Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 482808

Summary: Please allow recruiters to add new developers to git.overlays.gentoo.org
Product: Gentoo Infrastructure Reporter: Markos Chandras (RETIRED) <hwoarang>
Component: Gentoo OverlaysAssignee: Gentoo Overlays Project <overlays>
Status: RESOLVED OBSOLETE    
Severity: enhancement CC: infra-bugs, recruiters
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Markos Chandras (RETIRED) gentoo-dev 2013-08-28 14:44:05 UTC
Hi,

Right now we add people to cvs/svn/git groups on cvs.g.o. However, this does not give them access to git.overlays.gentoo.org. In git.overlays.gentoo.org there are some overlays that allow R/W access to all developers (devmanual, packages). It would be nice for recruiters to be able to add new developers to the 'developers' (or whatever group that is) in g.o.g.o so we don't have to ask overlays/infra everytime a new developers gets access problems.

I was wondering if it would be possible for infra to get this information from ldap instead of copying keys manually.
Comment 1 Alex Xu (Hello71) 2013-08-28 15:36:18 UTC
http://gitolite.com/gitolite/auth.html#ldap

Looks pretty easy. Step 1, add dev SSH keys to g.o.g.o, step 2, tell gitolite that groups can be found in LDAP.
Comment 2 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2013-08-28 16:27:44 UTC
We need to actually automate it, rather than give recruiters access to change those keys. They DO need access to add devs to the @devs groups and other groups potentinally, but not to change keys.
Comment 3 Theo Chatzimichos (RETIRED) archtester gentoo-dev Security 2013-08-28 17:14:42 UTC
We have the scripts to perform both (fetch users from ldap, put users to correct groups), I'm going to write a script to automate it.
Comment 4 Alex Xu (Hello71) 2014-01-02 23:20:18 UTC
ping
Comment 5 Markos Chandras (RETIRED) gentoo-dev 2014-01-03 18:33:44 UTC
(In reply to Alex Xu (Hello71) from comment #4)
> ping

no need to ping infra on our behalf.
Comment 6 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2016-05-23 06:54:56 UTC
This one's quite outdated. Please reopen if there's anything else that needs to change these days.