From 2198885b00a55f9d484e3d2129e1343e9cd814e6 Mon Sep 17 00:00:00 2001
From: Clark Boylan <clark.boylan@gmail.com>
Date: Tue, 17 Jan 2023 09:21:38 -0800
Subject: [PATCH] Set allow-other-connections: false on post-review pipeline

This will ensure that all changes enqueued to the pipeline (including
those set as depends-on) have the required gerrit votes.

Change-Id: I7a655e11f2004de9e7e4a9bef6215fabc1fb66e0
---
 zuul.d/pipelines.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/zuul.d/pipelines.yaml b/zuul.d/pipelines.yaml
index 04f2361388..9e9b16cf01 100644
--- a/zuul.d/pipelines.yaml
+++ b/zuul.d/pipelines.yaml
@@ -124,6 +124,10 @@
         - event: comment-added
           approval:
             - Allow-Post-Review: [1]
+    # Require all changes enqueued to this pipeline originate from Gerrit
+    # including those used as depends on. This ensures the requirement defined
+    # above is always set.
+    allow-other-connections: false
 
 - pipeline:
     name: post