Jeremy Stanley <fungi@yuggoth.org> writes:
On 2019-03-10 11:52:33 -0400 (-0400), David Moreau Simard wrote:
ARA is an "unofficial" OpenStack project that would be part of this move and I would appreciate if ARA could remain on GitHub where the Ansible community is. [...] Is there a way to make this work ? [...]
The idea is that you could run a Zuul job in the "post" pipeline which pushes the branch tip to a repository in a GitHub (or Bitbucket or whatever) remote URL of your choice. The job could include credentials for a service account you create with push rights for that remote. While the playbook containing the Zuul secret would need to be in your repository, the fundamental role to perform the git push is probably a good candidate for including in Zuul's standard library. You'd probably also want it to run in the "tag" pipeline to push a copy of any tag which triggers it.
Easier than that, actually. With the new pass-to-parent[1] feature, the job and playbook can be defined once in zuul-jobs, and the only item necessary in the repository would be the job invocation and secret. [1] https://zuul-ci.org/docs/zuul/user/config.html#attr-job.secrets.pass-to-pare... -Jim