[project]
	description = Access inherited by all other projects.
[receive]
	requireContributorAgreement = true
	requireSignedOffBy = false
	requireChangeId = true
	createNewChangeForAllNotInTarget = false
[submit]
	mergeContent = false
	action = cherry pick
[access "refs/*"]
	read = group Anonymous Users
	read = group Registered Users
	read = group luci-config-service-account
	read = group mdb/boringssl-committers
[access "refs/for/refs/*"]
	push = group Registered Users
	pushMerge = group Registered Users
[access "refs/heads/*"]
	create = group Project Owners
	create = group mdb/boringssl-committers
	forgeAuthor = group Registered Users
	forgeCommitter = group Project Owners
	forgeCommitter = group cria/project-boringssl-committers
	push = group Project Owners
	push = group cria/project-boringssl-committers
	label-Code-Review = -2..+2 group Project Owners
	label-Code-Review = -2..+2 group cria/project-boringssl-committers
	label-Code-Review = -1..+1 group Registered Users
	label-Commit-Queue = +0..+2 group Project Owners
	label-Commit-Queue = +0..+2 group mdb/boringssl-committers
	label-Commit-Queue = +0..+2 group unused
	label-Commit-Queue = +0..+1 group dev
	labelAs-Commit-Queue = +0..+2 group boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com
	submit = group Project Owners
	submit = group boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com
	submit = group cria/project-boringssl-committers
	editTopicName = +force group Project Owners
	editTopicName = +force group cria/project-boringssl-committers
	submit = group unused2
	labelas-commit-queue = +0..+2 group unused2
	label-Auto-Submit = +0..+1 group Change Owner
	label-Bot-Commit = +0..+1 group bot-commit-bots
	label-Owners-Override = +0..+1 group mdb/chrome-git-admins
[access "refs/meta/config"]
	exclusiveGroupPermissions = read
	read = group Project Owners
	read = group gerrit-submit-requirements-admins
	read = group mdb/boringssl-committers
	read = group mdb/chrome-git-admins
	push = group Project Owners
	push = group mdb/boringssl-committers
	push = group mdb/chrome-git-admins
	push = group mdb/chrome-git-admins
	label-Code-Review = -2..+2 group Project Owners
	label-Code-Review = -2..+2 group mdb/boringssl-committers
	label-Code-Review = -2..+2 group mdb/chrome-git-admins
	submit = group Project Owners
	submit = group mdb/boringssl-committers
	submit = group mdb/chrome-git-admins
	create = group Project Owners
	create = group mdb/boringssl-committers
	create = group mdb/chrome-git-admins
[access "refs/tags/*"]
	createTag = group Project Owners
	createTag = group mdb/boringssl-committers
	createSignedTag = group Project Owners
	createSignedTag = group mdb/boringssl-committers
	delete = group mdb/boringssl-committers
[label "Auto-Submit"]
	function = NoBlock
	defaultValue = 0
	copyCondition = is:ANY
	value = 0 Do not send CL to CQ automatically after approval
	value = +1 Send CL to CQ automatically after approval
[label "Bot-Commit"]
	defaultValue = 0
	value = 0 No score
	value = +1 Looks good to me
	function = NoBlock
	copyCondition = changekind:NO_CHANGE
[label "Code-Review"]
	function = NoBlock
	defaultValue = 0
	value = -2 This shall not be merged
	value = -1 I would prefer this is not merged as is
	value = 0 No score
	value = +1 Looks good to me, but someone else must approve
	value = +2 Looks good to me, approved
        ignoreSelfApproval = true
	copyCondition = changekind:NO_CHANGE OR changekind:NO_CODE_CHANGE OR changekind:TRIVIAL_REBASE OR has:unchanged-files OR is:MIN
[label "Commit-Queue"]
	function = NoBlock
	abbreviation = CQ
	value = 0 Not Ready
	value = +1 Dry Run
	defaultValue = 0
	value = +2 Ready
	copyCondition = changekind:NO_CHANGE
[label "Owners-Override"]
        defaultValue = 0
        value = 0 No score
        value = +1 Looks good to me
        function = NoBlock
	copyCondition = changekind:NO_CHANGE OR changekind:NO_CODE_CHANGE OR changekind:TRIVIAL_REBASE OR has:unchanged-files
[access "refs/heads/chromium-stable"]
	push = +force group mdb/boringssl-committers
[access "refs/heads/master-with-bazel"]
	push = group Bazel robots
	push = group bot-commit-grandfathered-bots
	push = group mdb/boringssl-commiters
[access "refs/for/*"]
	addPatchSet = group Registered Users
[access "refs/heads/chromium-stable-with-bazel"]
	push = group Bazel robots
	push = group bot-commit-grandfathered-bots
	push = group mdb/boringssl-committers
[access "refs/heads/main-with-bazel"]
	push = group Bazel robots
	push = group bot-commit-grandfathered-bots
[access "refs/for/refs/meta/config"]
	push = group gerrit-submit-requirements-admins
	read = group gerrit-submit-requirements-admins
[accounts]
	sameGroupVisibility = deny group google/google-union:signcla
[contributor-agreement "Google CLA"]
	description = Google Contributor License Agreement
	agreementUrl = static/cla.html
	accepted = group bot-commit-grandfathered-bots
	accepted = group google/google-union:signcla
[capability]
	administrateServer = group mdb/boringssl-committers
	administrateServer = group mdb/chrome-git-admins
	viewAllAccounts = group boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com
[plugin "jwtservice"]
	audience = https://api.cr.dev
[submit-requirement "Code-Review"]
	description = At least one maximum vote for label 'Code-Review' is required
	submittableIf = label:Code-Review=MAX,user=non_uploader AND -label:Code-Review=MIN
	overrideIf = label:Bot-Commit=+1 AND -label:Code-Review=MIN
	canOverrideInChildProjects = true