chore(NA): remove write permissions on Bazel remote cache for PRs

elastic · Feb 8, 2021 · 846108c · 846108c
1 parent dccea86
commit 846108c
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/src/dev/ci_setup/setup_env.sh b/src/dev/ci_setup/setup_env.sh
@@ -180,6 +180,15 @@ fi
 ###
 cp -f "$KIBANA_DIR/src/dev/ci_setup/.bazelrc-ci" "$HOME/.bazelrc";
 
+###
+### remove write permissions on buildbuddy remote cache for prs
+###
+if [[ "$ghprbPullId" ]] ; then
+  echo "# Appended by $KIBANA_DIR/src/dev/ci_setup/setup.sh" >> "$HOME/.bazelrc"
+  echo "# Uploads logs & artifacts without writing to cache" >> "$HOME/.bazelrc"
+  echo "build --noremote_upload_local_results" >> "$HOME/.bazelrc"
+fi
+
 ###
 ### append auth token to buildbuddy into "$HOME/.bazelrc";
 ###