Try fine grained access tokens for release cut

[mbianchidev]

Basically we need to remove this warning from the docs:

NOTE / TODO: Look into using fine grained tokens: https://stackoverflow.com/questions/78216547/minimum-permissions-for-a-github-access-token-to-clone-push-and-pull-from-repo. Doing the bare minimum seemed to not work.

And put in place the correct process to use fine grained access token instead of a classic PAT during the execution of a kpromo command, which behind the scenes opens a PR to kubernetes/k8s.io

Should be pretty straightforward to try and document.

EDIT: blocked by github/roadmap#600

/kind documentation
/priority important-longterm
/assign @mbianchidev

[k8s-ci-robot]

@mbianchidev: The label(s) priority/important-lonterm cannot be applied, because the repository doesn't have them.

In response to this:

Basically we need to remove this warning

NOTE / TODO: Look into using fine grained tokens: https://stackoverflow.com/questions/78216547/minimum-permissions-for-a-github-access-token-to-clone-push-and-pull-from-repo. Doing the bare minimum seemed to not work.

from the docs and substitute it with the correct process to use fine grained access token instead of a classic PAT. Should be pretty straightforward to try and document.

(note to @mbianchidev see how you configured your second brain instance)

/kind documentation
/priority important-lonterm
/assign @mbianchidev

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[mbianchidev]

/priority important-longterm

[mbianchidev]

A lot of trials but getting

FATA creating the pull request in k/k8s.io: POST https://api.github.com/repos/kubernetes/k8s.io/pulls: 403 Resource not accessible by personal access token []

Will investigate internally about why we cannot create the PR even if I gave RW to that specific permission (for all repos)
Same problem if we only enable the fine grained for public repos, doesn't really change much.

[mbianchidev]

Fine grained access token can only access public repos read only (why?)

[mbianchidev]

It's on the roadmap: github/roadmap#600

Should be out by end of 2025 according to the public roadmap GH project!