Allow everyone to trigger dry runs
Also trigger dry runs for everyone on PS upload. This could be used as
a security mechanism, to trigger CI for maintainers automatically, but
on other contributions wait for maintainer vote.
These groups are LUCI-side. For CQ_COMMITTER I am still working how to
expand "project-gerrit-committers" to include all Gerrit's maintainers.
Change-Id: Ia12ba32031c42fdfc0662a19de050b90f4534ee4
diff --git a/generated/commit-queue.cfg b/generated/commit-queue.cfg
index a789708..7d7e17d 100644
--- a/generated/commit-queue.cfg
+++ b/generated/commit-queue.cfg
@@ -16,6 +16,8 @@
verifiers {
gerrit_cq_ability {
committer_list: "project-gerrit-committers"
+ dry_run_access_list: "all"
+ new_patchset_run_access_list: "all"
}
tryjob {
builders {
diff --git a/generated/project.cfg b/generated/project.cfg
index 0da0da5..7c41c9c 100644
--- a/generated/project.cfg
+++ b/generated/project.cfg
@@ -6,9 +6,10 @@
name: "gerrit"
lucicfg {
- version: "1.35.2"
+ version: "1.33.2"
package_dir: ".."
config_dir: "generated"
entry_point: "main.star"
+ experiments: "crbug.com/1171945"
experiments: "crbug.com/1347252"
}
diff --git a/main.star b/main.star
index 300dc41..f39a411 100755
--- a/main.star
+++ b/main.star
@@ -127,9 +127,17 @@
name = "luci-test_repo",
acls = [
acl.entry(
+ acl.CQ_DRY_RUNNER,
+ groups = "all",
+ ),
+ acl.entry(
+ acl.CQ_NEW_PATCHSET_RUN_TRIGGERER,
+ groups = "all",
+ ),
+ acl.entry(
acl.CQ_COMMITTER,
groups = "project-gerrit-committers",
- )
+ ),
],
watch = cq.refset(
repo = "https://gerrit.googlesource.com/luci-test",
