Skip to content

Conversation

@sylvainsf
Copy link
Contributor

Description

Fix the approval-gate job in functional-test-cloud.yaml that was incorrectly gating PRs from org members (like PR #11177 from DariuszPorowski).

Root cause: The expression environment: ${{ <condition> && '' || 'external-contributor-approval' }} evaluates to an empty string '' for trusted users. However, GitHub Actions treats an empty string as a valid environment reference (creating an empty-named environment), NOT as "skip using an environment."

Fix: Changed the approach to skip the approval-gate job entirely for trusted users via if condition, rather than using a conditional environment. Updated the setup job to also allow needs.approval-gate.result == 'skipped' so downstream jobs proceed correctly.

Type of change

  • This pull request is a minor refactor, code cleanup, test improvement, or other maintenance task and does not change the functionality of Radius (issue link optional).

Contributor checklist

Please verify that the PR meets the following requirements, where applicable:

  • An overview of proposed schema changes is included in a linked GitHub issue.
    • Yes
    • Not applicable
  • A design document PR is created in the design-notes repository, if new APIs are being introduced.
    • Yes
    • Not applicable
  • The design document has been reviewed and approved by Radius maintainers/approvers.
    • Yes
    • Not applicable
  • A PR for the samples repository is created, if existing samples are affected by the changes in this PR.
    • Yes
    • Not applicable
  • A PR for the documentation repository is created, if the changes in this PR affect the documentation or any user facing updates are made.
    • Yes
    • Not applicable
  • A PR for the recipes repository is created, if existing recipes are affected by the changes in this PR.
    • Yes
    • Not applicable

The approval-gate job was incorrectly requiring approval for PRs from org members
(like PR #11177 from DariuszPorowski).

Root cause: The conditional environment expression evaluated to an empty string ''
for trusted users. However, GitHub Actions treats an empty string as a valid
environment reference (creating an empty-named environment), NOT as 'skip using
an environment'.

Fix: Skip the approval-gate job entirely for trusted users via the 'if' condition,
rather than using a conditional environment. Update the setup job to also allow
needs.approval-gate.result == 'skipped' so downstream jobs proceed correctly.

Signed-off-by: Sylvain Niles <sylvainniles@microsoft.com>
@sylvainsf sylvainsf requested review from a team as code owners February 5, 2026 17:03
@sylvainsf sylvainsf requested a deployment to external-contributor-approval February 5, 2026 17:03 — with GitHub Actions Waiting
@sylvainsf sylvainsf temporarily deployed to external-contributor-approval February 5, 2026 18:23 — with GitHub Actions Inactive
@radius-functional-tests
Copy link

radius-functional-tests bot commented Feb 5, 2026

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details
Name Value
Repository radius-project/radius
Commit ref 897d0d6
Unique ID funcd3a4bf072b
Image tag pr-funcd3a4bf072b
  • gotestsum 1.13.0
  • KinD: v0.29.0
  • Dapr: 1.14.4
  • Azure KeyVault CSI driver: 1.4.2
  • Azure Workload identity webhook: 1.3.0
  • Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-funcd3a4bf072b
  • Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
  • applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-funcd3a4bf072b
  • dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-funcd3a4bf072b
  • controller test image location: ghcr.io/radius-project/dev/controller:pr-funcd3a4bf072b
  • ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-funcd3a4bf072b
  • deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting ucp-cloud functional tests...
⌛ Starting corerp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

@DariuszPorowski DariuszPorowski merged commit d431828 into main Feb 5, 2026
48 checks passed
@DariuszPorowski DariuszPorowski deleted the fix-approval-gate-empty-environment branch February 5, 2026 19:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants