feat: add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration by Copilot · Pull Request #6965 · camunda/connectors

Copilot · 2026-04-15T12:10:44Z

Add operationsengineer and developer to default allowed roles
Apply spotless formatting

…ncesSecurityConfiguration Agent-Logs-Url: https://github.com/camunda/connectors/sessions/04299505-a505-40b8-80c5-e77d2fd49e87 Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com>

Copilot

Pull request overview

Updates the SaaS bundle’s inbound-instances security configuration to widen the default set of roles permitted by camunda.connector.auth.allowed.roles, allowing operationsengineer and developer in addition to the existing roles.

Changes:

Extended the default value of camunda.connector.auth.allowed.roles to include operationsengineer and developer.

johnBgood · 2026-04-15T12:40:59Z

@copilot fix the test, you need to run mvn spotless:apply and commit

Agent-Logs-Url: https://github.com/camunda/connectors/sessions/99b74a1f-85ec-4730-a299-2ba0f7cec3c5 Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com>

Copilot · 2026-04-15T12:43:18Z

@copilot fix the test, you need to run mvn spotless:apply and commit

Done — spotless reformatted the long @Value annotation and the fix is committed in 3b27a2d.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

artifacts.camunda.com
- Triggering command: /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java --enable-native-access=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED -classpath /usr/share/apache-maven-3.9.14/boot/plexus-classworlds-2.9.0.jar -Dclassworlds.conf=/usr/share/apache-maven-3.9.14/bin/m2.conf -Dmaven.home=/usr/share/apache-maven-3.9.14 (dns block)
build.shibboleth.net
- Triggering command: /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java --enable-native-access=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED -classpath /usr/share/apache-maven-3.9.14/boot/plexus-classworlds-2.9.0.jar -Dclassworlds.conf=/usr/share/apache-maven-3.9.14/bin/m2.conf -Dmaven.home=/usr/share/apache-maven-3.9.14 (dns block)
packages.confluent.io
- Triggering command: /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java --enable-native-access=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED -classpath /usr/share/apache-maven-3.9.14/boot/plexus-classworlds-2.9.0.jar -Dclassworlds.conf=/usr/share/apache-maven-3.9.14/bin/m2.conf -Dmaven.home=/usr/share/apache-maven-3.9.14 (dns block)
repository.sonatype.org
- Triggering command: /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.9-10.0.LTS/x64/bin/java --enable-native-access=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED --add-exports jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.text=ALL-UNNAMED --add-opens=java.desktop/java.awt.font=ALL-UNNAMED -classpath /usr/share/apache-maven-3.9.14/boot/plexus-classworlds-2.9.0.jar -Dclassworlds.conf=/usr/share/apache-maven-3.9.14/bin/m2.conf -Dmaven.home=/usr/share/apache-maven-3.9.14 (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

…dInstancesSecurityConfiguration (#6965) * Add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration Agent-Logs-Url: https://github.com/camunda/connectors/sessions/04299505-a505-40b8-80c5-e77d2fd49e87 Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com> * Apply spotless formatting Agent-Logs-Url: https://github.com/camunda/connectors/sessions/99b74a1f-85ec-4730-a299-2ba0f7cec3c5 Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com> (cherry picked from commit f62e589)

team-connectors-int-automation · 2026-04-17T10:31:54Z

Successfully created backport PR for stable/8.7:

[Backport stable/8.7] feat: add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration #6985

…dInstancesSecurityConfiguration (#6965) * Add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration Agent-Logs-Url: https://github.com/camunda/connectors/sessions/04299505-a505-40b8-80c5-e77d2fd49e87 Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com> * Apply spotless formatting Agent-Logs-Url: https://github.com/camunda/connectors/sessions/99b74a1f-85ec-4730-a299-2ba0f7cec3c5 Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com> (cherry picked from commit f62e589)

team-connectors-int-automation · 2026-04-17T10:31:58Z

Successfully created backport PR for stable/8.8:

[Backport stable/8.8] feat: add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration #6986

…dInstancesSecurityConfiguration (#6965) * Add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration Agent-Logs-Url: https://github.com/camunda/connectors/sessions/04299505-a505-40b8-80c5-e77d2fd49e87 Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com> * Apply spotless formatting Agent-Logs-Url: https://github.com/camunda/connectors/sessions/99b74a1f-85ec-4730-a299-2ba0f7cec3c5 Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com> (cherry picked from commit f62e589)

team-connectors-int-automation · 2026-04-17T10:32:01Z

Successfully created backport PR for stable/8.9:

[Backport stable/8.9] feat: add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration #6987

…dInstancesSecurityConfiguration (#6965) (#6985) * Add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration Agent-Logs-Url: https://github.com/camunda/connectors/sessions/04299505-a505-40b8-80c5-e77d2fd49e87 * Apply spotless formatting Agent-Logs-Url: https://github.com/camunda/connectors/sessions/99b74a1f-85ec-4730-a299-2ba0f7cec3c5 --------- (cherry picked from commit f62e589) Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com> Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com>

…dInstancesSecurityConfiguration (#6965) (#6986) * Add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration Agent-Logs-Url: https://github.com/camunda/connectors/sessions/04299505-a505-40b8-80c5-e77d2fd49e87 * Apply spotless formatting Agent-Logs-Url: https://github.com/camunda/connectors/sessions/99b74a1f-85ec-4730-a299-2ba0f7cec3c5 --------- (cherry picked from commit f62e589) Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com> Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com>

…dInstancesSecurityConfiguration (#6965) (#6987) * Add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration Agent-Logs-Url: https://github.com/camunda/connectors/sessions/04299505-a505-40b8-80c5-e77d2fd49e87 * Apply spotless formatting Agent-Logs-Url: https://github.com/camunda/connectors/sessions/99b74a1f-85ec-4730-a299-2ba0f7cec3c5 --------- (cherry picked from commit f62e589) Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com> Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com>

github-actions · 2026-04-22T11:00:40Z

🎉 This pull request has been included in release 8.9.1!

Thank you for your contribution! 🚀

github-actions · 2026-05-05T17:11:11Z

🎉 This pull request has been included in release 8.8.11!

Thank you for your contribution! 🚀

github-actions · 2026-05-05T18:31:56Z

🎉 This pull request has been included in release 8.7.20!

Thank you for your contribution! 🚀

github-actions · 2026-05-11T17:15:54Z

🎉 This pull request has been included in release 8.10.0-alpha1!

Thank you for your contribution! 🚀

Copilot AI assigned Copilot and johnBgood Apr 15, 2026

Copilot created this pull request from a session on behalf of johnBgood April 15, 2026 12:12 View session

Copilot finished work on behalf of johnBgood April 15, 2026 12:12

Copilot AI requested a review from johnBgood April 15, 2026 12:12

johnBgood approved these changes Apr 15, 2026

View reviewed changes

johnBgood marked this pull request as ready for review April 15, 2026 12:14

johnBgood requested a review from a team as a code owner April 15, 2026 12:14

johnBgood requested review from chillleader and Copilot April 15, 2026 12:14

johnBgood added backport stable/8.7 backport stable/8.8 backport stable/8.9 labels Apr 15, 2026

Copilot started reviewing on behalf of johnBgood April 15, 2026 12:15 View session

Copilot AI reviewed Apr 15, 2026

View reviewed changes

johnBgood changed the title ~~Add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration~~ feat: add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration Apr 15, 2026

johnBgood enabled auto-merge April 15, 2026 12:18

Copilot started work on behalf of johnBgood April 15, 2026 12:41 View session

Apply spotless formatting

3b27a2d

Agent-Logs-Url: https://github.com/camunda/connectors/sessions/99b74a1f-85ec-4730-a299-2ba0f7cec3c5 Co-authored-by: johnBgood <1797846+johnBgood@users.noreply.github.com>

auto-merge was automatically disabled April 15, 2026 12:43
Head branch was pushed to by a user without write access

Copilot AI requested a review from johnBgood April 15, 2026 12:43

Copilot finished work on behalf of johnBgood April 15, 2026 12:43

johnBgood enabled auto-merge April 16, 2026 12:24

chillleader approved these changes Apr 17, 2026

View reviewed changes

johnBgood added this pull request to the merge queue Apr 17, 2026

Merged via the queue into main with commit f62e589 Apr 17, 2026
33 of 34 checks passed

johnBgood deleted the copilot/add-operationsengineer-developer-to-security-confi branch April 17, 2026 10:31

team-connectors-int-automation Bot mentioned this pull request Apr 17, 2026

[Backport stable/8.7] feat: add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration #6985

Merged

team-connectors-int-automation Bot mentioned this pull request Apr 17, 2026

[Backport stable/8.8] feat: add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration #6986

Merged

team-connectors-int-automation Bot mentioned this pull request Apr 17, 2026

[Backport stable/8.9] feat: add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration #6987

Merged

github-actions Bot added the version:8.9.1 Released in version 8.9.1 label Apr 22, 2026

github-actions Bot added the version:8.8.11 Released in version 8.8.11 label May 5, 2026

github-actions Bot added the version:8.10.0-alpha1 Released in version 8.10.0-alpha1 label May 11, 2026

johnBgood added the version:8.7.20 Released in version 8.7.20 label May 12, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration#6965

feat: add operationsengineer and developer to allowed roles in InboundInstancesSecurityConfiguration#6965
johnBgood merged 2 commits into
mainfrom
copilot/add-operationsengineer-developer-to-security-confi

Copilot AI commented Apr 15, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

johnBgood commented Apr 15, 2026

Uh oh!

Copilot AI commented Apr 15, 2026 •

edited

Loading

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Uh oh!

team-connectors-int-automation Bot commented Apr 17, 2026

Uh oh!

team-connectors-int-automation Bot commented Apr 17, 2026

Uh oh!

team-connectors-int-automation Bot commented Apr 17, 2026

Uh oh!

github-actions Bot commented Apr 22, 2026

Uh oh!

github-actions Bot commented May 5, 2026

Uh oh!

github-actions Bot commented May 5, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

Copilot AI commented Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

johnBgood commented Apr 15, 2026

Uh oh!

Copilot AI commented Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Uh oh!

team-connectors-int-automation Bot commented Apr 17, 2026

Uh oh!

team-connectors-int-automation Bot commented Apr 17, 2026

Uh oh!

team-connectors-int-automation Bot commented Apr 17, 2026

Uh oh!

github-actions Bot commented Apr 22, 2026

Uh oh!

github-actions Bot commented May 5, 2026

Uh oh!

github-actions Bot commented May 5, 2026

Uh oh!

github-actions Bot commented May 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Copilot AI commented Apr 15, 2026 •

edited

Loading

Copilot AI commented Apr 15, 2026 •

edited

Loading