From 2cf338b3b94c64a9ed3cc595593fd50be8f88fea Mon Sep 17 00:00:00 2001
From: Thomas Heute <theute@redhat.com>
Date: Fri, 29 May 2026 12:12:24 +0200
Subject: [PATCH 1/2] Protect finops-tools branches

---
 .../finops-tools/_pluginconfig.yaml           | 53 +++++++++++++++++++
 .../finops-tools/_prowconfig.yaml             | 33 ++++++++++++
 2 files changed, 86 insertions(+)
 create mode 100644 core-services/prow/02_config/openshift-online/finops-tools/_pluginconfig.yaml
 create mode 100644 core-services/prow/02_config/openshift-online/finops-tools/_prowconfig.yaml

diff --git a/core-services/prow/02_config/openshift-online/finops-tools/_pluginconfig.yaml b/core-services/prow/02_config/openshift-online/finops-tools/_pluginconfig.yaml
new file mode 100644
index 0000000000000..58bfc31ea9ef7
--- /dev/null
+++ b/core-services/prow/02_config/openshift-online/finops-tools/_pluginconfig.yaml
@@ -0,0 +1,53 @@
+approve:
+- repos:
+  - openshift-online/finops-tools
+  require_self_approval: false
+external_plugins:
+  openshift-online/finops-tools:
+  - endpoint: http://refresh
+    events:
+    - issue_comment
+    name: refresh
+  - endpoint: http://needs-rebase
+    events:
+    - issue_comment
+    - pull_request
+    name: needs-rebase
+lgtm:
+- repos:
+  - openshift-online/finops-tools
+  review_acts_as_lgtm: true
+plugins:
+  openshift-online/finops-tools:
+    plugins:
+    - assign
+    - blunderbuss
+    - cat
+    - dog
+    - heart
+    - golint
+    - goose
+    - help
+    - hold
+    - label
+    - lgtm
+    - lifecycle
+    - override
+    - pony
+    - retitle
+    - shrug
+    - sigmention
+    - skip
+    - trigger
+    - verify-owners
+    - owners-label
+    - wip
+    - yuks
+    - approve
+triggers:
+- org_invite:
+    prominent: {}
+  repos:
+  - openshift-online/finops-tools
+  trusted_apps:
+  - openshift-merge-bot
diff --git a/core-services/prow/02_config/openshift-online/finops-tools/_prowconfig.yaml b/core-services/prow/02_config/openshift-online/finops-tools/_prowconfig.yaml
new file mode 100644
index 0000000000000..c68cd0cc6ec4b
--- /dev/null
+++ b/core-services/prow/02_config/openshift-online/finops-tools/_prowconfig.yaml
@@ -0,0 +1,33 @@
+branch-protection:
+  orgs:
+    openshift-online:
+      repos:
+        finops-tools:
+          branches:
+            main:
+              protect: true
+              enforce_admins: true
+              required_pull_request_reviews:
+                dismiss_stale_reviews: true
+                required_approving_review_count: 1
+          restrictions:
+            teams:
+            - openshift-bots
+tide:
+  merge_method:
+    openshift-online/finops-tools: squash
+  queries:
+  - includedBranches:
+    - main
+    labels:
+    - approved
+    - lgtm
+    missingLabels:
+    - backports/unvalidated-commits
+    - do-not-merge/hold
+    - do-not-merge/invalid-owners-file
+    - do-not-merge/work-in-progress
+    - jira/invalid-bug
+    - needs-rebase
+    repos:
+    - openshift-online/finops-tools

From de635d2f38f9f3049a5bee3c3c44e60e7fb194f1 Mon Sep 17 00:00:00 2001
From: Thomas Heute <theute@redhat.com>
Date: Fri, 29 May 2026 12:37:38 +0200
Subject: [PATCH 2/2] Fix the ordering

---
 .../02_config/openshift-online/finops-tools/_prowconfig.yaml    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core-services/prow/02_config/openshift-online/finops-tools/_prowconfig.yaml b/core-services/prow/02_config/openshift-online/finops-tools/_prowconfig.yaml
index c68cd0cc6ec4b..4a5d952e52f30 100644
--- a/core-services/prow/02_config/openshift-online/finops-tools/_prowconfig.yaml
+++ b/core-services/prow/02_config/openshift-online/finops-tools/_prowconfig.yaml
@@ -5,8 +5,8 @@ branch-protection:
         finops-tools:
           branches:
             main:
-              protect: true
               enforce_admins: true
+              protect: true
               required_pull_request_reviews:
                 dismiss_stale_reviews: true
                 required_approving_review_count: 1