I stumbled across this problem today while having to make some changes to the Apache configuration of wikitech-static.

I know this host doesn't get a lot of love but it looks like things have been lingering in a state divergent from the git repo for multiple years now?

For now I'm going to proceed with making my changes without worrying about the git repo, yet, as they're in non-overlapping files and I don't have nearly enough state to untangle things.

@Reedy or @Andrew do you think you will have any time to tend to this soon?

In T292347#7719384, @CDanis wrote:

@Reedy or @Andrew do you think you will have any time to tend to this soon?

I can, but I can't merge any changes into that repo...

@Reedy, what Gerrit group can I add that will include you? Is there one for the security team?

In T292347#7721327, @Andrew wrote:

@Reedy, what Gerrit group can I add that will include you? Is there one for the security team?

There is, in theory wikimedia-security, but that's setup for the wikimedia/security repo tree.

I'm the only one in Security with access to wikitech-static, but IIRC, I'm not the only person that (at least historically) had access to the host that wasn't in ldap/ops (Krenair had access at one point? Not sure if he still does).

Seems like it might be worth adding a gerrit group specifically for this.. And then add group also as an owner to the repo in https://gerrit.wikimedia.org/r/admin/repos/operations/wikitech-static,access ?

Feels a bit cleaner for audit trail purposes

Reedy, I think I've done the needful here in Gerrit, but please check my work:
https://gerrit.wikimedia.org/r/admin/groups/2022,members
https://gerrit.wikimedia.org/r/admin/repos/operations/wikitech-static,access