Thank you for the detailed information, Daniel! Although I'm not an IPMC member, I'd like to express that option 3 looks almost like a no brainer :)
Looking forward to hearing from IPMC members. On Thu, Aug 1, 2024 at 7:02 AM Daniel Gruno <humbed...@apache.org> wrote: > > On 8/1/24 12:42, Alex Porcelli wrote: > > Dear IPMC members, > > > > The KIE podling is preparing for its first Apache release. Due to the > > numerous artifacts we build across various repositories (container > > images, Java libraries, web apps, etc.), we seek to automate the SVN > > upload as part of our release procedures. > > > > Note: Currently, the KIE podling already has robot access [1] [2] for > > our Git repositories as part of our existing automation processes. > > > > As KIE is under the Incubator, the Apache Infra team recommended we > > contact the IPMC directly. > > To be very specific here, the issue arises from the fact that while TLPs > have their own [/dev/foo] and [/release/foo] auth settings where we can > add in a role account for automated release candidates (only for /dev, > not for /release !), all podlings belong to the /dev/incubator > structure, meaning any role account we would create would currently have > r/w to all podling release candidate dirs, and would be just one > catch-all role account for the entire incubator. > > While I would personally have reservations against a global incubator > role account for release staging, it's also worth noting that anyone in > the incubator ldap group can stage anywhere inside it, so perhaps it is > a moot subject. > > How the incubator wishes to proceed is largely up to them, with three > basic options to suggest: > > 1. no automated staging for podlings > 2. automated staging is allowed, with a shared incubator role account > 3. automated staging is allowed, we'll sort out individual podling role > accounts for their sub-dir. > > > > > Regards, > > Alex > > > > [1] https://issues.apache.org/jira/browse/INFRA-25088 > > [2] > > https://github.com/apache/incubator-kie-tools/commit/f0c8b8c080581fbdbe660a96d4e25c3831f6c29b > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > For additional commands, e-mail: general-h...@incubator.apache.org > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
