Grant release-eng build access to connectors pipeline - #4004
Merged
Merged
Conversation
The version bump pipeline triggers a DRA build on the target release branch via a `trigger:` step. Buildkite propagates the original user's identity through trigger chains, so when release-eng triggers the centralized version bump pipeline, the eventual build on `connectors` is created as that user. release-eng was already granted BUILD_AND_READ on connectors-version-bump, but missing on the main connectors pipeline, causing the trigger to fail for users without direct individual grants. This adds team-level access so any release-eng member can complete the version bump flow. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
💔 Failed to create backport PR(s)
To backport manually run: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds
release-eng: BUILD_AND_READto theconnectorspipeline's teams block so release-eng team members can trigger builds.Why
The
connectors-version-bumppipeline (introduced in #3986) executes atrigger:step that starts a DRA build on the target release branch on the mainconnectorspipeline. Buildkite propagates the original triggering user's identity through trigger chains, so the downstream build onconnectorsis created as that user -- and the user needs Build access onconnectorsfor the trigger to succeed.We already granted release-eng
BUILD_AND_READonconnectors-version-bump(so they can trigger our pipeline at all), but missed adding it on the mainconnectorspipeline. This caused failures in build #3 (9.3.5) and build #4 (8.19.16) when triggered by Nina Lee, while build #2 (9.4.1) triggered by Julien Mailleret succeeded -- presumably via individual grants.This grants team-level access so any release-eng member can complete the version bump end-to-end.
Test plan
Trigger DRA build on ${BRANCH}step succeeds