openstack/project-config
Code Issues Proposed changes

Limit what volvocars loads from opendev/base-jobs

Browse Source 
On changes like https://review.opendev.org/c/opendev/base-jobs/+/922653
the volvocars tenant is running jobs for the base-jobs repo because that
tenant is loading the project definition for base-jobs. We really only
want the opendev tenant to be running those jobs so we limit what we
include in the volvocars tenant to jobs, secrets, and nodesets. This
matches what we've done in other tenants like zuul and pyca.

While we are in there we update the comment associated with this config
in other tenants to make it a bit more accurate.

Change-Id: Iea24607def728bfd170a6f43da2eb4960d0c89e4
This commit is contained in:
Clark Boylan 2024-07-24 07:19:11 -07:00
parent f2992b8011
commit b1c38acfe9
1 changed files with 20 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
zuul/main.yaml
View File

@ -99,8 +99,9 @@
gerrit:
config-projects:
- openstack/project-config
# Only use jobs and secrets from this repo, we do not want
# the project definition.
# Include the minimal amount of configuration from this repo. In
# particular we don't want to include the project defs which cause
# jobs to run for this repo in this tenant.
- opendev/base-jobs:
shadow: openstack/project-config
include:
@ -1528,8 +1529,9 @@
gerrit:
config-projects:
- zuul/project-config
# Only use jobs and secrets from this repo, we do not want
# the project definition.
# Include the minimal amount of configuration from this repo. In
# particular we don't want to include the project defs which cause
# jobs to run for this repo in this tenant.
- opendev/base-jobs:
include:
- job
@ -1604,8 +1606,9 @@
gerrit:
config-projects:
- pyca/project-config
# Only use jobs and secrets from this repo, we do not want
# the project definition.
# Include the minimal amount of configuration from this repo. In
# particular we don't want to include the project defs which cause
# jobs to run for this repo in this tenant.
- opendev/base-jobs:
include:
- job
@ -1631,8 +1634,9 @@
gerrit:
config-projects:
- pypa/project-config
# Only use jobs and secrets from this repo, we do not want
# the project definition.
# Include the minimal amount of configuration from this repo. In
# particular we don't want to include the project defs which cause
# jobs to run for this repo in this tenant.
- opendev/base-jobs:
include:
- job
@ -1652,7 +1656,14 @@
source:
gerrit:
config-projects:
- opendev/base-jobs
# Include the minimal amount of configuration from this repo. In
# particular we don't want to include the project defs which cause
# jobs to run for this repo in this tenant.
- opendev/base-jobs:
include:
- job
- secret
- nodeset
- volvocars/project-config
untrusted-projects:
- zuul/zuul-jobs