contrib/intel/jenkins: Do not run pipeline for unauthorized users

Signed-off-by: Zach Dworkin <[email protected]>
zachdworkin · Dec 17, 2024 · c5a7cf3 · c5a7cf3
1 parent a8237e1
commit c5a7cf3
Showing 1 changed file with 21 additions and 7 deletions.
diff --git a/contrib/intel/jenkins/Jenkinsfile b/contrib/intel/jenkins/Jenkinsfile
@@ -397,6 +397,27 @@ pipeline {
         }
       }
     }
+    stage ('bootstrap-ci') {
+      steps {
+        script {
+          bootstrap_ci()
+        }
+      }
+    }
+    stage('check-authorization') {
+      steps {
+        dir (CI_LOCATION) {
+          withCredentials([usernamePassword(credentialsId: 'intel-ofi-bot')]) {
+            sh """source ${CI_LOCATION}/${env.CI_MODULE}/venv/bin/activate;\
+                  python authorize.py \
+                  --author=${env.CHANGE_AUTHOR} \
+                  --email=${env.CHANGE_AUTHOR_EMAIL} \
+                  --token=${env.intel-ofi-bot_PSW} \
+              """
+          }
+        }
+      }
+    }
     stage ('opt-out') {
       steps {
         script {
@@ -433,13 +454,6 @@ pipeline {
         }
       }
     }
-    stage ('bootstrap-ci') {
-      steps {
-        script {
-          bootstrap_ci()
-        }
-      }
-    }
     stage ('build-libfabric') {
       when { equals expected: true, actual: DO_RUN }
       parallel {