Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add oncall groups and bind to projective primitive roles #919

Merged
merged 2 commits into from
May 29, 2020

Conversation

spiffxp
Copy link
Member

@spiffxp spiffxp commented May 28, 2020

This mirrors what is done today for the google.com-equivalent projects

  • test-infra-oncall has owner access to the prow projects, and all e2e projects
  • scalability-oncall has owner access to all scalability e2e projects

I also added a k8s-infra-prow-viewer group to see if that would give sufficient
access for troubleshooting

I anticipate dialing these down to custom roles to be done as followup

ACLs ref: #844
scalability ref: kubernetes/test-infra#17725

spiffxp added 2 commits May 28, 2020 14:22
test-infra-oncall and scalability-oncall are both used to having owner
access to the projects they administer today, so that's what I went
with
@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels May 28, 2020
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: spiffxp

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the area/access Define who has access to what via IAM bindings, role bindings, policy, etc. label May 28, 2020
@k8s-ci-robot k8s-ci-robot requested review from dims and nikhita May 28, 2020 23:34
@k8s-ci-robot k8s-ci-robot added wg/k8s-infra approved Indicates a PR has been approved by an approver from all required OWNERS files. labels May 28, 2020
@spiffxp
Copy link
Member Author

spiffxp commented May 28, 2020

/cc @BenTheElder

@bartsmykla
Copy link
Contributor

/lgtm

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label May 29, 2020
@dims
Copy link
Member

dims commented May 29, 2020

/lgtm

@k8s-ci-robot k8s-ci-robot merged commit 31c0344 into kubernetes:master May 29, 2020
@spiffxp spiffxp deleted the add-oncall-groups branch May 29, 2020 16:50
@spiffxp
Copy link
Member Author

spiffxp commented May 29, 2020

ran make -C groups run -- --confirm

working on the rest...

@spiffxp
Copy link
Member Author

spiffxp commented May 29, 2020

ran terraform apply for both build clusters

find a typo (ref: #922) so edited locally to workaround

ran ./infra/gcp/ensure-e2e-projects.sh

tosi3k added a commit to tosi3k/k8s.io that referenced this pull request Jul 22, 2020
Adding myself to k8s-infra-sig-scalability-oncall@kubernetes.io and k8s-infra-rbac-perfdash@kubernetes.io groups.

Ref: kubernetes#919

/cc wojtek-t
@spiffxp spiffxp added the area/prow Setting up or working with prow in general, prow.k8s.io, prow build clusters label Aug 25, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. area/access Define who has access to what via IAM bindings, role bindings, policy, etc. area/prow Setting up or working with prow in general, prow.k8s.io, prow build clusters cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants