Configure PR Bots with CLA (Renovate)

[markwolff]

• From Configure Renovate opentelemetry-js#829

We have a PR which configures the Renovate bot to automatically create PRs on the JS repo to update dependencies to the latest versions. Currently it is blocked since the bot has not signed the CNCF CLA. How can we configure the bot to "sign" the CLA?

/cc @SergeyKanzhelev

[SergeyKanzhelev]

@tedsuo will follow up on policies to enable bots and integrations and how CLA must work

[mayurkale22]

@tedsuo any update here?

[dyladan]

Seems like there is no way to get Renovate configured because of the CLA requirements. As a workaround, we can use the Forking Renovate plugin. Can an OpenTelemetry owner please enable this on the https://github.com/open-telemetry/opentelemetry-js and https://github.com/open-telemetry/opentelemetry-js-contrib repos?

@open-telemetry/admins

[lizthegrey]

Sorry for the delay, I failed to actually get https://lfcla.com/ running, but it was on my plate. Can we defer for a second so I can try to get it up and running?

[lizthegrey]

In particular, https://lists.cloudfoundry.org/g/cf-dev/topic/34227989?p=Created,,,20,2,0,0::recentpostdate%2Fsticky,,,20,2,0,34227989 says that it's a supported feature to exempt bots in the new CLA tool.

[dyladan]

sounds good to me thanks

[lizthegrey]

We have gotten approval from CNCF to migrate, we're just doing the details now.

[dyladan]

@lizthegrey any update?

[lizthegrey]

Thanks for the reminder, pinging CNCF

[dyladan]

@lizthegrey sorry to keep bothering you, but is there an update on this?

[lizthegrey]

I emailed CNCF to ask for an update, but given that it hasn't happened so far, I'm not going to block any longer.

[dyladan]

If that's the case can an owner install the Forking Renovate plugin on both nodejs repositories?

[lizthegrey]

@open-telemetry/technical-committee I believe has the bits to do this.

[dyladan]

Someone (I assume @open-telemetry/technical-committee) began the process of installing renovate on our contrib repo (the process was already started on our main repo), but the issue still remains that we cannot merge the PRs because the bot has not "signed" the CLA. Installing Forking Renovate instead of Renovate should solve this issue.

[lizthegrey]

@dyladan we have successfully gotten LF/CNCF approval to install the new CLA bot, and are working on implementation!

[dyladan]

Great! Any ETA?

[lizthegrey]

This week!

[lizthegrey]

Once the CLA bot is installed, we'll need you to retrigger CI on at least one pull with the traditional Renovate bot, and then I can get it added as an override.

[lizthegrey]

New bot is installed as per #309. Please trigger at least one PR with the Renovate bot so I can forward the approval link to the CNCF triage desk to be allowlisted.

[dyladan]

Not sure which link you need from the PR, but here is a direct link to the PR bot's response open-telemetry/opentelemetry-js#829 (comment)

[lizthegrey]

Thank you! Filed https://jira.linuxfoundation.org/servicedesk/customer/portal/4/SUPPORT-1388 with CNCF, they'll get it allowlisted in short order.

[lizthegrey]

Should be allowlisted. Please use commands to ask bot to rebase or reopen pull.

[lizthegrey]

"EasyCLA check passed. You are authorized to contribute."