auth
FreeAuthentication and authorization patterns for Rossoctl services
The English summary is being prepared. Showing the original description.
Monitor running CI jobs, wait for completion, create tasks for results
The English summary is being prepared. Showing the original description.
Run score Not tested
See how to installReview the instructions the agent will receive before you install.
Monitor running CI pipelines and report results. Creates task items for each CI check being monitored.
CI log downloads MUST go to files. Status checks (gh pr checks) are small and OK inline.
export LOG_DIR="${LOG_DIR:-${WORKSPACE_DIR:-/tmp}/rossoctl-ci}"
mkdir -p "$LOG_DIR"
# When downloading logs after completion:
gh run view <run-id> --log-failed > $LOG_DIR/ci-run-<run-id>.log 2>&1; echo "EXIT:$?"
# Analyze in subagent: Task(subagent_type='Explore') with Grep
For each pending CI check, create a task:
TaskCreate: "<worktree> | <PR> | CI | Monitor | <check-name>"
metadata: plan="ad-hoc", runner="main-session"
Example:
#33 [in_progress] mlflow-ci | PR#569 | CI | Monitor | Kind Deploy & Test
#34 [pending] mlflow-ci | PR#569 | CI | Monitor | HyperShift E2E
gh pr checks <PR-number>
For each check that completes:
completedrca:ciTaskUpdate: #33 status=completed
TaskCreate: "<worktree> | <PR> | Kind CI | RCA | <failure summary>"
Present final status table:
| # | Check | Status | Action |
|---|---|---|---|
| #33 | Kind Deploy & Test | passed | - |
| #34 | HyperShift E2E | failed | → #35 RCA created |
| #35 | Kind CI | RCA | Agent empty response |
| Check | Trigger | Duration | Manual? |
|---|---|---|---|
| CodeQL | Auto on push | ~2 min | No |
| Deploy & Test (Kind) | Auto on push | ~12 min | No |
| E2E HyperShift | /test comment | ~45 min | Yes |
| Build, Lint, Security | Auto on push | ~1 min | No |
HyperShift requires manual trigger:
# Trigger via PR comment (done by user in GitHub UI)
# The workflow responds to issue_comment with "/test"
Monitor:
gh run view <run-id> --json status --jq '.status'
gh run view <run-id> | head -25
On invocation:
rca:ci or rca:hypershiftNaming: <worktree> | <PR> | CI | Monitor | <check-name>
/test comment on PRheadSha matches expected commitci:status - One-time status checkrca:ci - RCA when CI failstdd:ci - TDD iteration using CItdd:kind - Local Kind testing (faster feedback)No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Authentication and authorization patterns for Rossoctl services
The English summary is being prepared. Showing the original description.
Create confidential OAuth2 clients in Keycloak for server-to-service authentication
The English summary is being prepared. Showing the original description.
Configure MLflow with mlflow-oidc-auth plugin for Keycloak OIDC authentication
The English summary is being prepared. Showing the original description.
Configure OpenTelemetry Collector with OAuth2 authentication for trace export
The English summary is being prepared. Showing the original description.
CI pipeline monitoring, status checks, and PR validation workflows
The English summary is being prepared. Showing the original description.
Check PR CI status - all checks, failures, test results, and artifacts
The English summary is being prepared. Showing the original description.