about summary refs log tree commit diff
path: root/lisp/dns
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2022-01-28T10·26+0300
committertazjin <tazjin@tvl.su>2022-02-07T19·12+0000
commit3452569ddd32646ddb63fd0d99c463e1f81ab244 (patch)
treeaf64eba65d4d38bd7ed9f72e81dd2377c605aae8 /lisp/dns
parentf82f459e2cacd18c6a0c9235129d1b9a69f34c90 (diff)
feat(tools/crfo-approve): Add tool for CRFO depot-interventions r/3782
In some cases we want to be able to "emergency approve" something on
behalf of a different user.

Example cases:

* clean up of abandoned directories with restrictive OWNERS
* security fixes blocked on people in different timezones

This script can be used to perform these approvals if the user is a
member of depot-interventions. Note that access to depot-interventions
is audit logged.

The user on behalf of whom approval is performed is always added to
the attention set to ensure that they are made aware of the CRFO
approval.

Note: This depends on nixpkgs#156466. Keeping WIP until we have a
channel with that patch.

Change-Id: I16e5f9d7baa9daab49c88b629bb8f024aad9d94c
Reviewed-on: https://cl.tvl.fyi/c/depot/+/5085
Tested-by: BuildkiteCI
Reviewed-by: kn <klemens@posteo.de>
Reviewed-by: sterni <sternenseemann@systemli.org>
Diffstat (limited to 'lisp/dns')
0 files changed, 0 insertions, 0 deletions