Skip to content

Use terraform to automate GitHub access and permissions

Created by: jhchabran

Ported from @michaellzc suggestion on Slack

Pain-points:

  • anyone can create a new repo on our own and become repo admin automatically, which bypass our policy
  • hard to add individual team to repo (we by default only add the Teams -> Product & Engineering -> Engineering with write access to most repo), this makes tagging teams for PR review extremely hard)
  • team repo membership is not really transparent.
  • no way to self-serve access request but always relying on pinging the github-owners handle branch protection rule is no longer accessible due to lack of admin role to most teammates

Context at the time of creating this ticket:

@dcomas The problem is that we haven't had capacity from the owning teams to migrate to that right now.