We, as owners of the source-git SIG, would like to be set as owners of gitlab.com/fedora/src group so we can start experimenting in GitLab with the Fedora source-git development workflow. Accounts: https://gitlab.com/TomasTomecek https://gitlab.com/jpopelka * https://gitlab.com/csomh
Thank you.
Please create a new FAS group for our source-git SIG so we can use it in gitlab.com/fedora to manage authentication.
Group sponsors: ttomecek, jpopelka, csomh
Related: https://pagure.io/fedora-infrastructure/issue/10495
N/A
Note: gitlab's mapping to saml2 groups is pretty strict.
You can say 'members of source-git-sig' have permission X
But, this means that it will do exactly that. Anyone who is not in that group will have all their permissions removed, anyone in that group who has more permissions that X will have their permissions changed to X
There is no distinction between group members, all SAML2 gets is 'is a member of group X'
Due to this, we have been recommending people just handle their permissions in gitlab (ie, set some few people with high privs and grant others permissions as needed).
All that said, if you want to do it this way or try it, we can set it up...
Metadata Update from @mohanboddu: - Issue tagged with: low-gain, low-trouble, ops
@kevin, thank you for such a detailed description
We discussed and agree with you to use individual membership and access control instead.
I am updating my original post with a new request then.
ok, should we close this here then? Or do you still need further setup on it?
Yes please, we don't have any access to the newly created /fedora/src namespace:
/fedora/src
https://gitlab.com/groups/fedora/src/-/group_members
So you could please add three of us, ideally as owners, in there.
I just checked and am not able to create any repositories in there.
Edit: now I can see that my role in the /fedora/src namespace is just developer.
Metadata Update from @mohanboddu: - Issue priority set to: Waiting on Assignee (was: Needs Review)
ok. I have invited you 3 now... please accept and confirm things are good and close this ticket if so. ;)
Lovely, I can see all three of us being owners \o/
Thank you so much, Kevin!
Metadata Update from @ttomecek: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
Log in to comment on this ticket.