test-infra: Publishing bot cannot push

Our publishing bot https://github.com/k8s-publishing-bot cannot push due to a cla/linuxfoundation check:

[28 May 18 05:54 UTC]: /publish_scripts/push.sh /etc/secret-volume/token master
	remote: error: GH006: Protected branch update failed for refs/heads/master.        
	remote: error: Required status check "cla/linuxfoundation" is expected.        
	To https://github.com/kubernetes/client-go
	 ! [remote rejected] master -> master (protected branch hook declined)
	error: failed to push some refs to 'https://github.com/kubernetes/client-go'

About this issue

Original URL
State: closed
Created 6 years ago
Comments: 15 (15 by maintainers)

Most upvoted comments

I’ve updated the permissions to admin, as well as filed https://github.com/kubernetes/test-infra/pull/8204 to ensure that the bots are the only ones pushing to those repos.

cblecker on Jun 1, 2018

Yeah… I think the best solution would be giving the publishing bot admin over the repos that it publishes… then it can just push the branch as normal

cblecker on May 29, 2018

Has the bot signed the CLA?

Is it stuck on every commit, or a special commit that didn’t sign the CLA?

Potential solutions are:

give the bot admin access
figuring out how to make these commits pass the CLA check
- send PRs rather than write directly to the repo
- write the commits somewhere unprotected and then merge it into master? (will this get them signed?)
disable branch protection for automatically published repos.
disable just the CLA check for automatically published repos.

fejta on May 29, 2018

that context is required, which means that it requires a PR to be generated. One way around this would be to give the bot admin on the repo, as opposed to just write. this would allow it to push anyways, even without the right status contexts.

cblecker on May 29, 2018