Set protected for propose-updates job
Only jobs in project-config should only access these jobs.
description: |
Sync content to other projects as a proposed change.
run: playbooks/proposal/propose-updates.yaml
+ protected: true
secrets:
- secret: proposal_ssh_key
name: ssh_key
Update constraint files for requirements project with a
proposed change.
run: playbooks/proposal/propose-update-constraints.yaml
+ protected: true
dependencies:
- release-openstack-python
description: |
Update project-config files with a proposed change.
run: playbooks/proposal/propose-project-config-update.yaml
+ protected: true
- job:
name: build-wheel-mirror-base
- playbooks/translation/post.yaml
- playbooks/publish/openstack-artifacts.yaml
semaphore: translations
+ protected: true
vars:
fileserver_leading_path: translation-source
constraints_file: '{{ ansible_user_dir }}/src/opendev.org/openstack/requirements/upper-constraints.txt'
vars:
constraints_file: '{{ ansible_user_dir }}/src/opendev.org/openstack/requirements/upper-constraints.txt'
semaphore: translations
+ protected: true
required-projects:
- openstack/requirements
# Zanata-cli needs Java 8 and will fail with newer Java, Bionic uses Java 11
