Reduce org owners/admins

github/ipfs.yml

@@ -1,22 +1,19 @@
 # yaml-language-server: $schema=.schema.json
 
 members:
+  # Admin permissions map to "org owner" permissions listed in 
+  # https://docs.github.com/en/organizations/managing-peoples-access-to-your-organization-with-roles/roles-in-an-organization#permissions-for-organization-rolesare 
+  # These permissions are very broad, and thus, the list of people is intentionally minimal. 
+  # Permissions are distributed across 3-4 separate organizations.
+  # One can request additional permissions for specific repos using ipld/github-mgmt.
   admin:
     - andyschwab-admin
     - aschmahmann
     - autonome
-    - BigLep
-    - cwaring
-    - daviddias
     - galargh
-    - hsanjuan
-    - jbenet
     - lidel
-    - momack2
-    - olizilla
     - Stebalien
     - vesahc
-    - whyrusleeping
   member:
     - 1015bit
     - 2color
@@ -50,6 +47,7 @@ members:
     - avras
     - b5
     - balupton
+    - BigLep
     - bigs
     - bjoyce3
     - blackforestboi
@@ -64,13 +62,15 @@ members:
     - codynhat
     - coryschwartz
     - cpacia
+    - cwaring
     - cyborgshead
     - daijiale
     - damedoteth
     - dankelleher
     - darkdh
     - darobin
     - davidar
+    - daviddias
     - dborzov
     - dchoi27
     - deltazxm
@@ -113,6 +113,7 @@ members:
     - harlantwood
     - hinshun
     - hosh
+    - hsanjuan
     - hugomrdias
     - ianamunoz
     - iand
@@ -122,6 +123,7 @@ members:
     - jacobheun
     - jamiejn
     - janjanovna
+    - jbenet
     - jbenetsafer
     - jdelgadopin
     - jesseclay
@@ -169,6 +171,7 @@ members:
     - mishmosh
     - miyazono
     - moeghashim
+    - momack2
     - moul
     - Mr0grog
     - neogeweb3
@@ -180,6 +183,7 @@ members:
     - NukeManDan
     - nunofmn
     - obo20
+    - olizilla
     - parkan
     - pepoospina
     - petar
@@ -230,6 +234,7 @@ members:
     - wemeetagain
     - whereswaldon
     - whizzzkid
+    - whyrusleeping
     - willscott
     - Wondertan
     - yangwao
@@ -8201,7 +8206,6 @@ repositories:
     files:
       .github/workflows/stale.yml:
         content: .github/workflows/stale.yml
-        overwrite_on_create: true
     has_discussions: false
     merge_commit_message: PR_TITLE
     merge_commit_title: MERGE_MESSAGE
@@ -8943,16 +8947,18 @@ teams:
     #  using a team instead of direct collaborators because we want to reference it in the CODEOWNERS file
     description: Users that are effectively org admins
     members:
-      # WARN: membership here should be treated exactly as cautiously as having an org admin role
+      # WARN: membership here should be treated as cautiously as having an "org owner" role,
+      # since one can escalate their privileges accordingly.
       # ATTN: members are expected to:
       #  - be familiar with GitHub Management
       #  - be ready to triage/review org configuration change request in github-mgmt
-      maintainer:
-        - aschmahmann
-        - BigLep
-        - lidel
+      # Intentionally don't have any "maintainers" so that additional membership is done through github-mgmt rather than the GitHub UI.
+      # That said, since most of these people are also "org owners" ("members.admin" above), 
+      # they can still make changes in the UI.
       member:
         - achingbrain
+        - aschmahmann
+        - lidel
         - willscott
     privacy: closed
   Go Core Team: