Research and document password management for community groups

[parispittman]

need a doc that describes the process and what platforms need to have credentials shared

example: zoom admins need to share the main account info

[justaugustus]

Interested in this as well for SIG Release assets.
I think @idvoretskyi mentioned CNCF has 1password?
/sig release

[idvoretskyi]

@justaugustus LastPass.

It could be requested via the CNCF ServiceDesk (see https://github.com/cncf/servicedesk/blob/master/README.md#how-do-i-file-a-ticket-with-the-service-desk).

[justaugustus]

Gotcha. Thanks Ihor!

[fejta-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

[mrbobbytables]

/remove-lifecycle stale

[idvoretskyi]

/assign

I'm going to document this CNCF-wide during the next few weeks, which will be applicable for Kubernetes (obviously) as well.

[idvoretskyi]

CNCF suggests using Keybase for credentials sharing - https://github.com/cncf/servicedesk/#how-do-i-share-credentials-passwords-or-other-confidential-information.

[fejta-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

[fejta-bot]

Stale issues rot after 30d of inactivity.
Mark the issue as fresh with /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle rotten

[nikhita]

/remove-lifecycle rotten

[fejta-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

[markjacksonfishing]

/remove-lifecycle stale

[mrbobbytables]

/lifecycle frozen
Still a good idea, just no bandwidth for it.

[ameukam]

@mrbobbytables Should we open a PR on https://github.com/1Password/1password-teams-open-source for an open source plan or do we need to use a Business Trial Plan for 1password evaluation ?

[mrbobbytables]

@ameukam open source plan :)

EDIT: To follow up. There are a few other nuances with it that need to be sorted out. Will update this thread with more information.

[jberkus]

I'll endorse both 1Password (not OSS, but free to us) and Bitwarden (OSS) for PW-keeping from a user perspective. Both work well.

[coderanger]

-1 for Bitwarden unless we have enough people on the infra team that actually know MSSQL and/or we confirm that it works with a hosted version of MSSQL that we can pay for or get donated. I don't think we want to bite off running that ourselves unless we have more expertise in it than I would expect.

[jberkus]

@coderanger I was suggesting paying for their hosted version.

[ameukam]

FYI : 1Password/for-open-source#359

[Debanitrkl]

/area community-management