One-Off Backfill Tool for Managing GitHub Permissions as Code

permissions/component-SECURITY-144-compat.yml

@@ -4,5 +4,5 @@ github: "jenkinsci/SECURITY-144-compat"
 paths:
  - "org/jenkins-ci/SECURITY-144-compat"
 developers:
- - "jglick"
- - "kohsuke"
+ - ldap: "jglick"
+ - ldap: "kohsuke"

permissions/component-acceptance-test-harness.yml

@@ -4,19 +4,35 @@ github: "jenkinsci/acceptance-test-harness"
 paths:
  - "org/jenkins-ci/acceptance-test-harness"
 developers:
- - "andresrc"
- - "basil"
- - "jglick"
- - "kohsuke"
- - "olivergondza"
- - "rsandell"
- - "vlatombe"
- - "batmat"
- - "amuniz"
- - "vilacides"
- - "teilo"
- - "timja"
- - "olamy"
- - "notmyfault"
+ - ldap: "andresrc"
+ - ldap: "basil"
+ github: "basil"
+ - ldap: "jglick"
+ github: "jglick"
+ - ldap: "kohsuke"
+ - ldap: "olivergondza"
+ - ldap: "rsandell"
+ github: "rsandell"
+ - ldap: "vlatombe"
+ - ldap: "batmat"
+ github: "batmat"
+ - ldap: "amuniz"
+ github: "amuniz"
+ - ldap: "vilacides"
+ - ldap: "teilo"
+ - ldap: "timja"
+ - ldap: "olamy"
+ - ldap: "notmyfault"
+ - github: "Vlatombe"
+ - github: "jtnord"
+ - github: "NotMyFault"
 cd:
- enabled: true
+ enabled: true
+repository_team: "acceptance-test-harness Developers"
+additional_github_teams:
+ - team: "DockerHub Admins"
+ role: "Admin"
+ - team: "Core"
+ role: "Admin"
+ - team: "SIG: UX"
+ role: "Admin"

permissions/component-analysis-model.yml

@@ -4,4 +4,8 @@ github: "jenkinsci/analysis-model"
 paths:
  - "edu/hm/hafner/analysis-model"
 developers:
- - "drulli"
+ - ldap: "drulli"
+ - github: "uhafner"
+ - github: "jenkinsadmin"
+ - github: "chr42"
+repository_team: "analysis-model Developers"

permissions/component-annotation-indexer.yml

@@ -4,4 +4,8 @@ github: "jenkinsci/lib-annotation-indexer"
 paths:
  - "org/jenkins-ci/annotation-indexer"
 developers:
- - "@core"
+ - ldap: "@core"
+repository_team: "lib-annotation-indexer Developers"
+additional_github_teams:
+ - team: "Core"
+ role: "Admin"

permissions/component-async-http-client.yml

@@ -5,10 +5,19 @@ paths:
  # For the 1.7.x branch which is the only needed one at the moment
  - "com/ning/async-http-client"
 developers:
- - "batmat"
- - "egutierrez"
- - "fcojfernandez"
- - "rsandell"
+ - ldap: "batmat"
+ github: "batmat"
+ - ldap: "egutierrez"
+ - ldap: "fcojfernandez"
+ github: "fcojfernandez"
+ - ldap: "rsandell"
+ github: "rsandell"
+ - github: "varyvol"
+ - github: "MRamonLeon"
 security:
- contacts:
- jira: "cloudbees_security_members"
+ contacts:
+ jira: "cloudbees_security_members"
+repository_team: "lib-async-http-client Developers"
+additional_github_teams:
+ - team: "async-http-client Developers"
+ role: "Admin"

permissions/component-azure-commons-core.yml

@@ -3,5 +3,5 @@ name: "azure-commons-core"
 paths:
  - "org/jenkins-ci/plugins/azure-commons-core"
 developers:
- - "zooopx"
- - "timja"
+ - ldap: "zooopx"
+ - ldap: "timja"

permissions/component-blueocean-maven-plugin.yml

@@ -4,14 +4,17 @@ github: "jenkinsci/blueocean-maven-plugin"
 paths:
  - "io/jenkins/blueocean/blueocean-maven-plugin"
 developers:
- - "michaelneale"
- - "vivek"
- - "kzantow"
- - "davidbees"
- - "richbg"
- - "carroll"
- - "dnusbaum"
- - "jtaboada"
- - "kshultz"
- - "bitwiseman"
- - "olamy"
+ - ldap: "michaelneale"
+ - ldap: "vivek"
+ - ldap: "kzantow"
+ github: "kzantow"
+ - ldap: "davidbees"
+ - ldap: "richbg"
+ - ldap: "carroll"
+ - ldap: "dnusbaum"
+ - ldap: "jtaboada"
+ - ldap: "kshultz"
+ - ldap: "bitwiseman"
+ - ldap: "olamy"
+ github: "olamy"
+repository_team: "blueocean-maven-plugin Developers"

permissions/component-blueocean-test-ssh-server.yml

@@ -4,14 +4,17 @@ github: "jenkinsci/blueocean-test-ssh-server"
 paths:
  - "io/jenkins/blueocean/blueocean-test-ssh-server"
 developers:
- - "michaelneale"
- - "vivek"
- - "kzantow"
- - "davidbees"
- - "richbg"
- - "carroll"
- - "dnusbaum"
- - "jtaboada"
- - "kshultz"
- - "bitwiseman"
- - "olamy"
+ - ldap: "michaelneale"
+ github: "michaelneale"
+ - ldap: "vivek"
+ - ldap: "kzantow"
+ github: "kzantow"
+ - ldap: "davidbees"
+ - ldap: "richbg"
+ - ldap: "carroll"
+ - ldap: "dnusbaum"
+ - ldap: "jtaboada"
+ - ldap: "kshultz"
+ - ldap: "bitwiseman"
+ - ldap: "olamy"
+repository_team: "blueocean-test-ssh-server Developers"

permissions/component-bridge-method-annotation.yml

@@ -4,4 +4,7 @@ github: "jenkinsci/bridge-method-injector"
 paths:
  - "com/infradna/tool/bridge-method-annotation"
 developers:
- - "@core"
+ - ldap: "@core"
+additional_github_teams:
+ - team: "Core"
+ role: "Admin"

permissions/component-bridge-method-injector.yml

@@ -5,4 +5,7 @@ paths:
  - "com/infradna/tool"
  - "com/infradna/tool/bridge-method-injector"
 developers:
- - "@core"
+ - ldap: "@core"
+additional_github_teams:
+ - team: "Core"
+ role: "Admin"

permissions/component-build-config.yml

@@ -3,4 +3,4 @@ name: "build-config"
 paths:
  - "com/sonyericsson/hudson/plugins/gerrit/build-config"
 developers:
- - "rsandell"
+ - ldap: "rsandell"

permissions/component-build-configurator-server.yml

@@ -4,4 +4,7 @@ github: "jenkinsci/build-configurator-plugin"
 paths:
  - "com/amcbridge/build-configurator-server"
 developers:
- - "amcbridgedevteam"
+ - ldap: "amcbridgedevteam"
+ - github: "AMCBridgeDevTeam"
+ - github: "roman-bilyi"
+repository_team: "build-configurator-plugin Developers"

permissions/component-capability-annotation.yml

@@ -4,5 +4,7 @@ github: "jenkinsci/capability-annotation"
 paths:
  - "io/jenkins/blueocean/rest/annotation/capability-annotation"
 developers:
- - "vivek"
- - "michaelneale"
+ - ldap: "vivek"
+ github: "vivek"
+ - ldap: "michaelneale"
+repository_team: "capability-annotation Developers"

permissions/component-cli.yml

@@ -4,4 +4,19 @@ github: "jenkinsci/jenkins"
 paths:
  - "org/jenkins-ci/main/cli"
 developers:
- - "releasebot"
+ - ldap: "releasebot"
+ - github: "timja"
+repository_team: "jenkins Developers"
+additional_github_teams:
+ - team: "jcasc-compatibility-reviewers"
+ role: "Read"
+ - team: "SIG: UX"
+ role: "Read"
+ - team: "Core"
+ role: "Write"
+ - team: "Core PR Reviewers"
+ role: "Triage"
+ - team: "Release"
+ role: "Write"
+ - team: "core-security-review"
+ role: "Triage"

permissions/component-commons-httpclient.yml

@@ -4,4 +4,7 @@ github: "jenkinsci/lib-commons-httpclient"
 paths:
  - "commons-httpclient/commons-httpclient"
 developers:
- - "@core"
+ - ldap: "@core"
+additional_github_teams:
+ - team: "Core"
+ role: "Write"

permissions/component-commons-jelly-tags-define.yml

@@ -4,4 +4,7 @@ github: "jenkinsci/jelly"
 paths:
  - "org/jvnet/hudson/commons-jelly-tags-define"
 developers:
- - "@core"
+ - ldap: "@core"
+additional_github_teams:
+ - team: "Core"
+ role: "Admin"

permissions/component-configuration-as-code-integrations.yml

@@ -4,10 +4,23 @@ github: "jenkinsci/configuration-as-code-plugin"
 paths:
  - "io/jenkins/configuration-as-code/integrations"
 developers:
- - "praqma"
- - "jetersen"
- - "oleg_nenashev"
- - "timja"
+ - ldap: "praqma"
+ - ldap: "jetersen"
+ github: "jetersen"
+ - ldap: "oleg_nenashev"
+ - ldap: "timja"
+ github: "timja"
+ - github: "ReleasePraqma"
+ - github: "MadsNielsen"
+ - github: "buep"
+ - github: "oleg-nenashev"
+ - github: "ewelinawilkosz"
 security:
- contacts:
- jira: "jetersen"
+ contacts:
+ jira: "jetersen"
+repository_team: "configuration-as-code-plugin Developers"
+additional_github_teams:
+ - team: "jcasc-compatibility-reviewers"
+ role: "Read"
+ - team: "configuration-as-code-devtools-project-team"
+ role: "Triage"

permissions/component-configuration-as-code-parent.yml

@@ -4,12 +4,25 @@ github: "jenkinsci/configuration-as-code-plugin"
 paths:
  - "io/jenkins/configuration-as-code/parent"
 developers:
- - "praqma"
- - "jetersen"
- - "oleg_nenashev"
- - "timja"
+ - ldap: "praqma"
+ - ldap: "jetersen"
+ github: "jetersen"
+ - ldap: "oleg_nenashev"
+ - ldap: "timja"
+ github: "timja"
+ - github: "ReleasePraqma"
+ - github: "MadsNielsen"
+ - github: "buep"
+ - github: "oleg-nenashev"
+ - github: "ewelinawilkosz"
 cd:
- enabled: true
+  enabled: true
 security:
- contacts:
- jira: "jetersen"
+ contacts:
+ jira: "jetersen"
+repository_team: "configuration-as-code-plugin Developers"
+additional_github_teams:
+ - team: "jcasc-compatibility-reviewers"
+ role: "Read"
+ - team: "configuration-as-code-devtools-project-team"
+ role: "Triage"

permissions/component-configuration-as-code-test-harness.yml

@@ -4,12 +4,25 @@ github: "jenkinsci/configuration-as-code-plugin"
 paths:
  - "io/jenkins/configuration-as-code/test-harness"
 developers:
- - "praqma"
- - "jetersen"
- - "oleg_nenashev"
- - "timja"
+ - ldap: "praqma"
+ - ldap: "jetersen"
+ github: "jetersen"
+ - ldap: "oleg_nenashev"
+ - ldap: "timja"
+ github: "timja"
+ - github: "ReleasePraqma"
+ - github: "MadsNielsen"
+ - github: "buep"
+ - github: "oleg-nenashev"
+ - github: "ewelinawilkosz"
 cd:
- enabled: true
+  enabled: true
 security:
- contacts:
- jira: "jetersen"
+ contacts:
+ jira: "jetersen"
+repository_team: "configuration-as-code-plugin Developers"
+additional_github_teams:
+ - team: "jcasc-compatibility-reviewers"
+ role: "Read"
+ - team: "configuration-as-code-devtools-project-team"
+ role: "Triage"

permissions/component-core-annotation-processors.yml

@@ -2,8 +2,11 @@
 name: "core-annotation-processors"
 github: "jenkinsci/core-annotation-processors"
 cd:
- enabled: true
+  enabled: true
 paths:
  - "org/jenkins-ci/core-annotation-processors"
 developers:
- - "@core"
+ - ldap: "@core"
+additional_github_teams:
+ - team: "Core"
+ role: "Admin"

permissions/component-coverage-model.yml

@@ -4,4 +4,6 @@ github: "jenkinsci/coverage-model"
 paths:
  - "edu/hm/hafner/coverage-model"
 developers:
- - "drulli"
+ - ldap: "drulli"
+ - github: "uhafner"
+repository_team: "coverage-model Developers"

permissions/component-crypto-util.yml

@@ -4,4 +4,7 @@ github: "jenkinsci/lib-crypto-util"
 paths:
  - "org/jenkins-ci/crypto-util"
 developers:
- - "@core"
+ - ldap: "@core"
+additional_github_teams:
+ - team: "Core"
+ role: "Maintain"