zuul/zuul
Code Issues Proposed changes
Files
ae54f36318754f7baedeb41d0c55adcdc46b9920
zuul/tests/fixtures/config
History
Dong Zhang ae54f36318 Fix wrong secret name in 'sub' claim of OIDC token 
In the current implementation, in the `sub` claim value
`secret:{zuul tenant}/{canonical project name}/{secret name}`
the `{secret name}` is the Ansbile var name defined in
`job.secrets.name` while it should be the `secret.name`.

This change fixes this issue by switch to use `secret.name`.

Change-Id: I9cccc5f14bb0ff17f389c14e89c35fb979ea5c49
2025-06-06 08:21:00 +02:00
..
abstract
Add abstract job attribute
2018-02-12 15:35:54 -08:00
access-rules
Add access-rules configuration and documentation
2022-10-25 20:22:33 -07:00
allowed-projects
Set allowed-projects on untrusted jobs with secrets
2019-01-22 14:01:10 -08:00
allowed-projects-trusted
Allow config projects to override allowed-projects
2019-06-24 09:32:25 -07:00
ambiguous-names
Align enqueue/dequeue events with trigger events
2021-03-27 09:55:26 -07:00
ansible
Implement pre-timeout for pre-run playbooks
2025-04-15 08:43:23 -07:00
ansible-callbacks
Replace Ansible 6 with Ansible 9
2024-02-15 16:20:45 -08:00
ansible-json-string-results
Add unit test for zuul_json text result parsing
2022-04-28 09:57:07 +10:00
ansible-no-log
Fix unreachable nodes detection
2018-09-29 13:13:00 +02:00
ansible-unreachable
Add zuul_unreachable ansible host group
2024-02-27 13:57:07 -08:00
ansible-versions
Deprecate Ansible 8
2024-11-04 13:06:57 -08:00
artifact-return
Handle zuul_return format errors
2024-08-26 14:35:49 -07:00
auth-streamer
Add auth token to websocket
2023-10-24 07:29:55 -07:00
authorization
Add api-root tenant config object
2022-10-25 20:19:39 -07:00
base-jobs
Update test fixtures to use explicit run
2017-10-26 15:59:41 -07:00
branch-deletion
Fix branch deletion after failed reconfig
2018-02-14 14:26:31 -08:00
branch-mismatch
Use override-checkout to select jobs
2018-01-24 13:06:04 -08:00
branch-negative
Add configuration support for negative regex
2023-08-28 15:03:58 -07:00
branch-ref
Codify branch matchers and refs
2021-06-01 17:10:36 -07:00
branch-tag
Don't add implied branch matchers to project-pipeline variants
2018-06-27 10:43:56 -07:00
branch-templates
Combine branch templates and pipeline branch matchers
2017-11-28 14:07:14 -08:00
branch-variants
Update playbook paths with extension
2017-12-05 14:25:07 +11:00
broken
Add --validate-tenants option to zuul scheduler
2021-02-25 10:11:42 +01:00
broken-multi-tenant
Fix loading_errors bug
2020-05-14 14:05:30 -07:00
broken-trusted
Config errors should not affect config-projects
2019-04-15 15:26:15 -07:00
build-page
Always report the build page
2021-07-15 16:45:58 -07:00
central-jobs
Add multi-branch support for project-templates
2017-10-27 13:41:25 -07:00
change-queues
Remove deprecated pipeline queue configuration
2022-09-08 13:32:11 -07:00
circular-dependencies
Cancel jobs of abandoned circular dep. change
2024-04-11 12:26:54 +02:00
cleanup-playbook
Fix retries on unreachable cleanup playbooks
2024-07-16 08:18:45 -07:00
config-project-branch-matcher
Add configure-projects
2024-08-22 07:52:42 -07:00
conflict-config
Require a base job
2017-08-07 14:52:37 -07:00
connection-vars
Block connection related variables
2021-06-24 06:24:23 -07:00
container-build-resources
Fix container job documentation typo
2018-12-19 05:37:22 +00:00
cross-source
Fix getting foreign projects during re-enqueue
2024-07-09 11:51:10 +02:00
cross-source-pagure
Remove deprecated pipeline queue configuration
2022-09-08 13:32:11 -07:00
data-return
Make it possible to configure job retries with zuul_return
2022-03-24 10:07:55 +01:00
dependency-graph
Update test fixtures to use explicit run
2017-10-26 15:59:41 -07:00
disk-accountant
test: Fix test Verified label
2021-01-31 18:43:29 +01:00
duplicate-pipeline
Remove deprecated pipeline queue configuration
2022-09-08 13:32:11 -07:00
dynamic-only-project
Fix config errors on always-dynamic branches
2025-05-12 11:31:26 -07:00
early-failure
Don't pre fail jobs if they will retry
2024-06-28 15:36:01 -07:00
elasticsearch-driver
Elasticsearch: filter zuul data from job returned vars
2022-09-17 23:38:23 +02:00
empty-config
Fix background layout updates in zuul-web
2022-04-13 16:09:36 -07:00
empty-config-file
Handle zuul.yaml files with only comments
2023-03-30 09:39:56 -07:00
event-processing
Fix trigger event forwarding bug
2021-03-23 01:08:11 +00:00
executor-facts
Replace Ansible 6 with Ansible 9
2024-02-15 16:20:45 -08:00
executor-repos
Fix repo state restore for zuul role tag override
2023-11-30 10:06:03 -08:00
fail-fast
Respect fail-fast setting for node failures
2024-09-24 07:13:31 +02:00
final
Update test fixtures to use explicit run
2017-10-26 15:59:41 -07:00
force-merge-template
Fix wedged scheduler on force-merge of non-existing template
2019-02-03 19:06:31 +01:00
gerrit-file-comments
executor: Skip line mapping for special Gerrit files
2022-11-03 07:48:38 -05:00
git-driver
Git driver
2017-12-15 14:32:40 +01:00
github-file-comments
Report max 50 file comments to github
2021-03-15 15:49:24 -07:00
global-repo-state
Fix repo state branches for branch/ref items
2024-06-25 14:37:00 +02:00
global-semaphores
Add global semaphore support
2022-05-31 15:14:34 -07:00
global-semaphores-config
Add global semaphore support
2022-05-31 15:14:34 -07:00
governor
Executor: Don't start too many jobs at once
2018-02-02 11:36:49 -08:00
implicit-project
Add implicit project name matching
2017-12-22 10:09:28 +01:00
implicit-roles
Update test fixtures to use explicit run
2017-10-26 15:59:41 -07:00
in-repo
Update test fixtures to use explicit run
2017-10-26 15:59:41 -07:00
in-repo-dir
extra-config-files/dirs in items of a bundle should be loaded
2023-02-23 16:20:10 +01:00
in-repo-join
Update test fixtures to use explicit run
2017-10-26 15:59:41 -07:00
include-vars
Ensure job projects are only considered once
2025-05-20 15:11:32 +02:00
intermediate
Add intermediate flag for jobs
2020-09-22 20:23:30 +00:00
inventory
Replace Ansible 6 with Ansible 9
2024-02-15 16:20:45 -08:00
job-output
Keep task stdout/stderr separate in result object
2023-08-17 16:22:41 -07:00
job-pause
Fix repo state restore / Keep jobgraphs frozen
2021-04-21 14:53:54 -07:00
job-pause2
Remove auto-add of localhost from unit test inventory
2019-09-12 14:42:09 +10:00
job-pause-priority
Ensure correct lexical sorting of node requests
2019-03-14 15:39:23 +01:00
job-update
Fix issue with job forcing a dependency to run
2025-01-14 14:48:22 -08:00
job-update-broken
Handle existing broken config in job updates
2019-07-12 14:37:17 -07:00
job-update-transitive
Force hard transitive dependencies to run
2025-01-14 14:50:36 -08:00
launcher-min-ready
Add AZ support to AWS driver
2025-03-13 12:02:25 -07:00
line-mapping
Fix evaluation of range file_comments
2020-02-17 10:43:23 +01:00
locked-branches
Refactor unprotected branch tests
2025-04-02 14:27:27 -07:00
merge-modes/git/common-config/playbooks
Merge "Add playbooks for all test jobs" into feature/zuulv3
2017-02-06 16:45:58 +00:00
merges
Update test fixtures to use explicit run
2017-10-26 15:59:41 -07:00
mqtt-driver
Add queue name to MQTT payload
2025-03-27 10:51:21 +01:00
multi-driver
Update test fixtures to use explicit run
2017-10-26 15:59:41 -07:00
multi-github
Fix support for multiple github connection
2021-08-05 22:19:48 +00:00
multi-tenant
Prepare oidc token for playbook execution in executor.
2025-05-14 15:01:49 -07:00
multi-tenant-provider
Fix image build event race and add more image api tests
2025-05-22 15:00:00 -07:00
multi-tenant-semaphore
web: remove SafeLoader left-over from ZuulJSONEncoder
2019-06-05 10:03:54 +00:00
nodesets
Handle nodesets in branches
2018-01-18 13:38:13 -08:00
one-project
Clear branch cache on full reconfiguration
2022-03-14 13:09:38 -07:00
openstack
Remove deprecated pipeline queue configuration
2022-09-08 13:32:11 -07:00
parse-errors
Add parse error test
2021-06-24 06:24:23 -07:00
pass-to-parent
pass-to-parent: Fix passing multiple secrets to parent
2019-05-20 15:33:52 +02:00
playbook-semaphore
Add playbook semaphores
2022-11-07 08:41:10 -08:00
post-playbook
Fix deletion of stale build dirs on startup
2019-11-22 17:06:18 +01:00
pragma
Add pragma directive
2017-10-26 14:28:03 -07:00
pragma-multibranch
Add implied-branches pragma directive
2017-12-13 16:06:34 -08:00
pre-filter
Fix multi-tenant gerrit pre-filters
2024-07-13 16:42:48 -07:00
pre-playbook
Fix deletion of stale build dirs on startup
2019-11-22 17:06:18 +01:00
protected
Detect errors with non-permitted parent jobs
2022-10-26 16:30:50 -07:00
provides-requires-buildset
Handle artifacts on non change types.
2019-05-15 10:45:11 -07:00
provides-requires-pause
Remove deprecated pipeline queue configuration
2022-09-08 13:32:11 -07:00
push-reqs
Update test fixtures to use explicit run
2017-10-26 15:59:41 -07:00
regex-project
Add regex support to project stanzas
2018-04-27 21:35:07 +02:00
remote-action-modules
Remove unused remote module tests
2022-04-13 14:17:04 -07:00
remote-zuul-json
Add role information to task in zuul_json callback
2018-05-08 14:13:35 +02:00
remote-zuul-stream
Add Windows live log streaming
2025-03-31 15:50:18 -07:00
requirements
Honor independent pipeline requirements for non-live changes
2023-01-17 09:37:24 -08:00
return-warnings
Support emitting warnings via zuul_return
2020-08-31 11:54:46 +02:00
role-branches
Check out more appropriate branches of role and playbook repos
2018-04-05 10:41:51 -07:00
roles
Fix deletion of stale build dirs on startup
2019-11-22 17:06:18 +01:00
secret-inheritance
Freeze job variables at start of build
2021-06-24 06:24:23 -07:00
secret-leaks
Remove auto-add of localhost from unit test inventory
2019-09-12 14:42:09 +10:00
secrets
Fix wrong secret name in 'sub' claim of OIDC token
2025-06-06 08:21:00 +02:00
semaphore
Fix repo state restore / Keep jobgraphs frozen
2021-04-21 14:53:54 -07:00
semaphore-branches
Normalize semaphore branch handling
2018-01-18 14:53:15 -08:00
shadow
Update test fixtures to use explicit run
2017-10-26 15:59:41 -07:00
single-tenant
Add zuul-client pause test
2025-05-22 09:37:34 -07:00
split-config
Warn user when dynamic layout ignores zuul config
2020-10-01 13:10:49 +02:00
sql-driver
Remove deprecated pipeline queue configuration
2022-09-08 13:32:11 -07:00
sql-reporter-long-values
sqlreporter: ensure build end data is stored even if log URL is too long
2025-02-20 11:17:20 +01:00
streamer
Handle non default loopvars in Ansible callback stream plugin
2022-07-06 15:59:17 -07:00
superproject
Add configure-projects
2024-08-22 07:52:42 -07:00
templated-project
Use implied branch matcher for implied branches
2021-02-10 11:50:10 -08:00
tenant-implied-branch-matchers
Add implied-branch-matchers to tenant config
2023-03-23 10:04:48 -07:00
tenant-parser
Add configure-projects
2024-08-22 07:52:42 -07:00
timer-two-tenant
Include project name in gerrit branch cache
2021-09-28 17:21:32 -07:00
two-tenant
Skip reconfig when all project config is excluded
2022-04-04 13:18:52 +02:00
unprotected-branches
Refactor unprotected branch tests
2025-04-02 14:27:27 -07:00
unprotected-branches-gitlab
Refactor unprotected branch tests
2025-04-02 14:27:27 -07:00
unsafe-vars
Make Ansible variable freezing more efficient
2023-09-14 14:00:45 -07:00
untrusted-project-branch-matcher
Add configure-projects
2024-08-22 07:52:42 -07:00
workspace-checkout
Fix issue with sparse-checkout of include-vars
2025-02-04 15:04:25 +01:00
wrong-connection-in-pipeline
Detect Gerrit gate pipelines with the wrong connection
2020-06-09 13:27:23 -07:00
zuul-connections-multiple-gerrits
Filter events on event connection
2021-04-24 08:39:03 -07:00
zuul-connections-same-gerrit
Update test fixtures to use explicit run
2017-10-26 15:59:41 -07:00
zuul-environment-filter
Filter secret ZUUL_ env variables from ansible env
2020-04-15 23:09:48 +02:00
zuul-job-contamination
Fix job contamination by unmerged change
2018-07-09 22:37:19 +02:00
zuultrigger
Honor independent pipeline requirements for non-live changes
2023-01-17 09:37:24 -08:00