[access]
	inheritFrom = All-Projects
[submit]
	action = merge always
	rejectEmptyCommit = true
[receive]
	requireSignedOffBy = true
	rejectImplicitMerges = true
[project]
	description = Gerrit settings common to all projects under the TF-A namespace

[access "refs/*"]
	read = group Service Users

[access "refs/heads/*"]
	create = group trusted-firmware-a-approvers
	forgeAuthor = group trusted-firmware-a-approvers
	forgeCommitter = group trusted-firmware-a-approvers
	forgeServerAsCommitter = group trusted-firmware-a-approvers
	push = +force group trusted-firmware-a-arm-approvers
	submit = group trusted-firmware-a-approvers
	removeReviewer = group trusted-firmware-a-ci-users
	abandon = group trusted-firmware-a-approvers

	label-Code-Review = -1..+1 group Registered Users
	label-Code-Owner-Review = -1..+1 group Registered Users
	label-Maintainer-Review = -1..+1 group trusted-firmware-a-approvers

	label-Verified = -1..+1 group Bot Users
	label-Verified = -1..+1 group trusted-firmware-a-approvers
	label-Verified = -1..+1 group trusted-firmware-a-ci-users

	label-Allow-CI = +0..+2 group trusted-firmware-a-ci-users
	label-Allow-CI = +0..+2 group user/TrustedFirmware Code Review (ci-bot-user)


[access "refs/tags/*"]
	create = group trusted-firmware-a-approvers
	createTag = group trusted-firmware-a-approvers
	createSignedTag = group trusted-firmware-a-approvers

# The Code-Review label is purely informational. Contributors that are neither
# code owners for the patch nor maintainers use it to record their concerns.
[label "Code-Review"]
	function = NoBlock
	value = -1 I would prefer this is not merged as is
	value = 0 No score
	value = +1 Looks good to me
	defaultValue = 0
	copyCondition = changekind:NO_CHANGE OR changekind:NO_CODE_CHANGE OR changekind:TRIVIAL_REBASE

# In addition, define our 2 custom labels for code review.
# These influence whether a patch is submittable.
[label "Code-Owner-Review"]
	function = MaxWithBlock
	value = -1 I would prefer this is not merged as is
	value = 0 No score
	value = +1 Looks good to me
	defaultValue = 0
	copyCondition = changekind:NO_CHANGE OR changekind:NO_CODE_CHANGE OR changekind:TRIVIAL_REBASE

[label "Maintainer-Review"]
	function = MaxWithBlock
	value = -1 I would prefer this is not merged as is
	value = 0 No score
	value = +1 Looks good to me
	defaultValue = 0
	copyCondition = changekind:NO_CHANGE OR changekind:NO_CODE_CHANGE OR changekind:TRIVIAL_REBASE

# The Allow-CI label triggers the Open CI on the patch.
# It sets the Verified score.
[label "Allow-CI"]
	function = NoBlock
	value = 0 No score
	value = +1 Approved for automated testing on Open CI, shallow tests
	value = +2 Approved for automated testing on Open CI, in-depth tests
	defaultValue = 0
	copyCondition = changekind:NO_CHANGE

# The Legacy-CI label triggers the internal Arm CI on the patch.
# It sets the Verified score.
[label "Legacy-CI"]
	function = NoBlock
	value = 0 No score
	value = +1 Approved for automated testing on internal Arm CI, shallow tests
	value = +2 Approved for automated testing on internal Arm CI, in-depth tests
	defaultValue = 0
	copyCondition = changekind:NO_CHANGE

[label "Verified"]
	function = MaxWithBlock
	value = -1 Fails
	value = 0 No score
	value = +1 Verified
	defaultValue = 0
	copyCondition = changekind:NO_CHANGE OR changekind:NO_CODE_CHANGE OR changekind:TRIVIAL_REBASE

[access "refs/meta/dashboards/*"]
	create = group trusted-firmware-a-approvers
	push = group trusted-firmware-a-approvers
[access "refs/heads/topics/*"]
	create = group trusted-firmware-a-branch-users
	push = group trusted-firmware-a-branch-users
	pushMerge = group trusted-firmware-a-branch-users
	forgeCommitter = group trusted-firmware-a-branch-users
[access "refs/heads/master"]
	push = group user/TrustedFirmware Code Review (ci-bot-user)
[access "refs/meta/config"]
	read = group trusted-firmware-a-arm-approvers
	create = group trusted-firmware-a-arm-approvers
	push = group trusted-firmware-a-arm-approvers
	submit = group trusted-firmware-a-arm-approvers
	label-Code-Review = -2..+2 group trusted-firmware-a-arm-approvers
	exclusiveGroupPermissions = submit
	label-Verified = -1..+1 group trusted-firmware-a-arm-approvers
	label-Code-Owner-Review = -1..+1 group trusted-firmware-a-arm-approvers
	label-Maintainer-Review = -1..+1 group trusted-firmware-a-arm-approvers