opendevreview | Ke Niu proposed openstack/goal-tools master: setup.cfg: Replace dashes with underscores https://review.opendev.org/c/openstack/goal-tools/+/889834 | 03:06 |
---|---|---|
opendevreview | Ke Niu proposed openstack/goal-tools master: Use py3 as the default runtime for tox https://review.opendev.org/c/openstack/goal-tools/+/889835 | 03:24 |
tonyb | Random driveby question: Should https://review.opendev.org/admin/groups/f81ba4b1b0deb429dabd9e9d0094c54bbd04cbf6,members get updated to remove old past chairs? | 18:00 |
fungi | i would think so, but i've never been a tc chairperson | 18:17 |
JayF | probably something to add to the TC Chair runbook | 18:18 |
JayF | to remove old chairs on the way in | 18:18 |
gmann | we discussed about it in past and we just kept old chair in that group. there is no particular reason to do so but as it did not harm anything we did not cleanup it | 18:19 |
JayF | Does that group have any privledged access? | 18:19 |
gmann | nothing special now. previously +W power for governance repo was to chair only not all tc-members but now it is to all the tc-members. | 18:21 |
gmann | also, its a separate group and a few of the places it might have been added to do the things for example election core group so that we take care of managing election official if there is no active one that time | 18:21 |
gmann | other than that I cannot remember if this group has any special permissions | 18:22 |
JayF | If it does have special access; it seems prima facie harmful to continue to have access given to folks who are no longer elected to have it. (even if, in all individual cases, it's OK in practice because the individuals are trustworthy) | 18:25 |
dansmith | I would s/harmful/not a great look/ but otherwise agree | 18:28 |
JayF | I like guarding against bad actors even though we've luckily not had that problem in practice. | 18:30 |
fungi | https://opendev.org/openstack/project-config/src/branch/master/gerrit/acls/openstack/governance.config#L7-L16 | 18:33 |
fungi | that's the only acl which seems to reference the group directly | 18:33 |
fungi | so in short, it can approve changes equivalent to tech-committee members, but also has power to abandon anyone's change and to push signed tags (used by the election tooling primarily) | 18:34 |
fungi | probably the safest thing to do would be to drop the separate workflow label permission, and switch the abandon and tag permissions over to the tech-committee group | 18:36 |
fungi | at which point the tech-committee-chair group can be cleaned up (emptied, renamed and hidden) | 18:36 |
opendevreview | Merged openstack/election master: Exclude projects under the distributed leadership model https://review.opendev.org/c/openstack/election/+/887668 | 18:46 |
opendevreview | Merged openstack/election master: Add a Sorting function. https://review.opendev.org/c/openstack/election/+/887669 | 18:51 |
opendevreview | Merged openstack/election master: Add a tool to update the releases repo https://review.opendev.org/c/openstack/election/+/887690 | 18:51 |
tonyb | JayF: It is included in (at least) election-core, which is how I noticed it, beyond that I don't know | 19:05 |
gmann | yes, that was needed. there is on other place this group is added. | 19:10 |
gmann | it make sense to have chair in places/repo under the technical committee umbrella to manage the gerrit members in those group as there are high chances like past that we might not have any active members there and need to add all new one | 19:13 |
fungi | though in such cases, there's always the fallback of asking gerrit admins for help. i can certainly assist with group management in a pincg | 19:26 |
fungi | pinch | 19:26 |
fungi | but also if the tech-committee group were self-owned, any returning tc member could adjust the group membership accordingly | 19:27 |
JayF | and our current model guarantees we only turn over half at a time | 19:32 |
gmann | I am not talking about TC members group. I am talking about other group for example election-core | 20:53 |
gmann | where tech-committee group is not there and having chair group there help | 20:55 |
fungi | yes, but replacing it with the tech-committee group would probably not be the end of the world | 21:11 |
fungi | even for that case | 21:11 |
tonyb | I don't have a strong objection to the the group's inclusion in election-core. | 23:35 |
tonyb | I just noticed that the name does not currently match the implementation and thought I'd raise it. | 23:36 |
tonyb | y'all can decide what to do, and "nothing" is an option | 23:36 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!