Thanks for the detailed breakdown of the issue. Ideally option 3 if it is feasible to implement. I'm not against option 2 as a short term solution to unblock KIE release.
On Thu, 1 Aug 2024 at 12:14, Alex Porcelli <porce...@apache.org> wrote: > > Thank you for the detailed information, Daniel! > > Although I'm not an IPMC member, I'd like to express that option 3 > looks almost like a no brainer :) > > Looking forward to hearing from IPMC members. > > On Thu, Aug 1, 2024 at 7:02 AM Daniel Gruno <humbed...@apache.org> wrote: > > > > On 8/1/24 12:42, Alex Porcelli wrote: > > > Dear IPMC members, > > > > > > The KIE podling is preparing for its first Apache release. Due to the > > > numerous artifacts we build across various repositories (container > > > images, Java libraries, web apps, etc.), we seek to automate the SVN > > > upload as part of our release procedures. > > > > > > Note: Currently, the KIE podling already has robot access [1] [2] for > > > our Git repositories as part of our existing automation processes. > > > > > > As KIE is under the Incubator, the Apache Infra team recommended we > > > contact the IPMC directly. > > > > To be very specific here, the issue arises from the fact that while TLPs > > have their own [/dev/foo] and [/release/foo] auth settings where we can > > add in a role account for automated release candidates (only for /dev, > > not for /release !), all podlings belong to the /dev/incubator > > structure, meaning any role account we would create would currently have > > r/w to all podling release candidate dirs, and would be just one > > catch-all role account for the entire incubator. > > > > While I would personally have reservations against a global incubator > > role account for release staging, it's also worth noting that anyone in > > the incubator ldap group can stage anywhere inside it, so perhaps it is > > a moot subject. > > > > How the incubator wishes to proceed is largely up to them, with three > > basic options to suggest: > > > > 1. no automated staging for podlings > > 2. automated staging is allowed, with a shared incubator role account > > 3. automated staging is allowed, we'll sort out individual podling role > > accounts for their sub-dir. > > > > > > > > Regards, > > > Alex > > > > > > [1] https://issues.apache.org/jira/browse/INFRA-25088 > > > [2] > > > https://github.com/apache/incubator-kie-tools/commit/f0c8b8c080581fbdbe660a96d4e25c3831f6c29b > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > > For additional commands, e-mail: general-h...@incubator.apache.org > > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > For additional commands, e-mail: general-h...@incubator.apache.org > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
