Team Management Automation Enhancement: Add team linter workflow and linter script

.github/workflows/team-lint.yaml

@@ -0,0 +1,24 @@
+name: Team Linter
+on:
+
+  # manual trigger
+  workflow_dispatch:
+
+  # on pull request involving the ladder/teams directory
+  pull_request:
+    paths: 'ladder/teams/**'
+
+jobs:
+  team-management-linter:
+    if: github.repository == 'cilium/community'
+    name: Team Management Linter Workflow
+    runs-on: ubuntu-latest
+    environment: team-management  
+    steps:
+      # Checkout repo with full config
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      # Lint team membership files for org members
+      - name: check team membership for org membership
+        run: tools/lint_members.sh ladder/teams cilium
+        env:
+          GITHUB_TOKEN: ${{ secrets.TM_ORG_READ_TOKEN }}

tools/lint_members.sh

@@ -0,0 +1,78 @@
+#!/usr/bin/env bash
+# Copyright Authors of Cilium
+# SPDX-License-Identifier: Apache-2.0
+
+##
+# This script is used to lint team membership
+# file based on a directory of yaml files of the 
+# form team-name.yaml
+# This tool is used as part of team-management automation
+##
+
+set -eu
+set -o pipefail
+
+# $1 - teams directory
+# $2 - org name
+if [ $# -ne 2 ]; then
+  echo "Usage: $0 <TEAMS_DIRECTORY> <GITHUB_ORG>"
+  echo "Organization read token in envvar GITHUB_TOKEN"
+  exit 1
+fi
+
+>&2 echo "> Linting $2 teams from $1/*.yaml"
+CDIR=`pwd`
+cd "$1"
+
+logins=( `curl -L \
+  -H "Accept: application/vnd.github+json" \
+  -H "Authorization: Bearer $GITHUB_TOKEN" \
+  -H "X-GitHub-Api-Version: 2022-11-28" \
+  https://api.github.com/orgs/$2/members | jq -r '.[].login'` )
+>&2 echo "Org Members:"
+for login in "${logins[@]}"; do
+  >&2 echo "$login"
+done
+>&2 echo ""
+
+status=0
+for file in *.yaml; do
+     >&2 echo -e "\n>> Linting members/mentors from $file"
+     f="${file%.*}"
+     cd "$CDIR"; cd "$1"
+     members=`yq -o t '.members' $file`
+     for member in $members; do
+       #>&2 echo "checking team member: $member"
+       found=0
+       for login in "${logins[@]}"; do
+         if [ "$login" == "$member" ] ; then
+           found=1
+         fi
+       done
+       if [ $found -eq 0 ] ; then
+         >&2 echo "Team $f Member: $member not found in Org: $2" 
+         status=1
+       fi
+     done
+
+     mentors=`yq -o t '.mentors' $file`
+     for mentor in $mentors; do
+       #>&2 echo "checking team mentor: $mentor"
+       found=0
+       for login in "${logins[@]}"; do
+         if [ "$login" == "$mentor" ] ; then
+           found=1
+         fi
+       done
+       if [ $found -eq 0 ] ; then
+         >&2 echo "Team $f Mentor: $mentor not found in Org: $2" 
+         status=1
+       fi
+     done
+done
+if [ $status -eq 1 ] ; then
+  >&2 echo -e "\n> At least one team member or mentor missing from org $2: exiting"
+  exit 1 
+fi
+
+