Cleanup Boost permissions

[BigLep]

Summary

Remove old "Boost" team
Create "boost-maintainers" with updated set of maintainers that includes Curio and StorSwift. Generally removed individual collaborators from the Boost-related repos.

Why do you need this?

There is a lot of cruft with the Boost repos. This is updating them to match those who have contracts / incentive to maintain them.

Reviewer's Checklist

• It is clear where the request is coming from (if unsure, ask)
• All the automated checks passed
• The YAML changes reflect the summary of the request
• The Terraform plan posted as a comment reflects the summary of the request

[github-actions]

The following access changes will be introduced as a result of applying the plan:

Access Changes

User aschmahmann:
  - will lose push permission to boost
User brendalee:
  - will lose maintain permission to boost
  - will lose maintain permission to boost-docs
  - will lose maintain permission to boost-gfm
  - will lose maintain permission to boost-graphsync
  - will lose push permission to filecoin-docs
  - will lose maintain permission to lid-benchmarks
User davidd8:
  - will lose admin permission to boost
  - will lose maintain permission to boost-docs
  - will lose maintain permission to boost-gfm
  - will lose maintain permission to boost-graphsync
  - will lose push permission to filecoin-docs
  - will lose maintain permission to lid-benchmarks
User gammazero:
  - will lose push permission to boost
User hannahhoward:
  - will lose admin permission to boost
  - will lose push permission to boost-gfm
  - will lose push permission to boost-graphsync
User ischasny:
  - will lose push permission to boost
  - will lose maintain permission to boost-docs
  - will lose maintain permission to boost-gfm
  - will lose maintain permission to boost-graphsync
  - will lose push permission to filecoin-docs
  - will lose maintain permission to lid-benchmarks
User jennijuju:
  - will lose admin permission to boost
User laurenspiegel:
  - will lose maintain permission to boost
User lexluthr:
  - will lose push permission to filecoin-docs
User magik6k:
  - will have the permission to boost change from admin to maintain
  - will lose push permission to filecoin-docs
User marco-storswift:
  - will gain maintain permission to boost
  - will gain maintain permission to boost-docs
  - will gain maintain permission to boost-gfm
  - will gain maintain permission to boost-graphsync
User nonsense:
  - will lose admin permission to boost
  - will lose maintain permission to boost-docs
  - will lose admin permission to boost-gfm
  - will lose admin permission to boost-graphsync
  - will lose push permission to filecoin-docs
  - will lose admin permission to lid-benchmarks
User reiers:
  - will have the permission to boost change from push to maintain
  - will lose push permission to filecoin-docs
  - will lose maintain permission to lid-benchmarks
User rvagg:
  - will have the permission to boost change from maintain to admin
  - will have the permission to boost-graphsync change from push to admin
User snadrus:
  - will have the permission to boost change from push to maintain
  - will lose push permission to filecoin-docs
  - will lose maintain permission to lid-benchmarks
User willscott:
  - will lose admin permission to boost

[github-actions]

Before merge, verify that all the following plans are correct. They will be applied as-is after the merge.

Terraform plans

filecoin-project

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  - destroy
-/+ destroy and then create replacement

Terraform will perform the following actions:

  # github_repository_collaborator.this["boost-gfm:hannahhoward"] will be destroyed
  # (because key ["boost-gfm:hannahhoward"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost-gfm:hannahhoward" -> null
      - permission = "push" -> null
      - repository = "boost-gfm" -> null
      - username   = "hannahhoward" -> null
    }

  # github_repository_collaborator.this["boost-gfm:nonsense"] will be destroyed
  # (because key ["boost-gfm:nonsense"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost-gfm:nonsense" -> null
      - permission = "admin" -> null
      - repository = "boost-gfm" -> null
      - username   = "nonsense" -> null
    }

  # github_repository_collaborator.this["boost-graphsync:hannahhoward"] will be destroyed
  # (because key ["boost-graphsync:hannahhoward"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost-graphsync:hannahhoward" -> null
      - permission = "push" -> null
      - repository = "boost-graphsync" -> null
      - username   = "hannahhoward" -> null
    }

  # github_repository_collaborator.this["boost-graphsync:nonsense"] will be destroyed
  # (because key ["boost-graphsync:nonsense"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost-graphsync:nonsense" -> null
      - permission = "admin" -> null
      - repository = "boost-graphsync" -> null
      - username   = "nonsense" -> null
    }

  # github_repository_collaborator.this["boost-graphsync:rvagg"] must be replaced
-/+ resource "github_repository_collaborator" "this" {
      ~ id                          = "boost-graphsync:rvagg" -> (known after apply)
      + invitation_id               = (known after apply)
      ~ permission                  = "push" -> "admin" # forces replacement
      + permission_diff_suppression = false
        # (2 unchanged attributes hidden)
    }

  # github_repository_collaborator.this["boost:aschmahmann"] will be destroyed
  # (because key ["boost:aschmahmann"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost:aschmahmann" -> null
      - permission = "push" -> null
      - repository = "boost" -> null
      - username   = "aschmahmann" -> null
    }

  # github_repository_collaborator.this["boost:brendalee"] will be destroyed
  # (because key ["boost:brendalee"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost:brendalee" -> null
      - permission = "maintain" -> null
      - repository = "boost" -> null
      - username   = "brendalee" -> null
    }

  # github_repository_collaborator.this["boost:davidd8"] will be destroyed
  # (because key ["boost:davidd8"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost:davidd8" -> null
      - permission = "admin" -> null
      - repository = "boost" -> null
      - username   = "davidd8" -> null
    }

  # github_repository_collaborator.this["boost:gammazero"] will be destroyed
  # (because key ["boost:gammazero"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost:gammazero" -> null
      - permission = "push" -> null
      - repository = "boost" -> null
      - username   = "gammazero" -> null
    }

  # github_repository_collaborator.this["boost:hannahhoward"] will be destroyed
  # (because key ["boost:hannahhoward"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost:hannahhoward" -> null
      - permission = "admin" -> null
      - repository = "boost" -> null
      - username   = "hannahhoward" -> null
    }

  # github_repository_collaborator.this["boost:ischasny"] will be destroyed
  # (because key ["boost:ischasny"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost:ischasny" -> null
      - permission = "push" -> null
      - repository = "boost" -> null
      - username   = "ischasny" -> null
    }

  # github_repository_collaborator.this["boost:jennijuju"] will be destroyed
  # (because key ["boost:jennijuju"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost:jennijuju" -> null
      - permission = "admin" -> null
      - repository = "boost" -> null
      - username   = "jennijuju" -> null
    }

  # github_repository_collaborator.this["boost:laurenspiegel"] will be destroyed
  # (because key ["boost:laurenspiegel"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost:LaurenSpiegel" -> null
      - permission = "maintain" -> null
      - repository = "boost" -> null
      - username   = "LaurenSpiegel" -> null
    }

  # github_repository_collaborator.this["boost:magik6k"] will be destroyed
  # (because key ["boost:magik6k"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost:magik6k" -> null
      - permission = "admin" -> null
      - repository = "boost" -> null
      - username   = "magik6k" -> null
    }

  # github_repository_collaborator.this["boost:nonsense"] will be destroyed
  # (because key ["boost:nonsense"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost:nonsense" -> null
      - permission = "admin" -> null
      - repository = "boost" -> null
      - username   = "nonsense" -> null
    }

  # github_repository_collaborator.this["boost:rvagg"] must be replaced
-/+ resource "github_repository_collaborator" "this" {
      ~ id                          = "boost:rvagg" -> (known after apply)
      + invitation_id               = (known after apply)
      ~ permission                  = "maintain" -> "admin" # forces replacement
      + permission_diff_suppression = false
        # (2 unchanged attributes hidden)
    }

  # github_repository_collaborator.this["boost:willscott"] will be destroyed
  # (because key ["boost:willscott"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "boost:willscott" -> null
      - permission = "admin" -> null
      - repository = "boost" -> null
      - username   = "willscott" -> null
    }

  # github_repository_collaborator.this["lid-benchmarks:nonsense"] will be destroyed
  # (because key ["lid-benchmarks:nonsense"] is not in for_each map)
  - resource "github_repository_collaborator" "this" {
      - id         = "lid-benchmarks:nonsense" -> null
      - permission = "admin" -> null
      - repository = "lid-benchmarks" -> null
      - username   = "nonsense" -> null
    }

  # github_team.this["boost"] will be destroyed
  # (because key ["boost"] is not in for_each map)
  - resource "github_team" "this" {
      - description           = "Boost project team" -> null
      - etag                  = "W/\"e0244093cb7fcd0eb7d7ea7abcd1204f641c0dd641713d5230703a1d595ebe62\"" -> null
      - id                    = "7243478" -> null
      - members_count         = 8 -> null
      - name                  = "Boost" -> null
      - node_id               = "T_kwDOAU_qk84AbobW" -> null
      - privacy               = "closed" -> null
      - slug                  = "boost" -> null
        # (4 unchanged attributes hidden)
    }

  # github_team.this["boost-maintainers"] will be created
  + resource "github_team" "this" {
      + create_default_maintainer = false
      + etag                      = (known after apply)
      + id                        = (known after apply)
      + members_count             = (known after apply)
      + name                      = "boost-maintainers"
      + node_id                   = (known after apply)
      + parent_team_read_id       = (known after apply)
      + parent_team_read_slug     = (known after apply)
      + privacy                   = "secret"
      + slug                      = (known after apply)
    }

  # github_team_membership.this["boost-maintainers:lexluthr"] will be created
  + resource "github_team_membership" "this" {
      + etag     = (known after apply)
      + id       = (known after apply)
      + role     = "maintainer"
      + team_id  = (known after apply)
      + username = "LexLuthr"
    }

  # github_team_membership.this["boost-maintainers:magik6k"] will be created
  + resource "github_team_membership" "this" {
      + etag     = (known after apply)
      + id       = (known after apply)
      + role     = "member"
      + team_id  = (known after apply)
      + username = "magik6k"
    }

  # github_team_membership.this["boost-maintainers:marco-storswift"] will be created
  + resource "github_team_membership" "this" {
      + etag     = (known after apply)
      + id       = (known after apply)
      + role     = "member"
      + team_id  = (known after apply)
      + username = "marco-storswift"
    }

  # github_team_membership.this["boost-maintainers:reiers"] will be created
  + resource "github_team_membership" "this" {
      + etag     = (known after apply)
      + id       = (known after apply)
      + role     = "member"
      + team_id  = (known after apply)
      + username = "Reiers"
    }

  # github_team_membership.this["boost-maintainers:snadrus"] will be created
  + resource "github_team_membership" "this" {
      + etag     = (known after apply)
      + id       = (known after apply)
      + role     = "member"
      + team_id  = (known after apply)
      + username = "snadrus"
    }

  # github_team_membership.this["boost-maintainers:snail8501"] will be created
  + resource "github_team_membership" "this" {
      + etag     = (known after apply)
      + id       = (known after apply)
      + role     = "member"
      + team_id  = (known after apply)
      + username = "snail8501"
    }

  # github_team_membership.this["boost:brendalee"] will be destroyed
  # (because key ["boost:brendalee"] is not in for_each map)
  - resource "github_team_membership" "this" {
      - etag     = "W/\"c2fb20aabab9f10b97c1b26494c08832fe0ff6b9562f94237b7e296a1f48088c\"" -> null
      - id       = "7243478:brendalee" -> null
      - role     = "maintainer" -> null
      - team_id  = "7243478" -> null
      - username = "brendalee" -> null
    }

  # github_team_membership.this["boost:davidd8"] will be destroyed
  # (because key ["boost:davidd8"] is not in for_each map)
  - resource "github_team_membership" "this" {
      - etag     = "W/\"f44b44c9afe2cab621b35c8ba6f922190c003936f1eb5c829d6914cad2db992b\"" -> null
      - id       = "7243478:davidd8" -> null
      - role     = "maintainer" -> null
      - team_id  = "7243478" -> null
      - username = "davidd8" -> null
    }

  # github_team_membership.this["boost:ischasny"] will be destroyed
  # (because key ["boost:ischasny"] is not in for_each map)
  - resource "github_team_membership" "this" {
      - etag     = "W/\"4b506fde097ca21f729e173d5202c8652201e1a6a779dab24e5778a06988aff8\"" -> null
      - id       = "7243478:ischasny" -> null
      - role     = "maintainer" -> null
      - team_id  = "7243478" -> null
      - username = "ischasny" -> null
    }

  # github_team_membership.this["boost:lexluthr"] will be destroyed
  # (because key ["boost:lexluthr"] is not in for_each map)
  - resource "github_team_membership" "this" {
      - etag     = "W/\"effc6462964d837d1bedf298b86ac2e02e52d080505e23f10415946a0b5b2ecc\"" -> null
      - id       = "7243478:LexLuthr" -> null
      - role     = "maintainer" -> null
      - team_id  = "7243478" -> null
      - username = "LexLuthr" -> null
    }

  # github_team_membership.this["boost:magik6k"] will be destroyed
  # (because key ["boost:magik6k"] is not in for_each map)
  - resource "github_team_membership" "this" {
      - etag     = "W/\"9d169d0f6c478d736cd09b1234986ae0519fdeb130717b6769078546e4d4e1fc\"" -> null
      - id       = "7243478:magik6k" -> null
      - role     = "maintainer" -> null
      - team_id  = "7243478" -> null
      - username = "magik6k" -> null
    }

  # github_team_membership.this["boost:nonsense"] will be destroyed
  # (because key ["boost:nonsense"] is not in for_each map)
  - resource "github_team_membership" "this" {
      - etag     = "W/\"09c3de26e9ba1f4c2be6185c2de101766eb59d8168f648ef41718a10473a0263\"" -> null
      - id       = "7243478:nonsense" -> null
      - role     = "maintainer" -> null
      - team_id  = "7243478" -> null
      - username = "nonsense" -> null
    }

  # github_team_membership.this["boost:reiers"] will be destroyed
  # (because key ["boost:reiers"] is not in for_each map)
  - resource "github_team_membership" "this" {
      - etag     = "W/\"1481eef376163f4ab560f30a4b224e570c92455b89a4be0c3fa935098e74f787\"" -> null
      - id       = "7243478:Reiers" -> null
      - role     = "member" -> null
      - team_id  = "7243478" -> null
      - username = "Reiers" -> null
    }

  # github_team_membership.this["boost:snadrus"] will be destroyed
  # (because key ["boost:snadrus"] is not in for_each map)
  - resource "github_team_membership" "this" {
      - etag     = "W/\"53ba808c1d7a8be1b993c2160189fd916b468b6efc0d14b8ee722e875965d7b6\"" -> null
      - id       = "7243478:snadrus" -> null
      - role     = "member" -> null
      - team_id  = "7243478" -> null
      - username = "snadrus" -> null
    }

  # github_team_repository.this["boost-maintainers:boost"] will be created
  + resource "github_team_repository" "this" {
      + etag       = (known after apply)
      + id         = (known after apply)
      + permission = "maintain"
      + repository = "boost"
      + team_id    = (known after apply)
    }

  # github_team_repository.this["boost-maintainers:boost-docs"] will be created
  + resource "github_team_repository" "this" {
      + etag       = (known after apply)
      + id         = (known after apply)
      + permission = "maintain"
      + repository = "boost-docs"
      + team_id    = (known after apply)
    }

  # github_team_repository.this["boost-maintainers:boost-gfm"] will be created
  + resource "github_team_repository" "this" {
      + etag       = (known after apply)
      + id         = (known after apply)
      + permission = "maintain"
      + repository = "boost-gfm"
      + team_id    = (known after apply)
    }

  # github_team_repository.this["boost-maintainers:boost-graphsync"] will be created
  + resource "github_team_repository" "this" {
      + etag       = (known after apply)
      + id         = (known after apply)
      + permission = "maintain"
      + repository = "boost-graphsync"
      + team_id    = (known after apply)
    }

  # github_team_repository.this["boost:boost"] will be destroyed
  # (because key ["boost:boost"] is not in for_each map)
  - resource "github_team_repository" "this" {
      - etag       = "W/\"dc0736183e494bfd50fcb47a794b85101495eb46891bb7b3d95ba2055457adce\"" -> null
      - id         = "7243478:boost" -> null
      - permission = "push" -> null
      - repository = "boost" -> null
      - team_id    = "7243478" -> null
    }

  # github_team_repository.this["boost:boost-docs"] will be destroyed
  # (because key ["boost:boost-docs"] is not in for_each map)
  - resource "github_team_repository" "this" {
      - etag       = "W/\"de180242ae188275b6ac0b7ba7af393a4f4e7948a08721b2886165ed30228e9e\"" -> null
      - id         = "7243478:boost-docs" -> null
      - permission = "maintain" -> null
      - repository = "boost-docs" -> null
      - team_id    = "7243478" -> null
    }

  # github_team_repository.this["boost:boost-gfm"] will be destroyed
  # (because key ["boost:boost-gfm"] is not in for_each map)
  - resource "github_team_repository" "this" {
      - etag       = "W/\"2a82a7a0c190c06570c5f5e63d9577cacf751fcaf6cd70926f90a09aedd27dc4\"" -> null
      - id         = "7243478:boost-gfm" -> null
      - permission = "maintain" -> null
      - repository = "boost-gfm" -> null
      - team_id    = "7243478" -> null
    }

  # github_team_repository.this["boost:boost-graphsync"] will be destroyed
  # (because key ["boost:boost-graphsync"] is not in for_each map)
  - resource "github_team_repository" "this" {
      - etag       = "W/\"a6b92ac5a038940200f130ac5f04f3e94827474404f67af36e4cb13cb136d331\"" -> null
      - id         = "7243478:boost-graphsync" -> null
      - permission = "maintain" -> null
      - repository = "boost-graphsync" -> null
      - team_id    = "7243478" -> null
    }

  # github_team_repository.this["boost:filecoin-docs"] will be destroyed
  # (because key ["boost:filecoin-docs"] is not in for_each map)
  - resource "github_team_repository" "this" {
      - etag       = "W/\"3f13302062dc119ec4f43467ab41b99455eadd4c97df624c53293c5d60ba6378\"" -> null
      - id         = "7243478:filecoin-docs" -> null
      - permission = "push" -> null
      - repository = "filecoin-docs" -> null
      - team_id    = "7243478" -> null
    }

  # github_team_repository.this["boost:lid-benchmarks"] will be destroyed
  # (because key ["boost:lid-benchmarks"] is not in for_each map)
  - resource "github_team_repository" "this" {
      - etag       = "W/\"fe3cf6c0aab458dd6386e5ba2ca3df01d5d11f9451a8957ac458d093182b5580\"" -> null
      - id         = "7243478:lid-benchmarks" -> null
      - permission = "maintain" -> null
      - repository = "lid-benchmarks" -> null
      - team_id    = "7243478" -> null
    }

Plan: 13 to add, 0 to change, 33 to destroy.

[rvagg]

👍