x/website/internal/dl: store the list of validUsers in a more dynamic way

[julieqiu]

The list of validUsers is hardcoded at https://github.com/golang/tools/blob/master/godoc/dl/dl.go#L317. This means that every time someone is doing a release for a first time, we need to make a CL to add them to this list (so that they can run the release command) and redeploy golang.org.

We may want to store this list in a more dynamic way.

[julieqiu]

/cc @bradfitz

[bradfitz]

we need to make a CL to add them to this list (so that they can run the release command) and redeploy golang.org

And cherry-pick it to the release branch, IIRC? /cc @dmitshur

Potential places to store this info:

• GCE metadata
• GCS text/json file
• ... ?

I think GCE metadata is my vote.

[bradfitz]

Or we don't use the gomote-style user authentication and instead use OAuth2-authenticated requests and then check some IAM permission.

/cc @FiloSottile

[dmitshur]

And cherry-pick it to the release branch, IIRC? /cc @dmitshur

Yes, and then deploy golang.org. This becomes simpler after #29206 is done.