Initialize config repository
diff --git a/resources/README b/resources/README
new file mode 100644
index 0000000..77afcdd
--- /dev/null
+++ b/resources/README
@@ -0,0 +1 @@
+Software Factory managed resources
diff --git a/resources/_internal.yaml b/resources/_internal.yaml
new file mode 100644
index 0000000..0cc6850
--- /dev/null
+++ b/resources/_internal.yaml
@@ -0,0 +1,75 @@
+# This file is managed by ansible, do not edit directly
+---
+resources:
+  tenants:
+    local:
+      description: "The local tenant."
+      url: "https://spfactory.storpool.com/manage"
+      default-connection: gerrit
+      tenant-options:
+        zuul/report-build-page: True
+        zuul/max-job-timeout: 10800
+
+  connections:
+    gerrit:
+      base-url: "https://spfactory.storpool.com/r"
+      type: gerrit
+    opendev.org:
+      base-url: "https://review.opendev.org/r"
+      type: gerrit
+
+  projects:
+    internal:
+      tenant: local
+      description: Internal configuration project
+      source-repositories:
+        - config:
+            zuul/config-project: True
+        - sf-jobs
+        - zuul/zuul-jobs:
+            connection: opendev.org
+            zuul/include: [job]
+            zuul/shadow: sf-jobs
+
+  repos:
+    config:
+      description: Config repository
+      acl: config-acl
+    sf-jobs:
+      description: Local job repository
+      acl: config-acl
+
+  acls:
+    config-acl:
+      file: |
+        [access "refs/*"]
+          read = group config-core
+          owner = group config-ptl
+        [access "refs/heads/*"]
+          label-Code-Review = -2..+2 group config-core
+          label-Code-Review = -2..+2 group config-ptl
+          label-Verified = -2..+2 group config-ptl
+          label-Workflow = -1..+1 group config-core
+          label-Workflow = -1..+1 group config-ptl
+          label-Workflow = -1..+0 group Registered Users
+          rebase = group config-core
+          abandon = group config-core
+          submit = group config-ptl
+          read = group config-core
+          read = group Registered Users
+        [access "refs/meta/config"]
+          read = group config-core
+          read = group Registered Users
+        [receive]
+          requireChangeId = true
+        [submit]
+          mergeContent = false
+          action = fast forward only
+        [plugin "reviewers-by-blame"]
+          maxReviewers = 5
+          ignoreDrafts = true
+          ignoreSubjectRegEx = (WIP|DNM)(.*)
+      groups:
+        - config-ptl
+        - config-core
+
diff --git a/resources/resources.yaml b/resources/resources.yaml
new file mode 100644
index 0000000..8138344
--- /dev/null
+++ b/resources/resources.yaml
@@ -0,0 +1,15 @@
+---
+# This file contains the default users group authorized to
+# manage Software Factory services configurations.
+#
+# Adds trusted operator email to the config-core or config-ptl list.
+#
+resources:
+  groups:
+    config-ptl:
+      description: Team lead for the config repo
+      members:
+        - admin@spfactory.storpool.com
+    config-core:
+      description: Team core for the config repo
+      members: []