qontract-reconcile 0.10.1rc878__py3-none-any.whl → 0.10.1rc880__py3-none-any.whl

{qontract_reconcile-0.10.1rc878.dist-info → qontract_reconcile-0.10.1rc880.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: qontract-reconcile
-Version: 0.10.1rc878
+Version: 0.10.1rc880
 Summary: Collection of tools to reconcile services with their desired state as defined in the app-interface DB.
 Home-page: https://github.com/app-sre/qontract-reconcile
 Author: Red Hat App-SRE Team

{qontract_reconcile-0.10.1rc878.dist-info → qontract_reconcile-0.10.1rc880.dist-info}/RECORD

@@ -194,12 +194,12 @@ reconcile/external_resources/reconciler.py,sha256=E50X_lnOD0OWYXMzyZld1P6dCFJFYj
 reconcile/external_resources/secrets_sync.py,sha256=xFQ_ObWl29btbxzEJSkndvHBPcsVpSTkmUlWcUGzZ70,15132
 reconcile/external_resources/state.py,sha256=fA_CzT4oNie4wnaImwW-W1duWEOKFyS1omcnMyYwx2Q,9644
 reconcile/glitchtip/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-reconcile/glitchtip/integration.py,sha256=Y7ofQg_xCt3dOln3pjeXp7rAnwohCgD2zcUAb-Hciis,8375
+reconcile/glitchtip/integration.py,sha256=SCfdllg0cywCyLKCA66yUm9Z_Sb8t5E0jDEKdwRk6HI,8372
 reconcile/glitchtip/reconciler.py,sha256=nUvDv7qG1ly0cA16MmlL6NV71yl1mJYLT2mui7lmi0Y,12402
 reconcile/glitchtip_project_alerts/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-reconcile/glitchtip_project_alerts/integration.py,sha256=EJBZJldOyK_ECAfgr1RjxabtsVRIBbZcW-7JU4cwVsA,12429
+reconcile/glitchtip_project_alerts/integration.py,sha256=HI_HgvTTc2K-8Md0SpEBs6tOZ3CQm-AbOatbw_NrKqg,12425
 reconcile/glitchtip_project_dsn/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-reconcile/glitchtip_project_dsn/integration.py,sha256=qt2a33FOUUlCyonSHm3nUb7pNXgLAq8sv_JQCm6Vj3U,8113
+reconcile/glitchtip_project_dsn/integration.py,sha256=5c8RVIO3Wjz2kBfB52EmxZ6VP2JQ1rLGMM9lybNhdAE,8109
 reconcile/gql_definitions/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 reconcile/gql_definitions/acs/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 reconcile/gql_definitions/acs/acs_instances.py,sha256=L91WW9LbhJbBSrECqShQpFtjoBOsmNIYLRpMbx1io5o,2181
@@ -258,8 +258,8 @@ reconcile/gql_definitions/common/pgp_reencryption_settings.py,sha256=NPLmO6J-zSu
 reconcile/gql_definitions/common/pipeline_providers.py,sha256=JJgmmghqLIwjKOdcWYHPnf4PDgAq4GF7046i0ozrqgI,9127
 reconcile/gql_definitions/common/quay_instances.py,sha256=toBkdYYVTmEafezAHZKgaW-mQ29xEW6jeronzsAlNyI,1786
 reconcile/gql_definitions/common/reserved_networks.py,sha256=yP9qSQCaSQcva-ZgTnZp09qH27ur5_qK080ToIs04MY,2560
-reconcile/gql_definitions/common/saas_files.py,sha256=rt-ugGWWO148cE_8-cbRkNPJ4peYDQoAnSZ3c5qT_dk,16390
-reconcile/gql_definitions/common/saas_target_namespaces.py,sha256=ZmX9SYoLQnjTc9zU6ehFNUs_GgOedim3v73A-83Gnsc,2813
+reconcile/gql_definitions/common/saas_files.py,sha256=8JoysSi-lAjsdGKTK3YBTBPYy95B47guXzfp71JHh1I,16516
+reconcile/gql_definitions/common/saas_target_namespaces.py,sha256=4VYP2VbwY8WVwtSFk2-jsUNhSmRD3X4FWKxetOKvmd0,2835
 reconcile/gql_definitions/common/saasherder_settings.py,sha256=nqQLcMwYxLseqq0BEcVvmrpIj2eQq0h8XDSpLN6GGCw,1793
 reconcile/gql_definitions/common/slack_workspaces.py,sha256=2o0kgi4QiaRuNmZJnc_By4F6NsKIdRaXkrufRQw7Nok,1753
 reconcile/gql_definitions/common/smtp_client_settings.py,sha256=JU6t6D-Qj-z1gLlgUiHKe0W7AxWQdty9jlv-ig_43tM,2248
@@ -299,7 +299,7 @@ reconcile/gql_definitions/fragments/prometheus_instance.py,sha256=12ltnV9kdEw6Ln
 reconcile/gql_definitions/fragments/resource_limits_requirements.py,sha256=ucskQ_a8RxvFl5-IWxz5kk3g4-5Pvh_W4N3nLmuKxi0,744
 reconcile/gql_definitions/fragments/resource_requests_requirements.py,sha256=TFKO4YALFPanSvZvIJFz0dCioBU7i73Q6hkDtGMvs9I,736
 reconcile/gql_definitions/fragments/resource_values.py,sha256=-N2lNRhWp8PgocmIeX3U9f3l90Q97N2lXoq1pXdb_LE,742
-reconcile/gql_definitions/fragments/saas_target_namespace.py,sha256=Ei39iL5J5TzeYtoBqbUF6zog3ctXTK-ZQyvbIVcUI20,3921
+reconcile/gql_definitions/fragments/saas_target_namespace.py,sha256=8kMXeD7u2bmdjn10zHmMJ80ScOhUp6KqSfWfjWZW-40,4001
 reconcile/gql_definitions/fragments/terraform_state.py,sha256=S5QuTR9YlvUObiU7hevS9ybxZEssWoRGqCR9YtGwePs,1024
 reconcile/gql_definitions/fragments/upgrade_policy.py,sha256=cVza8zfra1E3yBsHiS-hKbys17fvv572GFnKshJjluE,1246
 reconcile/gql_definitions/fragments/user.py,sha256=84RGYYSYnZmyrwHlCX89-EgAu7UaLFOTMQXobmHCfz8,939
@@ -309,9 +309,9 @@ reconcile/gql_definitions/gitlab_members/gitlab_instances.py,sha256=oYPvfiOsPTGH
 reconcile/gql_definitions/gitlab_members/permissions.py,sha256=Qzj3Fpv7xj8v9eygeP312nHRNg8er8XMRBveynPIyQM,3302
 reconcile/gql_definitions/glitchtip/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 reconcile/gql_definitions/glitchtip/glitchtip_instance.py,sha256=QUfLhRkdE_-SorWgLBB8LHFD6kihbFwEoVByCLax3yM,2781
-reconcile/gql_definitions/glitchtip/glitchtip_project.py,sha256=oFijq1LIQysUM-IOyNUjxVZgRD93NK12lNvJuBq4vjE,6008
+reconcile/gql_definitions/glitchtip/glitchtip_project.py,sha256=AojrkCDGbVjY0TOkfookz-9tqLA9txY7_xNdsWe174c,6004
 reconcile/gql_definitions/glitchtip_project_alerts/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-reconcile/gql_definitions/glitchtip_project_alerts/glitchtip_project.py,sha256=tZhSFb5eIIc5BOgMPQeV9tEwrVu1MnrxaQ5pQ0zEKk4,4468
+reconcile/gql_definitions/glitchtip_project_alerts/glitchtip_project.py,sha256=pnkysdaQtdiVVxz9s7V8qttFygqcXOuXREd4LF7tCW8,4466
 reconcile/gql_definitions/integrations/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 reconcile/gql_definitions/integrations/integrations.py,sha256=LfpgVbCCCk20ohwP5pDea5fwxMFGrcgE6J_WHBuGqek,11595
 reconcile/gql_definitions/jenkins_configs/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -535,7 +535,7 @@ reconcile/test/test_quay_repos.py,sha256=TdkcRF_a8PLp01Kti9eZZN-vGup2yPBT4Iba3k0
 reconcile/test/test_queries.py,sha256=SpH3RmNpBjEr_ne3VjAMCgKK8RE1z1zo7bypkT5uoO4,1946
 reconcile/test/test_repo_owners.py,sha256=uRYMLbMmh-9usF0TerabZTZV-Z1CS4I6ybT-LQqCLe8,1423
 reconcile/test/test_requests_sender.py,sha256=7fd9C2kEFS0-CYtlsif66N1kO9c44pzuBPAJKR9igqU,5385
-reconcile/test/test_saasherder.py,sha256=fdjcygNFPz1YyU2uB-8IU3yQZr6MlD8np2_fYUsL2b8,54440
+reconcile/test/test_saasherder.py,sha256=C2vwkdjk2cccS14GML2ByG8WKcRP8wgTJfzwaEUKdtw,54603
 reconcile/test/test_saasherder_allowed_secret_paths.py,sha256=5NHQwNJO66at6HiyMZ5sVRTQDwxdvlOQo0KmkBWCw5Q,4853
 reconcile/test/test_secret_reader.py,sha256=kz7nzcPjvA08cytnvcA_PMA98AEyqJWsESkYeRn5xCk,4994
 reconcile/test/test_slack_base.py,sha256=gpbWOLNxMMX6fyAbs1JakhLTnwfedb3f7WpUae4tQZE,5060
@@ -787,9 +787,9 @@ reconcile/utils/runtime/meta.py,sha256=X44HzyXIBprf3zcsGr2XLCgoeFkz6r3U2nlFXM1H7
 reconcile/utils/runtime/runner.py,sha256=72cc-I6yXyPov8UCLHpyERRy1eiMLpGite2roO0yUlo,7979
 reconcile/utils/runtime/sharding.py,sha256=roCdbnBklhTK_g34zbgQYqzpKPaNQ8J6Xd9XLO9-t6Q,16258
 reconcile/utils/saasherder/__init__.py,sha256=J3MBZBFa5YmhqYm08QsjBXz8mFcVOCiOCkyIcw41t7E,343
-reconcile/utils/saasherder/interfaces.py,sha256=q7Xhs95RMwOCCqlfjelqWJOiUqhPYkpL20XaOMRxEZs,9321
+reconcile/utils/saasherder/interfaces.py,sha256=UG3O5zuamNrP1bgbfhQAtNfN_8W9_iSv7UBESnR-mXE,9363
 reconcile/utils/saasherder/models.py,sha256=iLQZGXMx4FYnK62MJKkVp1T32BpsZ88NOcU7RW0WyAk,5579
-reconcile/utils/saasherder/saasherder.py,sha256=cQhyuBGUbtFL8_1lMDRwnrSaYC88C_ApgcaBruZ7BZ4,87523
+reconcile/utils/saasherder/saasherder.py,sha256=boCEscTR7Vu6Zjjd7pJIQDO5B_gYiOljwgBa_KDUVLM,88141
 reconcile/utils/terraform/__init__.py,sha256=zNbiyTWo35AT1sFTElL2j_AA0jJ_yWE_bfFn-nD2xik,250
 reconcile/utils/terraform/config.py,sha256=5UVrd563TMcvi4ooa5JvWVDW1I3bIWg484u79evfV_8,164
 reconcile/utils/terraform/config_client.py,sha256=py-Ree-QUYD6Hvng6bM40VgSuttteehIKNgwOSoJO1o,4706
@@ -837,8 +837,8 @@ tools/test/test_app_interface_metrics_exporter.py,sha256=SX7qL3D1SIRKFo95FoQztvf
 tools/test/test_qontract_cli.py,sha256=_D61RFGAN5x44CY1tYbouhlGXXABwYfxKSWSQx3Jrss,4941
 tools/test/test_sd_app_sre_alert_report.py,sha256=v363r9zM7__0kR5K6mvJoGFcM9BvE33fWAayrqkpojA,2116
 tools/test/test_sre_checkpoints.py,sha256=SKqPPTl9ua0RFdSSofnoQX-JZE6dFLO3LRhfQzqtfh8,2607
-qontract_reconcile-0.10.1rc878.dist-info/METADATA,sha256=yc6zH-3Cqe1m2HcHSAx5gtwBQGqkbkGv3wpeOBz8b2M,2273
-qontract_reconcile-0.10.1rc878.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
-qontract_reconcile-0.10.1rc878.dist-info/entry_points.txt,sha256=GKQqCl2j2X1BJQ69een6rHcR26PmnxnONLNOQB-nRjY,491
-qontract_reconcile-0.10.1rc878.dist-info/top_level.txt,sha256=l5ISPoXzt0SdR4jVdkfa7RPSKNc8zAHYWAnR-Dw8Ey8,24
-qontract_reconcile-0.10.1rc878.dist-info/RECORD,,
+qontract_reconcile-0.10.1rc880.dist-info/METADATA,sha256=ILC7PTRwvnvvSHK3u1ku0vZpYEjG0uz5cAXZrSYr2w0,2273
+qontract_reconcile-0.10.1rc880.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
+qontract_reconcile-0.10.1rc880.dist-info/entry_points.txt,sha256=GKQqCl2j2X1BJQ69een6rHcR26PmnxnONLNOQB-nRjY,491
+qontract_reconcile-0.10.1rc880.dist-info/top_level.txt,sha256=l5ISPoXzt0SdR4jVdkfa7RPSKNc8zAHYWAnR-Dw8Ey8,24
+qontract_reconcile-0.10.1rc880.dist-info/RECORD,,

reconcile/glitchtip/integration.py

@@ -19,7 +19,7 @@ from reconcile.gql_definitions.glitchtip.glitchtip_project import (
     DEFINITION as GLITCHTIP_PROJECT_DEFINITION,
 )
 from reconcile.gql_definitions.glitchtip.glitchtip_project import (
-    GlitchtipProjectsV1,
+    GlitchtipProjectV1,
     RoleV1,
 )
 from reconcile.gql_definitions.glitchtip.glitchtip_project import (
@@ -87,7 +87,7 @@ def fetch_current_state(
 
 
 def fetch_desired_state(
-    glitchtip_projects: Sequence[GlitchtipProjectsV1],
+    glitchtip_projects: Sequence[GlitchtipProjectV1],
     mail_domain: str,
     internal_groups_client: InternalGroupsClient,
 ) -> list[Organization]:
@@ -143,7 +143,7 @@ def fetch_desired_state(
     return list(organizations.values())
 
 
-def get_glitchtip_projects(query_func: Callable) -> list[GlitchtipProjectsV1]:
+def get_glitchtip_projects(query_func: Callable) -> list[GlitchtipProjectV1]:
     glitchtip_projects = (
         glitchtip_project_query(query_func=query_func).glitchtip_projects or []
     )

reconcile/glitchtip_project_alerts/integration.py

@@ -18,7 +18,7 @@ from reconcile.gql_definitions.glitchtip_project_alerts.glitchtip_project import
     GlitchtipProjectAlertRecipientEmailV1,
     GlitchtipProjectAlertRecipientV1,
     GlitchtipProjectAlertRecipientWebhookV1,
-    GlitchtipProjectsV1,
+    GlitchtipProjectV1,
 )
 from reconcile.gql_definitions.glitchtip_project_alerts.glitchtip_project import (
     query as glitchtip_project_query,
@@ -73,7 +73,7 @@ class GlitchtipProjectAlertsIntegration(
     def get_early_exit_desired_state(self) -> Optional[dict[str, Any]]:
         return {"projects": [c.dict() for c in self.get_projects(gql.get_api().query)]}
 
-    def get_projects(self, query_func: Callable) -> list[GlitchtipProjectsV1]:
+    def get_projects(self, query_func: Callable) -> list[GlitchtipProjectV1]:
         return glitchtip_project_query(query_func=query_func).glitchtip_projects or []
 
     def _build_project_alert_recipient(
@@ -95,7 +95,7 @@ class GlitchtipProjectAlertsIntegration(
 
     def fetch_desired_state(
         self,
-        glitchtip_projects: Iterable[GlitchtipProjectsV1],
+        glitchtip_projects: Iterable[GlitchtipProjectV1],
         gjb_alert_url: str | None,
         gjb_token: str | None,
     ) -> list[Organization]:
@@ -264,7 +264,7 @@ class GlitchtipProjectAlertsIntegration(
         glitchtip_instances = glitchtip_instance_query(
             query_func=gqlapi.query
         ).instances
-        glitchtip_projects_by_instance: dict[str, list[GlitchtipProjectsV1]] = (
+        glitchtip_projects_by_instance: dict[str, list[GlitchtipProjectV1]] = (
             defaultdict(list)
         )
         for glitchtip_project in self.get_projects(query_func=gqlapi.query):

reconcile/glitchtip_project_dsn/integration.py

@@ -20,7 +20,7 @@ from reconcile.gql_definitions.glitchtip.glitchtip_instance import (
 from reconcile.gql_definitions.glitchtip.glitchtip_project import (
     DEFINITION as GLITCHTIP_PROJECT_DEFINITION,
 )
-from reconcile.gql_definitions.glitchtip.glitchtip_project import GlitchtipProjectsV1
+from reconcile.gql_definitions.glitchtip.glitchtip_project import GlitchtipProjectV1
 from reconcile.gql_definitions.glitchtip.glitchtip_project import (
     query as glitchtip_project_query,
 )
@@ -73,7 +73,7 @@ def glitchtip_project_dsn_secret(project: Project, key: ProjectKey) -> dict[str,
 
 
 def fetch_current_state(
-    project: GlitchtipProjectsV1,
+    project: GlitchtipProjectV1,
     oc_map: OCMap,
     ri: ResourceInventory,
 ) -> None:
@@ -110,7 +110,7 @@ def fetch_current_state(
 
 
 def fetch_desired_state(
-    glitchtip_projects: Iterable[GlitchtipProjectsV1],
+    glitchtip_projects: Iterable[GlitchtipProjectV1],
     ri: ResourceInventory,
     glitchtip_client: GlitchtipClient,
 ) -> None:
@@ -145,7 +145,7 @@ def fetch_desired_state(
             )
 
 
-def projects_query(query_func: Callable) -> list[GlitchtipProjectsV1]:
+def projects_query(query_func: Callable) -> list[GlitchtipProjectV1]:
     glitchtip_projects = []
     for project in (
         glitchtip_project_query(query_func=query_func).glitchtip_projects or []

reconcile/gql_definitions/common/saas_files.py

@@ -84,6 +84,7 @@ fragment SaasTargetNamespace on Namespace_v1 {
     }
     codeComponents {
       url
+      blockedVersions
       hotfixVersions
     }
   }
@@ -143,6 +144,7 @@ query SaasFiles {
       }
       codeComponents {
         url
+        blockedVersions
         hotfixVersions
       }
     }
@@ -330,6 +332,7 @@ class OwnerV1(ConfiguredBaseModel):
 
 class AppCodeComponentsV1(ConfiguredBaseModel):
     url: str = Field(..., alias="url")
+    blocked_versions: Optional[list[str]] = Field(..., alias="blockedVersions")
     hotfix_versions: Optional[list[str]] = Field(..., alias="hotfixVersions")
 
 

reconcile/gql_definitions/common/saas_target_namespaces.py

@@ -63,6 +63,7 @@ fragment SaasTargetNamespace on Namespace_v1 {
     }
     codeComponents {
       url
+      blockedVersions
       hotfixVersions
     }
   }

reconcile/gql_definitions/fragments/saas_target_namespace.py

@@ -54,6 +54,7 @@ class OwnerV1(ConfiguredBaseModel):
 
 class AppCodeComponentsV1(ConfiguredBaseModel):
     url: str = Field(..., alias="url")
+    blocked_versions: Optional[list[str]] = Field(..., alias="blockedVersions")
     hotfix_versions: Optional[list[str]] = Field(..., alias="hotfixVersions")
 
 

reconcile/gql_definitions/glitchtip/glitchtip_project.py

@@ -143,7 +143,7 @@ class GlitchtipInstanceV1(ConfiguredBaseModel):
     name: str = Field(..., alias="name")
 
 
-class GlitchtipProjectsV1_GlitchtipOrganizationV1(ConfiguredBaseModel):
+class GlitchtipProjectV1_GlitchtipOrganizationV1(ConfiguredBaseModel):
     name: str = Field(..., alias="name")
     instance: GlitchtipInstanceV1 = Field(..., alias="instance")
     owners: Optional[list[str]] = Field(..., alias="owners")
@@ -180,19 +180,19 @@ class AppV1(ConfiguredBaseModel):
     path: str = Field(..., alias="path")
 
 
-class GlitchtipProjectsV1(ConfiguredBaseModel):
+class GlitchtipProjectV1(ConfiguredBaseModel):
     name: str = Field(..., alias="name")
     platform: str = Field(..., alias="platform")
     project_id: Optional[str] = Field(..., alias="projectId")
     event_throttle_rate: Optional[int] = Field(..., alias="eventThrottleRate")
     teams: list[GlitchtipTeamV1] = Field(..., alias="teams")
-    organization: GlitchtipProjectsV1_GlitchtipOrganizationV1 = Field(..., alias="organization")
+    organization: GlitchtipProjectV1_GlitchtipOrganizationV1 = Field(..., alias="organization")
     namespaces: list[NamespaceV1] = Field(..., alias="namespaces")
     app: Optional[AppV1] = Field(..., alias="app")
 
 
 class ProjectsQueryData(ConfiguredBaseModel):
-    glitchtip_projects: Optional[list[GlitchtipProjectsV1]] = Field(..., alias="glitchtip_projects")
+    glitchtip_projects: Optional[list[GlitchtipProjectV1]] = Field(..., alias="glitchtip_projects")
 
 
 def query(query_func: Callable, **kwargs: Any) -> ProjectsQueryData:

reconcile/gql_definitions/glitchtip_project_alerts/glitchtip_project.py

@@ -122,7 +122,7 @@ class GlitchtipProjectJiraV1(ConfiguredBaseModel):
     labels: Optional[list[str]] = Field(..., alias="labels")
 
 
-class GlitchtipProjectsV1(ConfiguredBaseModel):
+class GlitchtipProjectV1(ConfiguredBaseModel):
     name: str = Field(..., alias="name")
     project_id: Optional[str] = Field(..., alias="projectId")
     organization: GlitchtipOrganizationV1 = Field(..., alias="organization")
@@ -131,7 +131,7 @@ class GlitchtipProjectsV1(ConfiguredBaseModel):
 
 
 class GlitchtipProjectsWithAlertsQueryData(ConfiguredBaseModel):
-    glitchtip_projects: Optional[list[GlitchtipProjectsV1]] = Field(..., alias="glitchtip_projects")
+    glitchtip_projects: Optional[list[GlitchtipProjectV1]] = Field(..., alias="glitchtip_projects")
 
 
 def query(query_func: Callable, **kwargs: Any) -> GlitchtipProjectsWithAlertsQueryData:

reconcile/test/test_saasherder.py

@@ -1354,7 +1354,7 @@ class TestRemoveNoneAttributes(TestCase):
 
 
 @pytest.mark.usefixtures("inject_gql_class_factory")
-class TestPromotionHoxfixVersions(TestCase):
+class TestPromotionBlockedHoxfixVersions(TestCase):
     def setUp(self) -> None:
         self.saas_file = self.gql_class_factory(  # type: ignore[attr-defined] # it's set in the fixture
             SaasFile,
@@ -1382,7 +1382,7 @@ class TestPromotionHoxfixVersions(TestCase):
         self.state_patcher.stop()
         self.promotion_state_patcher.stop()
 
-    def test_hotfix_version_valid_promotion(self) -> None:
+    def test_blocked_hotfix_version_promotion_validity(self) -> None:
         code_component_url = "https://github.com/app-sre/test-saas-deployments"
         hotfix_version = "1234567890123456789012345678901234567890"
         # code_component = self.saas_file.app.code_components[0]
@@ -1408,6 +1408,9 @@ class TestPromotionHoxfixVersions(TestCase):
         self.saasherder.hotfix_versions[code_component_url] = {hotfix_version}
         self.assertTrue(self.saasherder.validate_promotions())
 
+        self.saasherder.blocked_versions[code_component_url] = {hotfix_version}
+        self.assertFalse(self.saasherder.validate_promotions())
+
 
 def test_render_templated_parameters(
     gql_class_factory: Callable[..., SaasFileInterface],

reconcile/utils/saasherder/interfaces.py

@@ -361,6 +361,7 @@ class SaasServiceOwner(Protocol):
 
 class AppCodeComponent(Protocol):
     url: str
+    blocked_versions: Optional[list[str]]
     hotfix_versions: Optional[list[str]]
 
 

reconcile/utils/saasherder/saasherder.py

@@ -150,6 +150,7 @@ class SaasHerder:  # pylint: disable=too-many-public-methods
         self._promotion_state = PromotionState(state=state) if state else None
         self._channel_map = self._assemble_channels(saas_files=all_saas_files)
         self.images: set[str] = set()
+        self.blocked_versions = self._collect_blocked_versions()
         self.hotfix_versions = self._collect_hotfix_versions()
 
         # each namespace is in fact a target,
@@ -1100,6 +1101,14 @@ class SaasHerder:  # pylint: disable=too-many-public-methods
                         channel_map[publish].publisher_uids.append(publisher_uid)
         return channel_map
 
+    def _collect_blocked_versions(self) -> dict[str, set[str]]:
+        blocked_versions: dict[str, set[str]] = {}
+        for saas_file in self.saas_files:
+            for cc in saas_file.app.code_components or []:
+                for v in cc.blocked_versions or []:
+                    blocked_versions.setdefault(cc.url, set()).add(v)
+        return blocked_versions
+
     def _collect_hotfix_versions(self) -> dict[str, set[str]]:
         hotfix_versions: dict[str, set[str]] = {}
         for saas_file in self.saas_files:
@@ -1899,6 +1908,10 @@ class SaasHerder:  # pylint: disable=too-many-public-methods
         if not promotion.subscribe:
             return True
 
+        if promotion.commit_sha in self.blocked_versions.get(promotion.url, set()):
+            logging.error(f"Commit {promotion.commit_sha} is blocked!")
+            return False
+
         # hotfix must run before further gates are evaluated to override them
         if promotion.commit_sha in self.hotfix_versions.get(promotion.url, set()):
             return True