#10506 Set source-git SIG owners as owners of gitlab.com/fedora/src group
Closed: Fixed 3 years ago by ttomecek. Opened 3 years ago by ttomecek.

Describe what you would like us to do:


Ask

We, as owners of the source-git SIG, would like to be set as owners of gitlab.com/fedora/src group so we can start experimenting in GitLab with the Fedora source-git development workflow.
Accounts:
https://gitlab.com/TomasTomecek
https://gitlab.com/jpopelka
* https://gitlab.com/csomh

Thank you.

Old ask

Please create a new FAS group for our source-git SIG so we can use it in gitlab.com/fedora to manage authentication.

Group sponsors: ttomecek, jpopelka, csomh

Related: https://pagure.io/fedora-infrastructure/issue/10495

When do you need this to be done by? (YYYY/MM/DD)


N/A


Note: gitlab's mapping to saml2 groups is pretty strict.

You can say 'members of source-git-sig' have permission X

But, this means that it will do exactly that. Anyone who is not in that group will have all their permissions removed, anyone in that group who has more permissions that X will have their permissions changed to X

There is no distinction between group members, all SAML2 gets is 'is a member of group X'

Due to this, we have been recommending people just handle their permissions in gitlab (ie, set some few people with high privs and grant others permissions as needed).

All that said, if you want to do it this way or try it, we can set it up...

Metadata Update from @mohanboddu:
- Issue tagged with: low-gain, low-trouble, ops

3 years ago

@kevin, thank you for such a detailed description

We discussed and agree with you to use individual membership and access control instead.

I am updating my original post with a new request then.

ok, should we close this here then? Or do you still need further setup on it?

Yes please, we don't have any access to the newly created /fedora/src namespace:

https://gitlab.com/groups/fedora/src/-/group_members

So you could please add three of us, ideally as owners, in there.

I just checked and am not able to create any repositories in there.

Edit: now I can see that my role in the /fedora/src namespace is just developer.

Metadata Update from @mohanboddu:
- Issue priority set to: Waiting on Assignee (was: Needs Review)

3 years ago

ok. I have invited you 3 now... please accept and confirm things are good and close this ticket if so. ;)

Lovely, I can see all three of us being owners \o/

Thank you so much, Kevin!

Metadata Update from @ttomecek:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

3 years ago

Log in to comment on this ticket.

Metadata
Boards 1
ops Status: Backlog