CI pipeline permission problems in Forks
Pipeplines are not triggered in the base-repo for merge-requests from forks
Currently the pipelines are executed as part of the fork and for the commit itself, not the merge commit. There is a webhook that can execute on merge request creation/update. On this level it is equivalent to GitHub, as there it is external services that handle the CI (except that they are not allowed to set the build status on the fork, see above...). But one of the advantages of GitLab is its GitLab CI which should execute as part of the original project (not its forks) and also work on merge requests. GitLab is aware of the problem and it is fixing it, although perhaps initially only in the Enterprise version. Relevant issues:
- https://git.ufz.de/help/ci/merge_request_pipelines/index.md#important-notes-about-merge-requests-from-forked-projects
- https://gitlab.com/gitlab-org/gitlab/issues/25644
- https://gitlab.com/gitlab-org/gitlab/issues/9713
The resulting problem
There is a solution, BUT only for the Enterprise Edition of GitLab... this is starting to get frustrating, that important features are left out of the FOSS edition of GitLab. I don't know if the WKDV is willing to get the Enterprise Edition for the UFZ?!
Frustration!