rust-lang / infra-team

Coordination repository for the Rust infra team
https://www.rust-lang.org/governance/teams/infra
Apache License 2.0
20 stars 10 forks source link

Create deploy key for crates.io #98

Open jdno opened 10 months ago

jdno commented 10 months ago

@Turbo87 reported the following in Zulip:

https://github.com/rust-lang/crates.io/pull/7648 implemented support for automatic snapshot archival after git index squashing. I just tried it out, but unfortunately it failed with:

Permission to rust-lang/crates.io-index-archive.git denied to deploy key

Can we extend the permissions of the SSH key to the archive repository? Alternatively, can you give me a deploy key for the archive repo?

A brief investigation revealed that we need to create a new deploy key so that crates.io can access the repositoy.

MarcoIeni commented 1 week ago

is this still relevant or can we close this issue? 🤔

Turbo87 commented 1 week ago

yes, it's still relevant, though AFAIU @pietroalbini feels strongly that this should be implemented with GitHub apps instead. I'm personally not convinced yet whether it's worth the complexity though.

jdno commented 1 week ago

Personally, Id' be fine unblocking this in the short-term by creating a deploy key and then adding a new issue to the backlog to review all deploy keys in the organization and see how we can move them to private GitHub Apps.