authorization.inc: new header file to keep track of authorize users
This commits aims to make it easier the control/maintenance of
authorized users in the Open CI jobs.
Signed-off-by: Leonardo Sandoval <leonardo.sandoval@linaro.org>
Change-Id: I2d5e2d141f031376bb63f5868df07992926b7493
diff --git a/authorization.yaml.inc b/authorization.yaml.inc
new file mode 100644
index 0000000..ed0eb06
--- /dev/null
+++ b/authorization.yaml.inc
@@ -0,0 +1,15 @@
+ anonymous:
+ - job-discover
+ - job-read
+ - job-extended-read
+ - job-workspace
+ lsandov1:
+ - job-read
+ - job-extended-read
+ - job-build
+ - job-cancel
+ fboudra:
+ - job-read
+ - job-extended-read
+ - job-build
+ - job-cancel
diff --git a/tf-a-builder.yaml b/tf-a-builder.yaml
index 026c785..135951e 100644
--- a/tf-a-builder.yaml
+++ b/tf-a-builder.yaml
@@ -51,17 +51,7 @@
days-to-keep: 180
num-to-keep: 3000
- authorization:
- anonymous:
- - job-discover
- - job-read
- - job-extended-read
- - job-workspace
- lsandov1:
- - job-read
- - job-extended-read
- - job-build
- - job-cancel
- - run-update
+ !include: authorization.yaml.inc
parameters:
- string:
name: import_cc
diff --git a/tf-ci-gateway.yaml b/tf-ci-gateway.yaml
index 418a0cb..9b77882 100644
--- a/tf-ci-gateway.yaml
+++ b/tf-ci-gateway.yaml
@@ -30,15 +30,7 @@
max-per-node: 3
max-total: 10
- authorization:
- anonymous:
- - job-read
- - job-extended-read
- lsandov1:
- - job-read
- - job-extended-read
- - job-build
- - job-cancel
- - run-update
+ !include: authorization.yaml.inc
wrappers:
- credentials-binding:
- ssh-user-private-key:
diff --git a/tf-coverity.yaml b/tf-coverity.yaml
index 5c2c271..a9b4fa4 100644
--- a/tf-coverity.yaml
+++ b/tf-coverity.yaml
@@ -40,17 +40,7 @@
- build-discarder:
days-to-keep: 7
- authorization:
- anonymous:
- - job-discover
- - job-read
- - job-extended-read
- - job-workspace
- lsandov1:
- - job-read
- - job-extended-read
- - job-build
- - job-cancel
- - run-update
+ !include: authorization.yaml.inc
parameters:
- string:
name: TF_GERRIT_PROJECT
diff --git a/tf-daily.yaml b/tf-daily.yaml
index f31a59d..ec5ce02 100644
--- a/tf-daily.yaml
+++ b/tf-daily.yaml
@@ -10,15 +10,7 @@
days-to-keep: 7
num-to-keep: 30
- authorization:
- anonymous:
- - job-read
- - job-extended-read
- lsandov1:
- - job-read
- - job-extended-read
- - job-build
- - job-cancel
- - run-update
+ !include: authorization.yaml.inc
parameters:
- string:
name: TF_GERRIT_PROJECT
diff --git a/tf-gerrit-tforg-l1.yaml b/tf-gerrit-tforg-l1.yaml
index a014e40..25bb7b9 100644
--- a/tf-gerrit-tforg-l1.yaml
+++ b/tf-gerrit-tforg-l1.yaml
@@ -16,15 +16,7 @@
days-to-keep: 180
num-to-keep: 180
- authorization:
- anonymous:
- - job-read
- - job-extended-read
- lsandov1:
- - job-read
- - job-extended-read
- - job-build
- - job-cancel
- - run-update
+ !include: authorization.yaml.inc
parameters:
- string:
name: GERRIT_PROJECT
diff --git a/tf-gerrit-tforg-l2.yaml b/tf-gerrit-tforg-l2.yaml
index 2891f90..e3e6e43 100644
--- a/tf-gerrit-tforg-l2.yaml
+++ b/tf-gerrit-tforg-l2.yaml
@@ -16,15 +16,7 @@
days-to-keep: 180
num-to-keep: 180
- authorization:
- anonymous:
- - job-read
- - job-extended-read
- lsandov1:
- - job-read
- - job-extended-read
- - job-build
- - job-cancel
- - run-update
+ !include: authorization.yaml.inc
parameters:
- string:
name: GERRIT_PROJECT
diff --git a/tf-main.yaml b/tf-main.yaml
index 71678e9..07991d4 100644
--- a/tf-main.yaml
+++ b/tf-main.yaml
@@ -40,15 +40,7 @@
days-to-keep: 180
num-to-keep: 180
- authorization:
- anonymous:
- - job-read
- - job-extended-read
- lsandov1:
- - job-read
- - job-extended-read
- - job-build
- - job-cancel
- - run-update
+ !include: authorization.yaml.inc
parameters:
- string:
name: TF_GERRIT_PROJECT
diff --git a/tf-static-checks.yaml b/tf-static-checks.yaml
index 06aea35..b2ddf3f 100644
--- a/tf-static-checks.yaml
+++ b/tf-static-checks.yaml
@@ -36,17 +36,7 @@
- build-discarder:
days-to-keep: 7
- authorization:
- anonymous:
- - job-discover
- - job-read
- - job-extended-read
- - job-workspace
- lsandov1:
- - job-read
- - job-extended-read
- - job-build
- - job-cancel
- - run-update
+ !include: authorization.yaml.inc
parameters:
- string:
name: TF_GERRIT_PROJECT
diff --git a/tf-tftf-gerrit-tforg-l1.yaml b/tf-tftf-gerrit-tforg-l1.yaml
index aea551c..d9a5d1a 100644
--- a/tf-tftf-gerrit-tforg-l1.yaml
+++ b/tf-tftf-gerrit-tforg-l1.yaml
@@ -16,15 +16,7 @@
days-to-keep: 180
num-to-keep: 180
- authorization:
- anonymous:
- - job-read
- - job-extended-read
- lsandov1:
- - job-read
- - job-extended-read
- - job-build
- - job-cancel
- - run-update
+ !include: authorization.yaml.inc
parameters:
- string:
name: GERRIT_PROJECT
diff --git a/tf-tftf-gerrit-tforg-l2.yaml b/tf-tftf-gerrit-tforg-l2.yaml
index c526b9a..ede2430 100644
--- a/tf-tftf-gerrit-tforg-l2.yaml
+++ b/tf-tftf-gerrit-tforg-l2.yaml
@@ -16,15 +16,7 @@
days-to-keep: 180
num-to-keep: 180
- authorization:
- anonymous:
- - job-read
- - job-extended-read
- lsandov1:
- - job-read
- - job-extended-read
- - job-build
- - job-cancel
- - run-update
+ !include: authorization.yaml.inc
parameters:
- string:
name: GERRIT_PROJECT