Skip to content

inc_someip_gateway: add qnx license access#141

Open
NEOatNHNG wants to merge 2 commits intoeclipse-score:mainfrom
etas-contrib:workflow-approval-for-someip-gateway
Open

inc_someip_gateway: add qnx license access#141
NEOatNHNG wants to merge 2 commits intoeclipse-score:mainfrom
etas-contrib:workflow-approval-for-someip-gateway

Conversation

@NEOatNHNG
Copy link

@NEOatNHNG NEOatNHNG commented Feb 17, 2026

  • sorted "selected_repositories"
  • added inc_someip_gateway to access qnx license
  • add workflow-approval environment to inc_someip_gateway to force a prior approval so that secret access works reliably.

@NEOatNHNG NEOatNHNG requested a review from a team as a code owner February 17, 2026 15:58
@eclipse-otterdog
Copy link
Contributor

Thank you for raising a pull request to update the configuration of your GitHub organization.
You can manually add reviewers to this PR to eventually enable auto-merging.

The following conditions need to be fulfilled for auto-merging to be available:

  • valid configuration
  • approved by a project lead
  • does not require any secrets
  • does not update settings only accessible via the GitHub Web UI
  • does not remove any resource
Otterdog commands and options

You can trigger otterdog actions by commenting on this PR:

  • /otterdog team-info checks the team / org membership for the PR author
  • /otterdog validate validates the configuration change
  • /otterdog validate info validates the configuration change, printing also validation infos
  • /otterdog check-sync checks if the base ref is in sync with live settings
  • /otterdog merge merges and applies the changes if the PR is eligible for auto-merging (only accessible for the author)
  • /otterdog done notifies the self-service bot that a required manual apply operation has been performed (only accessible for members of the admin team)
  • /otterdog apply re-apply a previously failed attempt (only accessible for members of the admin team)

@eclipse-otterdog
Copy link
Contributor

The author (NEOatNHNG) of this PR is associated with this organization in the role of MEMBER.

Additionally, NEOatNHNG is a member of the following teams:

@eclipse-otterdog

This comment has been minimized.

@eclipse-otterdog

This comment has been minimized.

@anmittag
Copy link
Member

all good from my side, the complete file shall be refactored and "makros" shall be used for generating repositories, so that all have the same look and feel

Copy link
Member

@anmittag anmittag left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fine from my side

Some workflows fail to access secrets if there was no prior
approval. This environment forces a prior approval.

Co-authored-by: Mikaël Barbero <mikael.barbero@eclipse-foundation.org>

Signed-off-by: Michael Tänzer <michael.taenzer@etas.com>
@NEOatNHNG NEOatNHNG force-pushed the workflow-approval-for-someip-gateway branch from a828d03 to 78b0b21 Compare February 19, 2026 10:26
@eclipse-otterdog

This comment has been minimized.

@eclipse-otterdog

This comment has been minimized.

@eclipse-otterdog
Copy link
Contributor

Please find below the validation of the requested configuration changes:

Diff for 1c8fa2c
Project automotive.score[github_id=eclipse-score]
  there have been 33 validation infos, enable verbose output to display them.

  
!   org_secret[name="SCORE_QNX_LICENSE"] {
!     selected_repositories = [
+      "inc_someip_gateway"
!     ]
!   }

  
!   org_secret[name="SCORE_QNX_PASSWORD"] {
!     selected_repositories = [
+      "inc_someip_gateway"
!     ]
!   }

  
!   org_secret[name="SCORE_QNX_USER"] {
!     selected_repositories = [
+      "inc_someip_gateway"
!     ]
!   }

+  add environment[name="workflow-approval", repository=inc_someip_gateway] {
+    deployment_branch_policy = "all"
+    name                     = "workflow-approval"
+    reviewers                = [
+      "@eclipse-score/automotive-score-committers"
+    ],
+    wait_timer               = 1
+  }
  
  Plan: 1 to add, 3 to change, 0 to delete.

Warnings

  • some of requested changes require secrets, need to apply these changes manually

cc @eclipse-score/eclipsefdn-security

cc @eclipse-score/eclipsefdn-releng

@eclipse-otterdog
Copy link
Contributor

Note

The current configuration is out-of-sync with the live settings:

Diff to live settings
Project automotive.score[github_id=eclipse-score]
  there have been 33 validation infos, enable verbose output to display them.

  
!   repository[name="baselibs"] {
!     code_scanning_default_setup_enabled = true -> false
!   }

-  remove environment[name="workflow-approval", repository=orchestrator] {
-    deployment_branch_policy = "all"
-    name                     = "workflow-approval"
-    reviewers                = []
-    wait_timer               = 0
-  }

  
!   repository[name="testing_tools"] {
!     code_scanning_default_languages = [
-      "actions"
!     ]
!   }

-  remove environment[name="workflow-approval", repository=lifecycle] {
-    deployment_branch_policy = "all"
-    name                     = "workflow-approval"
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="workflow-approval", repository=logging] {
-    deployment_branch_policy = "all"
-    name                     = "workflow-approval"
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="workflow-approval", repository=inc_someip_gateway] {
-    deployment_branch_policy = "all"
-    name                     = "workflow-approval"
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="workflow-approval", repository=kyron] {
-    deployment_branch_policy = "all"
-    name                     = "workflow-approval"
-    reviewers                = []
-    wait_timer               = 0
-  }
  
  Plan: 0 to add, 2 to change, 5 to delete.

@NEOatNHNG NEOatNHNG changed the title Add environment for workflows that need approval inc_someip_gateway: add qnx license access Feb 23, 2026
@AlexanderLanin
Copy link
Member

AlexanderLanin commented Feb 23, 2026

@eclipse-score/eclipsefdn-security can you merge this please?

Copy link
Contributor

@FScholPer FScholPer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@eclipse-score/eclipsefdn-security can you merge please?!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants