diff options
| author | Yuriy Andamasov <yuriy@vyos.io> | 2026-05-31 00:58:23 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-05-31 00:58:23 +0300 |
| commit | e5ed2d152a7c12633fa5baefee05a5568a6f5fb1 (patch) | |
| tree | be9dc6cba89cbe3f78a91492a4a8d6633ad642cb | |
| parent | 600903ffd8c8eddc28b86b7822797330c5730559 (diff) | |
| download | ipaddrcheck-e5ed2d152a7c12633fa5baefee05a5568a6f5fb1.tar.gz ipaddrcheck-e5ed2d152a7c12633fa5baefee05a5568a6f5fb1.zip | |
T8943: feat(mirror-rollout-2): adopt uniform wrapper stub (#35)
Per Mirror Pipeline Redesign Rollout 2: standardize the wrapper to the
canonical stub. Inclusion + kill-switch logic moves into the central
workflow + consumers.yaml; this wrapper is now a thin pass-through.
Changes from post-1b wrapper:
- branches: [rolling] -> [rolling, production] (heterogeneous fleet)
- permissions: contents:write/pull-requests:write/issues:write ->
contents:read (no side effects in wrapper; central workflow holds
write perms via App tokens — see vyos/.github canonical stub
permissions fix vyos/.github#133)
- Remove 'vars.MIRROR_ENABLED != false' gate from wrapper if: clause
(kill-switch enforced in central workflow's check-consumer-inclusion
+ per-side-effect re-checks)
Spec: /Users/syncer/.claude/specs/2026-05-16-mirror-pipeline-redesign-design.md §4.2.3
Permissions fix spec: /Users/syncer/.claude/specs/2026-05-30-canonical-stub-permissions-fix-design.md
Plan: /Users/syncer/.claude/plans/2026-05-17-mirror-pipeline-rollout-2-inclusion-mechanism.md Task 6
Permissions fix plan: /Users/syncer/.claude/plans/2026-05-30-canonical-stub-permissions-fix.md
🤖 Generated by [robots](https://vyos.io)
| -rw-r--r-- | .github/workflows/pr-mirror-repo-sync.yml | 7 |
1 files changed, 2 insertions, 5 deletions
diff --git a/.github/workflows/pr-mirror-repo-sync.yml b/.github/workflows/pr-mirror-repo-sync.yml index 5320e01..0f16633 100644 --- a/.github/workflows/pr-mirror-repo-sync.yml +++ b/.github/workflows/pr-mirror-repo-sync.yml @@ -6,7 +6,7 @@ name: PR Mirror and Repo Sync on: pull_request_target: types: [closed] - branches: [rolling] + branches: [rolling, production] workflow_dispatch: inputs: sync_branch: @@ -14,16 +14,13 @@ on: type: string permissions: - contents: write - pull-requests: write - issues: write + contents: read jobs: call: if: | github.repository_owner == 'vyos' && (github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch') - && vars.MIRROR_ENABLED != 'false' uses: vyos/.github/.github/workflows/pr-mirror-repo-sync.yml@production with: sync_branch: ${{ inputs.sync_branch || github.event.pull_request.base.ref }} |