Commit 8f555bb8 authored by xuwang's avatar xuwang
Browse files

skills/otica-migrate-docker: document DOWNSTREAM_REPO SSH URL requirement 

update-downstream-tag.sh passes DOWNSTREAM_REPO directly to git clone,
which requires a full git@<host>:<path> or https://<host

>/<path> URL.
A bare GitLab path silently breaks every tag-triggered pipeline.
Includes audit one-liner to catch all affected repos at once.

Changelog-Added: docker: DOWNSTREAM_REPO SSH URL format fix
Co-Authored-By: default avatarClaude Sonnet 4.6 <noreply@anthropic.com>
parent d8d96b43

skills/otica/otica-migrate-docker/SKILL.md

+23 −0
Original line number Diff line number Diff line
@@ -254,6 +254,29 @@ For nested repos (common/ structure), wire it as the first line of `common/env.m 


For flat repos, place `tools.txt` at the project root — no `TOOLS_FILE` override needed.



### Fix `DOWNSTREAM_REPO` SSH URL format



If the repo has a `DOWNSTREAM_REPO` variable, it must be a full SSH or HTTPS URL.

`update-downstream-tag.sh` passes it directly to `git clone` — a bare GitLab path

(`dom/kube/kube-foo`) causes every tag-triggered pipeline to fail with:



```

fatal: repository 'dom/kube/kube-foo' does not exist

```



```diff

-DOWNSTREAM_REPO=dom/kube/kube-foo

+DOWNSTREAM_REPO=git@gitlab.med.stanford.edu:dom/kube/kube-foo

```



Check all docker repos in one pass:



```bash

grep -rn 'DOWNSTREAM_REPO' sub-projects/docker-*/env.mk | grep -v 'git@\|https://\|^#'

```



Any hit is broken — prefix with `git@<host>:`.



### Validate



```bash