fix(ci): accept unbound /test e2e comments and post replies - #7267
Merged
zhangzujian merged 1 commit intoAug 20, 2026
Merged
Conversation
`/test e2e core` was rejected as invalid without --head/--nonce, and the rejection reply 403ed because the dispatcher token could not write PR comments. Bind live HEAD when the comment omits the nonce, and grant pull-requests: write so trusted replies and approval markers can post. Signed-off-by: Zujian Zhang <zhangzujian.7@gmail.com>
dosubot
Bot
added
size:M
Coverage Report for CI Build 32326266835Warning Build has drifted: This PR's base is out of sync with its target branch, so coverage data may include unrelated changes. Coverage decreased (-0.004%) to 32.744%Details
Uncovered ChangesNo uncovered changes found. Coverage Regressions2 previously-covered lines in 1 file lost coverage.
Coverage Stats
💛 - Coveralls |
This was referenced Aug 20, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this PR does / why we need it
On #7260,
/test e2e coredid not start E2E.The dispatcher requires an exact
--head <sha> --nonce <nonce>binding, sothe natural command is
invalid E2E command. The rejection reply then 403s(
Resource not accessible by integration) because the trusted token canread PRs but cannot create PR comments. The later bound command was
accepted, then failed in Record the approved request on the same 403,
so no trusted executor started.
This change:
/test e2e,/test e2e <groups>,/test e2e-all, and/retest e2e-failedand binds them to the live HEAD at dispatch time--head/--noncewhen presentpull-requests: writeso rejection and approval-marker commentscan post
Which issue(s) this PR fixes
Follow-up to #7244. Seen on
https://github.com/kubeovn/kube-ovn/actions/runs/32324230046
and
https://github.com/kubeovn/kube-ovn/actions/runs/32326007147
Related to #7230.