From 70c138d3f0236cc30e5ae27b6d75394843c95322 Mon Sep 17 00:00:00 2001
From: Joe Stringer <joe@cilium.io>
Date: Wed, 6 May 2026 14:57:14 -0700
Subject: [PATCH] .github: Report dispatch failures on Slack

The credentials for dispatching a request to the team-management
repository in order to apply these settings to the organization
periodically expire. When they expire, this workflow starts failing, but
there is no corresponding notification.

These credentials have a different lifecycle compared to the Slack
notification, so probably it could be helpful to have a backup system
here where this workflow posts to Slack when there's a failure. Then
maintainers can monitor the same Slack channel for approval requests and
infrastructure failures (including credential expiry).

Add a new Slack app using the existing webhook URL to post a message
when the dispatch fails.

Signed-off-by: Joe Stringer <joe@cilium.io>
---
 .github/workflows/team-updates.yaml | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/team-updates.yaml b/.github/workflows/team-updates.yaml
index 684599e7..a50a6ba9 100644
--- a/.github/workflows/team-updates.yaml
+++ b/.github/workflows/team-updates.yaml
@@ -16,9 +16,26 @@ jobs:
     if: github.repository == 'cilium/community'
     name: Dispatch Team Management
     runs-on: ubuntu-latest
-    environment: team-management  
+    environment: team-management
     steps:
       # Send the workflow dispatch event via GitHUB API
       - name: Dispatch workflow request
         run: |
           curl --fail-with-body -L -XPOST -H "Accept: application/vnd.github+json" -H "Authorization: Bearer ${{secrets.TM_DISPATCH_TOKEN}}" -H "X-GitHub-Api-Version: 2022-11-28" https://api.github.com/repos/cilium/team-management/dispatches -d '{"event_type":"community_teams_update"}'
+
+      - name: Notify Slack channel
+        if: ${{ failure() }}
+        uses: slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+        with:
+          webhook: ${{ secrets.TM_SLACK_WEBHOOK_URL }}
+          webhook-type: incoming-webhook
+          payload: |
+            blocks:
+              - type: "section"
+                text:
+                  type: "mrkdwn"
+                  text: "*:warning: Team Management Dispatch Failure*"
+              - type: "section"
+                text:
+                  type: "mrkdwn"
+                  text: "<${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|View workflow run>"