Enable parent groups as options when configuring deployment approvals
Release notes
Adds ability to target a projects member group for deployment approval or deploying to protected environments.
Problem to solve
As an application development director, I want to require an approval or allow deployment to any member of a (direct or indirect) parent group of the configured project.
Original version
Presently if I have a protected environment in a given project, if I want to assign deployment approval to a group or access to deploy to a protected environment, it has to be a group that the project is shared with. It can not be the group the project is a member of. So if I have an example in this way, I have a project named MyProduct and its assigned to MyApplicationGroup and shared with SecGroup and InfraGroup. MyProduct has a protected environment named Production. Presently, I can not require approval from or restrict to direct members of MyApplicationGroup for deployment to production.Proposal
- Extend the deployment approval settings UI to list the parent groups of the current project
- Extend the deployment approval settings API to accept the parent group of the current project
Original version
This proposal is to allow for the group the project is a member of to be used as deployment approval or to deploy to a protected environment. So if I have a project named MyProduct and its assigned to MyApplicationGroup and shared with SecGroup and InfraGroup, I would like to have MyApplicationGroup listed be able to restrict deployments. Additionally like to have MyApplicationGroup listed along with SecGroup and InfraGroup in the approval list.Intended users
Feature Usage Metrics
Track the number of times the project group is attached to deploy to a protected environment or apply approval before a deployment progresses forward.
Does this feature require an audit event?
No
Edited by Viktor Nagy (GitLab)