On 8/1/24 12:42, Alex Porcelli wrote:
Dear IPMC members,
The KIE podling is preparing for its first Apache release. Due to the
numerous artifacts we build across various repositories (container
images, Java libraries, web apps, etc.), we seek to automate the SVN
upload as part of our release procedures.
Note: Currently, the KIE podling already has robot access [1] [2] for
our Git repositories as part of our existing automation processes.
As KIE is under the Incubator, the Apache Infra team recommended we
contact the IPMC directly.
To be very specific here, the issue arises from the fact that while TLPs
have their own [/dev/foo] and [/release/foo] auth settings where we can
add in a role account for automated release candidates (only for /dev,
not for /release !), all podlings belong to the /dev/incubator
structure, meaning any role account we would create would currently have
r/w to all podling release candidate dirs, and would be just one
catch-all role account for the entire incubator.
While I would personally have reservations against a global incubator
role account for release staging, it's also worth noting that anyone in
the incubator ldap group can stage anywhere inside it, so perhaps it is
a moot subject.
How the incubator wishes to proceed is largely up to them, with three
basic options to suggest:
1. no automated staging for podlings
2. automated staging is allowed, with a shared incubator role account
3. automated staging is allowed, we'll sort out individual podling role
accounts for their sub-dir.
Regards,
Alex
[1] https://issues.apache.org/jira/browse/INFRA-25088
[2]
https://github.com/apache/incubator-kie-tools/commit/f0c8b8c080581fbdbe660a96d4e25c3831f6c29b
---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org
