[group review bot] Read group members from OBS #52

New Issue

dmach · 2025-07-07T13:16:23+02:00

dmach commented

2025-07-07 13:16:23 +02:00

You can easily query OBS for groups and their members, e.g. osc api /group/opensuse-review-team
My team would strongly prefer this approach over specifying the groups in each organization and keeping them in sync.

You can easily query OBS for groups and their members, e.g. `osc api /group/opensuse-review-team` My team would strongly prefer this approach over specifying the groups in each organization and keeping them in sync.

adamm commented

2025-07-07 13:29:08 +02:00

I think we'll need some tooling here to help keep things in sync. The approach is not to keep group definitions per organization, but per target project. The problem is not specific to autobuild.

In openSUSE/Factory project, they will have to keep a list of users with permissions for every devel project (so organization in this case). That's about 260 or so.

Proposal would be to have some git repo under autobuild management (maybe autobuild/maintained_projects) where there's a list of projects gits that is authorized to be reviewed by autobuild. For example:

members.yaml
    - adrianS
    - darix
    - dmach

projects.yaml
    - products/SLFO.git#1.2
    - products/SLFO.git#main

and a script that verifies members of projects with the yaml file. If out of sync, it makes a PR to project to update the list. Old projects out of maintenance could be dropped from the list.

What do you think?

I think we'll need some tooling here to help keep things in sync. The approach is not to keep group definitions per organization, but per target project. The problem is not specific to autobuild. In openSUSE/Factory project, they will have to keep a list of users with permissions for every devel project (so organization in this case). That's about 260 or so. Proposal would be to have some git repo under autobuild management (maybe `autobuild/maintained_projects`) where there's a list of projects gits that is authorized to be reviewed by autobuild. For example: ``` members.yaml - adrianS - darix - dmach ``` ``` projects.yaml - products/SLFO.git#1.2 - products/SLFO.git#main ``` and a script that verifies members of projects with the yaml file. If out of sync, it makes a PR to project to update the list. Old projects out of maintenance could be dropped from the list. What do you think?

adamm commented

2025-08-22 17:53:51 +02:00

Closing as duplicate of #27

adamm closed this issue

2025-08-22 17:53:52 +02:00

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: git-workflow/autogits#52