Define process for managing access to essential resources of the project

[nashif]

Define a process for managing access with elevated permission levels to essential resources of the project (Github, CI, communication platforms, websites, etc.):

• Define requirements for having access
• Define requirements for maintaining access
• Define when access should be revoked
• Define backup plans

[mbolivar-nordic]

Process WG minutes:

• @nashif: urgent and was discussed at TSC. E.g. @galak was listed as a GH owner and is currently on sabbatical. We need a checklist for what happens when someone leaves.
• @dleach02 : perhaps a periodic meeting to review ACLs in addition to checklists, along with documentation of what the infrastructure is
• @nashif : backup plans: if something happens to me, I may be a single point of failure in some areas now that Kumar is gone.

[nashif]

https://docs.google.com/presentation/d/1bAYpAzNzeABCijZUhdGcqlOVoYsgSasVS1xkDLOPnsE/edit?usp=sharing with some toughts

[mbolivar-nordic]

Process WG:

• @mbolivar-nordic : agree with the areas requiring access; what about making escrow for LF explicit for each?
• @nashif : we have that for github, AWS, and Discord. Agree we need to do that across the board
• @dleach02 : let's document that as a general guideline where possible. An example where it's problematic right now is the license for maxwell pro is retained by NXP, but the PR was paid for by the LF
• @nashif : will work with Brett to list initial resources and who has access. Also working on hiring someone to own the infrastructure; hopefully they can take over.

[mbolivar-nordic]

Process WG:

• no updates for this week; @nashif will bring a proposal here before taking it to the TSC

[mbolivar-nordic]

Process WG:

• put on hold pending hiring dev ops engineer at LF; per @nashif, current interviewee decision expected by EOM

[mbolivar-nordic]

Process WG: reactivated the issue, reassigned given @stephanosio is hired now

[stephanosio]

I will join the Process meeting next week to discuss this.

[mbolivar-nordic]

@stephanosio thanks! Before then, can you and @nashif try to find some time to put the framework in place, so we have something to review and discuss at the WG?