1780079 - mozmeao access for secrets

Status: VERIFIED FIXED

(mozilla.org :: Github: Administration, task)

Description

[Brett Kochendorfer]

I need the ability to add secrets to the mozmeao repositories so that I can setup gitlab mirroring as discussed in https://bugzilla.mozilla.org/show_bug.cgi?id=1778582

Comment 1

[Chris Knowles [:cknowles]]

Do you know what permissions level you'd need?

"the mozmeao repositories" - I would need a list - though I'm NI'ing :pmac - he may be able to give better directions.

pmac: any approval or guidance is appreciated.

Comment 2

[Paul [:pmac] McLanahan]

We'll get a list. I do approve of allowing Brett to manage these repos.

Comment 3

[Chris Knowles [:cknowles]]

Alright, I'll hold for that list and as to permissions level - is that admin? or would maintain or write work as well?

Comment 4

[Chris Knowles [:cknowles]]

And never mind for that permissions level question - per https://docs.github.com/en/actions/security-guides/encrypted-secrets#creating-encrypted-secrets-for-a-repository the answer is "admin"

Comment 5

[Brett Kochendorfer]

I added you to a Google sheet with the list of repositories for Bugzilla consistency and continuity here is the list reproduced here as well:

• www-config
• basket
• basket-config
• gitlab-library
• infra
• infra-services
• nucleus-config
• snippets-service
• snippets-config
• www-sitemap-generator
• www-admin
• www-workers

Comment 6

[Chris Knowles [:cknowles]]

I'd like to do this as a team - Any suggestions for name/membership? Looking at the original bug "mirroring admins" or "CI/CD admins" seem like possibilities. And then membership - Just Brett, or Brett and pmac? or others?

Comment 7

[Paul [:pmac] McLanahan]

I like "Infra Admins" and I would say the list should be

• Brett
• Rob Hudson
• Steve Jalim
• Paul McLanahan (me)

Comment 8

[Chris Knowles [:cknowles]]

Alright, team "infra-admins" created (hyphen so the display and slug names match) with those members.

The list of repos from comment 5 have been added to that team with admin permissions.

Let me know if there's anything else you need.