Hi, Right now we add people to cvs/svn/git groups on cvs.g.o. However, this does not give them access to git.overlays.gentoo.org. In git.overlays.gentoo.org there are some overlays that allow R/W access to all developers (devmanual, packages). It would be nice for recruiters to be able to add new developers to the 'developers' (or whatever group that is) in g.o.g.o so we don't have to ask overlays/infra everytime a new developers gets access problems. I was wondering if it would be possible for infra to get this information from ldap instead of copying keys manually.
http://gitolite.com/gitolite/auth.html#ldap Looks pretty easy. Step 1, add dev SSH keys to g.o.g.o, step 2, tell gitolite that groups can be found in LDAP.
We need to actually automate it, rather than give recruiters access to change those keys. They DO need access to add devs to the @devs groups and other groups potentinally, but not to change keys.
We have the scripts to perform both (fetch users from ldap, put users to correct groups), I'm going to write a script to automate it.
ping
(In reply to Alex Xu (Hello71) from comment #4) > ping no need to ping infra on our behalf.
This one's quite outdated. Please reopen if there's anything else that needs to change these days.