","author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"date":"2021-04-14 12:51:59.000000000","message":"Patch Set 2: Code-Review+2","accounts_in_message":[],"_revision_number":2},{"id":"1ad9abe15dc0dd42ad952f6e2a91c3156065e00e","author":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"},"date":"2021-04-14 14:37:54.000000000","message":"Patch Set 2: Code-Review+2","accounts_in_message":[],"_revision_number":2},{"id":"03fdb26f62d4d106f3c25a02df70272b39190f56","author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"date":"2021-04-14 18:09:34.000000000","message":"Patch Set 2: Workflow+1\n\nSelf-approving, I\u0027ll make sure this is created how we expect.","accounts_in_message":[],"_revision_number":2},{"id":"b3d793b09485f226e5541b542ac95abdce2af893","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-04-14 18:09:51.000000000","message":"Patch Set 2: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":2},{"id":"e4a54272744c542d50d7acc61a1e11e2a242b82c","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-04-14 18:21:10.000000000","message":"Patch Set 2: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-zuul-jobs-linters https://zuul.opendev.org/t/openstack/build/fa4e5bb993d8414388f807eb17155b07 : SUCCESS in 6m 39s\n- project-config-gerrit https://zuul.opendev.org/t/openstack/build/54ce37030deb41c497eeede4a309bada : SUCCESS in 5m 08s","accounts_in_message":[],"_revision_number":2},{"id":"b3200f277002fd239b07fc8af2a18266bb549542","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-04-14 18:21:11.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":2},{"id":"4b85a0249c336ae67c81e775c2d065799480395b","tag":"autogenerated:zuul:deploy","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-04-14 18:25:38.000000000","message":"Patch Set 2:\n\nBuild succeeded (deploy pipeline).\n\n- infra-prod-manage-projects https://zuul.opendev.org/t/openstack/build/5daf37df8f694325bd9bbd1e339ac3f6 : SUCCESS in 3m 24s","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"b89296fee277342df2bccff7f501d5fd1d2c07b9","revisions":{"2aece786894e7578579ab1dbef52a8d813f0da65":{"kind":"REWORK","_number":1,"created":"2021-03-24 17:44:15.000000000","uploader":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"ref":"refs/changes/30/782830/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/project-config","ref":"refs/changes/30/782830/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/project-config refs/changes/30/782830/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/project-config refs/changes/30/782830/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/project-config refs/changes/30/782830/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/project-config refs/changes/30/782830/1"}}},"commit":{"parents":[{"commit":"dc518ae8c9acee669f3c93acb2ef868c12bfa71e","subject":"Merge \"Mirror new Magnum and Manila charms to GitHub\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/project-config/commit/dc518ae8c9acee669f3c93acb2ef868c12bfa71e"}]}],"author":{"name":"Jeremy Stanley","email":"fungi@yuggoth.org","date":"2021-03-24 17:36:43.000000000","tz":0},"committer":{"name":"Jeremy Stanley","email":"fungi@yuggoth.org","date":"2021-03-24 17:36:43.000000000","tz":0},"subject":"Add an empty project for an OpenStack base ACL","message":"Add an empty project for an OpenStack base ACL\n\nPresently, the OpenStack release managers have special access\ngranted over every project in OpenDev\u0027s Gerrit due to historical\nentries in the All-Projects ACL. These permissions allow creation of\nbranches, pushing signed tags and abandoning open changes, and they\nwould like to add deletion of branches to the mix. It would be\nideal, both for safety and correctness, to only have those\npermissions apply to projects in the \"openstack/\" namespace, and\nthis could be accomplished with Gerrit\u0027s ACL inheritance feature.\n\nCreate a new empty repository which serves only as a reference to a\nGerrit ACL, for future use as an inherited base ACL in official\nOpenStack projects. It is intentional that this repository lacks\ntypical change approval rights, an entry in the Zuul config, and so\non, as it should never receive proposed changes nor need to test and\nmerge them.\n\nChange-Id: Ifb7ef3870b2c2d876a3dbe21a4ad7a930f09ee5c\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/project-config/commit/2aece786894e7578579ab1dbef52a8d813f0da65"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/project-config/commit/2aece786894e7578579ab1dbef52a8d813f0da65"}]},"branch":"refs/heads/master"},"b89296fee277342df2bccff7f501d5fd1d2c07b9":{"kind":"REWORK","_number":2,"created":"2021-04-13 18:33:24.000000000","uploader":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"ref":"refs/changes/30/782830/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/project-config","ref":"refs/changes/30/782830/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/project-config refs/changes/30/782830/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/project-config refs/changes/30/782830/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/project-config refs/changes/30/782830/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/project-config refs/changes/30/782830/2"}}},"commit":{"parents":[{"commit":"4286aa0276b8918a3379d05c20e2aaaabe73eab5","subject":"Allow delete permissions in Gerrit ACLs","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/project-config/commit/4286aa0276b8918a3379d05c20e2aaaabe73eab5"}]}],"author":{"name":"Jeremy Stanley","email":"fungi@yuggoth.org","date":"2021-03-24 17:36:43.000000000","tz":0},"committer":{"name":"Jeremy Stanley","email":"fungi@yuggoth.org","date":"2021-04-13 18:30:24.000000000","tz":0},"subject":"Add an empty project for an OpenStack base ACL","message":"Add an empty project for an OpenStack base ACL\n\nPresently, the OpenStack release managers have special access\ngranted over every project in OpenDev\u0027s Gerrit due to historical\nentries in the All-Projects ACL. These permissions allow creation of\nbranches, pushing tags and abandoning open changes, and they would\nlike to add deletion of branches to the mix. It would be ideal, both\nfor safety and correctness, to only have those permissions apply to\nprojects in the \"openstack/\" namespace, and this could be\naccomplished with Gerrit\u0027s ACL inheritance feature.\n\nCreate a new empty repository which serves only as a reference to a\nGerrit ACL, for future use as an inherited base ACL in official\nOpenStack projects. It is intentional that this repository lacks\ntypical change approval rights, an entry in the Zuul config, and so\non, as it should never receive proposed changes nor need to test and\nmerge them. When copying in the Release Managers group permissions,\nreplace pushTag with the stricter pushSignedTag since we expect all\ntags to be signed (Zuul would ignore unsigned tag events anyway).\n\nChange-Id: Ifb7ef3870b2c2d876a3dbe21a4ad7a930f09ee5c\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/project-config/commit/b89296fee277342df2bccff7f501d5fd1d2c07b9"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/project-config/commit/b89296fee277342df2bccff7f501d5fd1d2c07b9"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":4146,"name":"Clark Boylan","email":"cboylan@sapwetik.org","username":"cboylan"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"}}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}