From: Petr Špaček <pspacek@isc.org>
Date: Tue, 10 Mar 2026 17:04:51 +0000 (+0100)
Subject: Delete early access token when code is published
X-Git-Tag: v9.20.21~7^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=984e03098c23cf1934c7eae6b3bd6da147f74d99;p=thirdparty%2Fbind9.git

Delete early access token when code is published

Technically this is not necessary because the token expires in one week
after creation, and new code would have got there only one week before
the next public release, but better be safe than sorry.

Catch is, after_script gets executed even if a job fails or is
canceled. Delete distros token only if publication succeeded.

(cherry picked from commit 98cbde5233c788936f8aeb6231c65db74d9f7fbc)
---

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index ce902251c09..76374b3532a 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -2027,6 +2027,8 @@ publish:
   variables:
     SSH_SCRIPT_CLIENT: |-
       ssh "${STAGING_USER_ACTIONS}@${STAGING_HOST}" "publish ${CI_COMMIT_TAG}"
+  after_script:
+    - if [ "${CI_JOB_STATUS}" = "success" ]; then "$CI_PROJECT_DIR"/bind9-qa/releng/manage_distros_token.py delete; fi
   artifacts:
     paths:
       - publish-${CI_COMMIT_TAG}.log