Intent to enable peribolos for team management

[Christoph Blecker]

TL;DR: New tool for managing GitHub teams. Lazy consensus on Friday.

Hi everyone!

We've been working on a long-term project to automate more of our GitHub management, and have a clear source of truth for our GitHub configurations.

Since September, we've used the tool we've developed, peribolos, to invite new members to our GitHub orgs based on the configurations in k8s.io/org. The tool has worked well and has allowed us to delegate the processing of memberships.

We're now ready to do the same for managing membership in GitHub teams. We will have a clear source of truth for our GitHub teams in a git repo, and modifying the team's membership will be as simple as opening a PR.

The PR to enable this is here: https://github.com/kubernetes/org/pull/337

I would like to enable this on Friday, January 11th at around 10a PT. Please let me know if you have any questions or concerns.

Please note that once this is enabled, any changes to GitHub team membership (creation of new teams, adding or removing members, etc) will need to go through this process, as the tool will revert any manual changes.

Cheers,

Christoph

[Stephen Augustus]

Yesssssss!

--
You received this message because you are subscribed to the Google Groups "kubernetes-sig-testing" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-sig-te...@googlegroups.com.
To post to this group, send email to kubernetes-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-sig-testing/CADx2oGE-46ePG2d4GaOehEpxFtqLxBV9OGYnKZ2ozCAnHbBcPA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[Ihor Dvoretskyi]

+1. Thanks Christoph! 

--
You received this message because you are subscribed to the Google Groups "Kubernetes developer/contributor discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-de...@googlegroups.com.
To post to this group, send email to kuberne...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/kubernetes-dev/CADx2oGE-46ePG2d4GaOehEpxFtqLxBV9OGYnKZ2ozCAnHbBcPA%40mail.gmail.com.

[Christoph Blecker]

Hi everyone,

This is now merged, and the bot is running through and syncing changes.

Please note that if you wish you make changes to team membership, the new process will be to open a PR against the configuration in k8s.io/org. If you have questions or issues while doing this, feel free to open an issue in that same repo, and one of the GitHub admins can help you.

Cheers,

Christoph

[Christoph Blecker]

And just as quickly as we turn it on, we have to turn it off. The bot was a little too eager to get this initiative going, and ate up our bot token rate limit with GitHub :)

So I've disabled it, and we will try again to turn it on on Monday.

Happy Friday!

Cheers,

Christoph

[Christoph Blecker]

Happy Thursday everyone,

So we've worked out the kinks with peribolos, and we're now live with team syncing! I'm really excited for this step in our tooling. 🎉

🔴 The important piece: Manual changes to GitHub teams may be reversed. This includes adding new teams, changing team membership or settings, etc. If you need to change your team's configuration, please keep reading.

We're still working out all the documentation pieces, but to summarize:

- All our GitHub teams for all our orgs are generated from yaml configs 📈

- Those yaml configs exist in https://git.k8s.io/org/config

- If you want to add/remove teams, add/remove team members, etc this would be done via a pull request against this repo.

- Once the PR is merged, a post-submit job runs and makes the changes. 🤖

This allows us to have a public audit trail of changes, and the ability to figure out who made a change, who approved it, and when it happened. It also allows delegation of team configurations out to sigs. 🎈

If you have any questions or concerns about this, please either open an issue against the kubernetes/org repo, or reach out in the #sig-contribex channel on slack. 🙋🙋‍♂️

Cheers,

Christoph