This is an automated email from the ASF dual-hosted git repository.
hello-stephen pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/doris.git
The following commit(s) were added to refs/heads/master by this push:
new 5fc5640b001 [fix](ci) Use auth slot 1 for the review runtime canary
(#70483)
5fc5640b001 is described below
commit 5fc5640b00182e62550f70e37446cf80cf7515b4
Author: shuke <[email protected]>
AuthorDate: Wed Nov 11 23:52:15 2026 +0800
[fix](ci) Use auth slot 1 for the review runtime canary (#70483)
### What problem does this PR solve?
The review runtime canary is pinned to auth slot 4, which is no longer
provisioned. Use the existing slot 1 for both the initial download and
the guarded writeback of refreshed credentials. A single job-level
setting keeps both paths aligned.
### Release note
None.
### Check List (For Author)
- Test: Parsed the workflow and checked all five canary shell steps with
`bash -n`. Exercised the actual auth steps against a local OSS fixture
for initial download, unchanged auth, refresh writeback, and a
concurrent remote update. The live canary is pending rollout.
- Behavior changed: Yes, the manual runtime canary uses slot 1.
- Does this need documentation: No.
---
.github/workflows/code-review-runner.yml | 9 +++++----
1 file changed, 5 insertions(+), 4 deletions(-)
diff --git a/.github/workflows/code-review-runner.yml
b/.github/workflows/code-review-runner.yml
index fed7781b91d..97188ade043 100644
--- a/.github/workflows/code-review-runner.yml
+++ b/.github/workflows/code-review-runner.yml
@@ -44,6 +44,8 @@ jobs:
if: ${{ github.event_name == 'workflow_dispatch' && inputs.runtime_canary
== true }}
runs-on: ubuntu-24.04
timeout-minutes: 25
+ env:
+ CANARY_AUTH_OBJECT: oss://doris-community-ci/codex/auth.json.1
permissions:
contents: read
steps:
@@ -87,7 +89,7 @@ jobs:
home="$RUNNER_TEMP/codex-canary-home"
install -m 700 -d "$home"
ossutil -i "$OSS_AK" -k "$OSS_SK" -e "$OSS_ENDPOINT" \
- cp -f oss://doris-community-ci/codex/auth.json.4 "$home/auth.json"
>/dev/null
+ cp -f "$CANARY_AUTH_OBJECT" "$home/auth.json" >/dev/null
jq -e '
.auth_mode == "chatgpt"
and (.tokens.access_token | type == "string" and length > 0)
@@ -174,7 +176,6 @@ jobs:
OSS_ENDPOINT: oss-cn-hongkong.aliyuncs.com
run: |
set -euo pipefail
- auth_object=oss://doris-community-ci/codex/auth.json.4
jq -e '
.auth_mode == "chatgpt"
and (.tokens.access_token | type == "string" and length > 0)
@@ -189,14 +190,14 @@ jobs:
remote_auth="$(mktemp "$RUNNER_TEMP/codex-canary-current.XXXXXX")"
trap 'rm -f "$remote_auth"' EXIT
ossutil -i "$OSS_AK" -k "$OSS_SK" -e "$OSS_ENDPOINT" \
- cp -f "$auth_object" "$remote_auth" >/dev/null
+ cp -f "$CANARY_AUTH_OBJECT" "$remote_auth" >/dev/null
remote_hash="$(sha256sum "$remote_auth" | awk '{print $1}')"
if [ "$remote_hash" != "$original_hash" ]; then
echo "::error::Auth changed concurrently; refusing to overwrite
it."
exit 1
fi
ossutil -i "$OSS_AK" -k "$OSS_SK" -e "$OSS_ENDPOINT" \
- cp -f "$CODEX_HOME/auth.json" "$auth_object" >/dev/null
+ cp -f "$CODEX_HOME/auth.json" "$CANARY_AUTH_OBJECT" >/dev/null
echo "Synced refreshed canary auth."
code-review:
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
