1962540 - make it possible to split grants.yml into N files

Status: NEW

(Release Engineering :: Firefox-CI Administration, enhancement)

Description

[[e-mail] (:bhearsum)]

The firefox-ci cluster's grants.yml file has been unwieldy for a long time. It is now over 3,000 lines in length, and virtually impossible to keep organized. One way to improve this would be to support splitting grants into N files, perhaps something like the foo.d configuration directories commonly found on Linux these days. When processing grants, we would combine all the grants found in all of the files before acting on them. (This should be fairly straightforward seeing as the top level structure of this file is a list...)

This would allow us to do things such keep all granting of X (where X could ship it, signingscript, or whatever) related scopes in one, centralized place. In some cases we might want to consider splitting the very large grants into smaller ones to allow for this centralization.

We could also consider splitting out grants by project or trust domain, splitting out specific grants to individual and groups, and probably other ways as well.

Comment 1

[Andrew Halberstadt [:ahal]]

I've toyed with doing this many times myself.