Admin access request (or key setting request) for two MEAO repos
Categories
(mozilla.org :: Github: Administration, task)
Tracking
(Not tracked)
People
(Reporter: sjalim, Assigned: cknowles)
Details
Hi - I need to add PYPI auth tokens to two repos for MEAO-related projects. I have admin rights already on a number of mozilla and mozmeao repos, so am hoping it's OK to gain the hat for these two, too:
If not, I'd be happy to provide the relevant PYP API key to set as a secret for GH Actions, no worries - just let me know which secure channel to use and I'll provide the info!
Cheers!
Steve
|
Assignee | |
Comment 1•3 years ago
|
||
So, you're already a member of the Mozmeao and Mozilla organizations, so this is really a request for the existing admins of those repositories.
I've NI'd a couple good suspects here, and either I or they can update the permissions, or they can work with you on the tokens.
(That above text is from the hopeful universe where people manage everything in teams, and no one leaves.)
So, mozmeao/django-jinja-markdown has no admins, just you and pmac as writers. In our runbooks we fall back to "Convince one other person this is a good idea" so I've NI'd pmac - I can bump both up, or just you...
Similar with mozilla/django-product-details - though that has a team with write access and pmac is a maintainer.
:pmac - let me know if I should bump Steve and or you up in mozmeao/django-jinja-markdown and if I should make the webdev-bedrock team admins, or if there's a better team for administering mozilla/django-product-details. (Steve is a member of that team already)
|
||
Comment 2•3 years ago
|
||
There is the https://github.com/orgs/mozilla/teams/bedrock-admin/ team, which I think makes sense for these since they're packages that we maintain mostly for the bedrock project. We can also add Steve and Rob Hudson to that team and I think we'd be pretty well covered.
For future, now that the mozmeao org is GHE I think we should undertake moving most (if not all) of our repos to the mozmeao org so we don't have to keep messing with teams in multiple orgs.
|
|
Assignee | |
Comment 3•3 years ago
|
||
Sorry to keep going back and forth.
To sum up the current situation
- mozilla
- django-product-details - the team webdev-bedrock has write access to the repo - no other access exists.
- team - bedrock-admin - exists, but as you mention Steve and Rob are not members, and it doesn't have access to the repo in question.
- mozmeao
- django-jinja-markdown - individually :pmac and Steve have write access to this repo - no other access exists.
- team - there is no bedrock-admin team in this organization. and nothing that screams "I'm the same thing - just a different name!" to my eyes.
So, from your comment 2 and some assumptions on my part:
- mozilla - add Steve and Rob to the bedrock-admin team, add that team as administrators to the django-product-details repository
- mozmeao - bump you and Steve up to admins on the django-jinja-markdown repository. (If nothing else, this would unblock Steve, and give you the permissions to manage teams and such for it.)
Please let me know if that's acceptable, or redirect me.
|
|
||
Comment 4•3 years ago
|
||
Your proposed changes sound perfect to me. Thanks for navigating that Chris.
|
|
Assignee | |
Comment 5•3 years ago
|
||
Alright, changes from comment 3 are now live. Also took the liberty of making :pmac a maintainer of the bedrock-admin team.
Realize I didn't comment on the "migrate MEAO repos out of Mozilla" - I would be happy to discuss/help - you'll need GHE owner help to do it - but it should be pretty easy. You know where to find us.
Let me know if there's any questions or concerns.
Description
•