fix(e2e): clone public apps without SSH secret - #50
Merged
Merged
Conversation
Co-authored-by: jmjava <jmjava@gmail.com>
Co-authored-by: jmjava <jmjava@gmail.com>
jmjava
marked this pull request as ready for review
September 14, 2026 17:41
jmjava
added a commit
that referenced
this pull request
Sep 14, 2026
* ci(e2e): automate intercept product paths (#37) * ci(e2e): automate intercept product paths Co-authored-by: jmjava <jmjava@gmail.com> * fix(e2e): limit product flow help text Co-authored-by: jmjava <jmjava@gmail.com> * docs(m17): record intercept automation evidence Co-authored-by: jmjava <jmjava@gmail.com> * fix(e2e): prepare intercept namespace and results evidence Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> * fix(ci): avoid matrix context in workflow concurrency (#38) Co-authored-by: Cursor Agent <cursoragent@cursor.com> * ci(results): schedule strict database regression (#39) * ci(results): schedule strict database regression Co-authored-by: jmjava <jmjava@gmail.com> * docs(m17): record Results automation evidence Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> * test(operator): complete domain CI assurance (#40) * test(operator): add domain reconciliation integration Co-authored-by: jmjava <jmjava@gmail.com> * fix(operator): define integration list GVK Co-authored-by: jmjava <jmjava@gmail.com> * build(operator): upgrade golangci-lint for Go 1.23 Co-authored-by: jmjava <jmjava@gmail.com> * chore(operator): resolve lint gate findings Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> * fix(ci): allow lint toolchain bootstrap (#41) Co-authored-by: Cursor Agent <cursoragent@cursor.com> * fix(ci): retry Tekton controller apply races (#42) * fix(ci): retry Tekton controller apply races Co-authored-by: jmjava <jmjava@gmail.com> * ci(operator): gate Tekton installer changes Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> * fix(rbac): default pipeline bootstrap to least privilege (#43) * fix(rbac): default pipeline bootstrap to least privilege Co-authored-by: jmjava <jmjava@gmail.com> * ci(rbac): require strict cluster regression Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> * fix(test): isolate Helm RBAC rendering (#44) Co-authored-by: Cursor Agent <cursoragent@cursor.com> * fix(rbac): close strict cluster verification failures (#45) * fix(test): isolate Helm RBAC rendering Co-authored-by: jmjava <jmjava@gmail.com> * fix(rbac): permit orchestrator PipelineRun creation Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> * ci(rbac): isolate deterministic cluster gate (#46) * ci(rbac): isolate deterministic cluster gate Co-authored-by: jmjava <jmjava@gmail.com> * ci(rbac): gate cluster workflow changes Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> * fix(rbac): authorize StackRun submissions (#47) Co-authored-by: Cursor Agent <cursoragent@cursor.com> * fix(ci): probe StackRun RBAC after CRD install (#48) Co-authored-by: Cursor Agent <cursoragent@cursor.com> * ci(e2e): gate RBAC changes on intercept paths (#49) Co-authored-by: Cursor Agent <cursoragent@cursor.com> * fix(e2e): clone public apps without SSH secret (#50) * ci(e2e): gate RBAC changes on intercept paths Co-authored-by: jmjava <jmjava@gmail.com> * fix(e2e): clone public apps without SSH secret Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> * fix(tekton): resolve optional hooks deterministically Co-authored-by: jmjava <jmjava@gmail.com> * fix(tekton): allow compile tasks to bind cache PVC Co-authored-by: jmjava <jmjava@gmail.com> * fix(ci): wait for Tekton admission readiness Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Root cause
Both PR #49 matrices stopped before cluster setup because
E2E_GIT_SSH_PRIVATE_KEYis not configured. The three stack-one application repositories used by this E2E are public, so requiring private credentials prevented valid public clone coverage.Verification
regression exit code: 0