Transfer repository access grants to Binjovi services #354

Merged
binjovi-bot merged 1 commit from feat/binjovi-collaborator-handoff into trunk 2026-09-06 14:58:23 +00:00
Owner

Remove the 68 retained Binjovi collaborator declarations after the service provider takes over their desired permissions. Add a bounded create-only bootstrap for the 32 management admin grants, which breaks the initial-access dependency on an empty cluster while preserving every existing grant. Accounts and token issuers keep their current ownership.

The exact legacy GET grants remain. Binjovi owns runtime permission updates, direct grant removal, and drift repair; legacy Pipeline bot grants remain with the project migration owners.

Validation: both affected components render; the source handoff and Binjovi guards pass. Bootstrap tests cover existing/missing/mixed grants, access and identity failures, and a lost PUT response with read-before-retry. The complete repository guard suite is running.

Delivery order: core Binjovi PR843 verified in production, then this source release, bootstrap success, and exact-UID retirement of the retained live CRs. Seanfarm PR352 already delivered the Retain and reader prerequisite.

Remove the 68 retained Binjovi collaborator declarations after the service provider takes over their desired permissions. Add a bounded create-only bootstrap for the 32 management admin grants, which breaks the initial-access dependency on an empty cluster while preserving every existing grant. Accounts and token issuers keep their current ownership. The exact legacy GET grants remain. Binjovi owns runtime permission updates, direct grant removal, and drift repair; legacy Pipeline bot grants remain with the project migration owners. Validation: both affected components render; the source handoff and Binjovi guards pass. Bootstrap tests cover existing/missing/mixed grants, access and identity failures, and a lost PUT response with read-before-retry. The complete repository guard suite is running. Delivery order: core Binjovi PR843 verified in production, then this source release, bootstrap success, and exact-UID retirement of the retained live CRs. Seanfarm PR352 already delivered the Retain and reader prerequisite.
Transfer retained repository grants to Binjovi service control
Some checks reported errors
binjovi/ci A newer pull-request head superseded this plan
9b5ff8f59a
sean force-pushed feat/binjovi-collaborator-handoff from 9b5ff8f59a
Some checks reported errors
binjovi/ci A newer pull-request head superseded this plan
to 00dc06ec19
All checks were successful
binjovi/ci Binjovi completed the frozen plan
2026-09-06 14:40:06 +00:00
Compare
sean force-pushed feat/binjovi-collaborator-handoff from 00dc06ec19
All checks were successful
binjovi/ci Binjovi completed the frozen plan
to d9927ec196
All checks were successful
binjovi/ci Binjovi completed the frozen plan
2026-09-06 14:48:54 +00:00
Compare
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/seanfarm!354
No description provided.