From e5ed2d152a7c12633fa5baefee05a5568a6f5fb1 Mon Sep 17 00:00:00 2001 From: Yuriy Andamasov Date: Sun, 31 May 2026 00:58:23 +0300 Subject: T8943: feat(mirror-rollout-2): adopt uniform wrapper stub (#35) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Per Mirror Pipeline Redesign Rollout 2: standardize the wrapper to the canonical stub. Inclusion + kill-switch logic moves into the central workflow + consumers.yaml; this wrapper is now a thin pass-through. Changes from post-1b wrapper: - branches: [rolling] -> [rolling, production] (heterogeneous fleet) - permissions: contents:write/pull-requests:write/issues:write -> contents:read (no side effects in wrapper; central workflow holds write perms via App tokens — see vyos/.github canonical stub permissions fix vyos/.github#133) - Remove 'vars.MIRROR_ENABLED != false' gate from wrapper if: clause (kill-switch enforced in central workflow's check-consumer-inclusion + per-side-effect re-checks) Spec: /Users/syncer/.claude/specs/2026-05-16-mirror-pipeline-redesign-design.md §4.2.3 Permissions fix spec: /Users/syncer/.claude/specs/2026-05-30-canonical-stub-permissions-fix-design.md Plan: /Users/syncer/.claude/plans/2026-05-17-mirror-pipeline-rollout-2-inclusion-mechanism.md Task 6 Permissions fix plan: /Users/syncer/.claude/plans/2026-05-30-canonical-stub-permissions-fix.md 🤖 Generated by [robots](https://vyos.io) --- .github/workflows/pr-mirror-repo-sync.yml | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) (limited to '.github') diff --git a/.github/workflows/pr-mirror-repo-sync.yml b/.github/workflows/pr-mirror-repo-sync.yml index 5320e01..0f16633 100644 --- a/.github/workflows/pr-mirror-repo-sync.yml +++ b/.github/workflows/pr-mirror-repo-sync.yml @@ -6,7 +6,7 @@ name: PR Mirror and Repo Sync on: pull_request_target: types: [closed] - branches: [rolling] + branches: [rolling, production] workflow_dispatch: inputs: sync_branch: @@ -14,16 +14,13 @@ on: type: string permissions: - contents: write - pull-requests: write - issues: write + contents: read jobs: call: if: | github.repository_owner == 'vyos' && (github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch') - && vars.MIRROR_ENABLED != 'false' uses: vyos/.github/.github/workflows/pr-mirror-repo-sync.yml@production with: sync_branch: ${{ inputs.sync_branch || github.event.pull_request.base.ref }} -- cgit v1.2.3