Skip to main content

Add/Remove Repository in CI-Trust Authentication Flow

Introduction​

CI-Trust validates the relationship of a Repository × OrbitSpace × TeamSpace inside an organization, so that it can allow or deny access from a repository to a certain TeamSpace in Orbit clusters.

Official CI-Trust documentation can be found on the Orbit Portal's ci-trust page. See also our CI Trust service portfolio page for how it's used to authenticate GitHub Actions pipelines.

This setup replaces the previous CI-Bot approach from Orbit.

How to Add a New Repository​

  1. Find your product in the products repository.
  2. Add the repositories you need to use the CI-Trust setup.
  3. Create a Pull Request with your changes.
  4. Send a message to the Connected AI Platform | PullRequest based Self Service Microsoft Teams channel.

The following example shows what needs to be edited in the repos.yaml file:

repos.yaml
githubInstance: code.connected.bmw
githubOrg: <YOUR_GITHUB_ORG> # notice that the github organization is case sensitive
githubRepos:
- name: <your_repository_name>
  permissions:
  - space: <OrbitSpace>
    teams:
     - <TeamSpace1>
     - <TeamSpace2>
- name: <your_repository_name_2>
  permissions:
  - space: <OrbitSpace>
    teams:
     - <TeamSpace1>
     - <TeamSpace2>
     - <TeamSpaceX>
warning

As further steps are needed by the Connected AI team, these changes won't be applied immediately. This process is still a work in progress and may change over time.