Skip to content

chore(ci): add area/openbao to the label set and the scope mapping - #4182

Merged
Aleksei Sviridkin (lexfrei) merged 1 commit into
mainfrom
chore/area-openbao
Sep 30, 2026
Merged

Aleksei Sviridkin (lexfrei) merged 1 commit into
mainfrom
chore/area-openbao

Conversation

@myasnikovdaniil

@myasnikovdaniil myasnikovdaniil commented Sep 9, 2026 •

Copy link
Copy Markdown
Contributor

What this PR does

Every openbao PR lands on area/uncategorized. The labeler has no scope entry for it, and there would be no label to apply if it did, so both #4168 and #4177 are sitting on the fallback right now.

labels.yml puts the bar for a new area at three open issues on the topic, and openbao is at three: #2787, #2483 and #2793. The shape follows what is already there for a single shipped component, next to area/kamaji, area/keycloak and area/cilium. The mapping takes the plain openbao scope and openbao-central alongside it, because the platform instance lives in its own package and carries its own scope.

Checked that every area/* and kind/* the labeler references is declared in labels.yml: 27 referenced, none missing, before and after this change. zizmor and the pre-commit hooks pass, and the embedded script still parses under github-script semantics.

Screenshots

No UI change.

Downstream repositories

Walked the trigger map against the diff. Nothing matches: the change is two entries under .github/, and no trigger in the map is keyed on the label set or the labeler. No package added, renamed or removed, no platform component or variant, no values.schema.json, no ApplicationDefinition, no hack/ layout change, no namespace rename.

Release note

NONE

Summary by CodeRabbit

  • New Features
    • Added an area/openbao label for tracking issues and pull requests related to OpenBAO.
    • Updated automatic pull request labeling to apply this label to changes scoped to OpenBAO and OpenBAO Central.

@coderabbitai

coderabbitai Bot commented Sep 9, 2026 •

Copy link
Copy Markdown
Contributor

Review in Change Stack →

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository: cozystack/cozystack/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 881a9310-4602-4f1c-b6ce-e03bc68b41ae

📥 Commits

Reviewing files that changed from the base of the PR and between ce1321f and 3111fa7.

📒 Files selected for processing (2)
  • .github/labels.yml
  • .github/workflows/pr-labeler.yaml

Included review availability: This review used your included allowance. Your plan provides up to 8 included reviews per hour; 7 remain after this review.


📝 Walkthrough

Walkthrough

The repository adds an area/openbao label and maps the openbao and openbao-central scopes to it in the pull request labeler workflow.

Changes

OpenBAO labeling

Layer / File(s) Summary
OpenBAO label and scope mapping
.github/labels.yml, .github/workflows/pr-labeler.yaml
Adds the area/openbao label with its color and description. Maps openbao and openbao-central scopes to the new label.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 3111f

OpenBAO-scoped PRs will receive the declared area/openbao label instead of the uncategorized fallback. The reviewed source supports the intended behavior, so no material merge risk remains.

Architecture Summary

Architecture risk: 🔵 Low · up to 3111f

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

  • observed — Modified behavior in .github/labels.yml: Added the area/openbao label with its color and description.
  • observed — Modified behavior in .github/workflows/pr-labeler.yaml: Added the openbao and openbao-central scope mappings to area/openbao.
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely summarizes the main changes: adding the area/openbao label and updating the scope mapping.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions github-actions Bot added area/ci Issues or PRs related to CI workflows, GitHub Actions, automation kind/cleanup Categorizes issue or PR as related to cleanup of code, process, or technical debt size/XS This PR changes 0-9 lines, ignoring generated files labels Sep 9, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

myasnikovdaniil LGTM. Openbao PRs get a real area now instead of the fallback, and the change still merges cleanly on current main (c983b5c).

OpenBAO is a real subsystem on main, with packages/apps/openbao, packages/system/openbao and packages/system/openbao-rd. No area/openbao label exists on the repo yet, and nothing in the current set covers secrets management, so a new area is what the rule in AGENTS.md asks for. The three issues you cite are open and about OpenBAO, which meets the bar in labels.yml. The sync workflow creates the label on merge.

I replayed the labeler's title parsing against the merged map. The titles of #4168, #4177 and #2991 all resolve to area/openbao, and a composite scope like openbao,ci gets both areas. The map has no duplicate keys, and every target it names is declared in labels.yml. When I pointed the openbao entry at an undeclared label, that check caught it. openbao-central does not exist on main yet since #4177 adds it, but a key ahead of its package costs nothing.

Non-blocking:

  • This covers the openbao part of #4122, the scope with no existing label. The body could reference that issue. The rest stays open there: http-cache still needs the same new-area decision, subsystem scopes like networking still fall through, kubeovn needs normalisation, and the map has no test.
  • The labeler only ever adds labels, so #4168 and #4177 keep area/uncategorized next to area/openbao after their next push. Someone has to remove it by hand.
  • The scope table in docs/agents/contributing.md has no openbao row. It already lags the workflow for other areas, so this is optional.

Every openbao PR lands on area/uncategorized, because the labeler has no
scope entry for it and there would be no label to apply if it did. #4168
and #4177 are both sitting on the fallback right now.

labels.yml sets the bar for a new area at three open issues on the topic,
and openbao is at three: #2787, #2483 and #2793. It also follows the
shape already used for a single shipped component, next to area/kamaji,
area/keycloak and area/cilium.

Maps the plain `openbao` scope and `openbao-central` alongside it, since
the platform instance lives in its own package and gets its own scope.

Assisted-By: LLM
Signed-off-by: Myasnikov Daniil <[email protected]>

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

myasnikovdaniil I rebased this onto current main, no conflicts. LGTM.

@lexfrei
Aleksei Sviridkin (lexfrei) merged commit 0592d0e into main Sep 30, 2026
22 of 23 checks passed
@lexfrei
Aleksei Sviridkin (lexfrei) deleted the chore/area-openbao branch September 30, 2026 22:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/ci Issues or PRs related to CI workflows, GitHub Actions, automation kind/cleanup Categorizes issue or PR as related to cleanup of code, process, or technical debt size/XS This PR changes 0-9 lines, ignoring generated files

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants