ci: manual job to block pipeline start

.gitlab-ci.yml

@@ -21,6 +21,7 @@ include:
   - '.gitlab/ci/danger.yml'
   - '.gitlab/ci/common.yml'
   - '.gitlab/ci/rules.yml'
+  - '.gitlab/ci/manual_gate.yml'
   - '.gitlab/ci/upload_cache.yml'
   - '.gitlab/ci/docs.yml'
   - '.gitlab/ci/static-code-analysis.yml'

.gitlab/ci/build.yml

@@ -225,7 +225,9 @@ build_docker:
     - .before_script:minimal
     - .rules:build:docker
   stage: host_test
-  needs: []
+  needs:
+    - job: manual_gate
+      optional: true
   image: espressif/docker-builder:1
   tags: [shiny, dind]
   variables:

.gitlab/ci/common.yml

@@ -2,6 +2,7 @@
 # Default Variables #
 #####################
 stages:
+  - manual_gate
   - upload_cache
   - pre_check
   - build

.gitlab/ci/integration_test.yml

@@ -39,6 +39,8 @@ gen_integration_pipeline:
     SUBMODULES_TO_FETCH: "none"
     GIT_LFS_SKIP_SMUDGE: 1
   needs:
+    - job: manual_gate
+      optional: true
     - job: fast_template_app
       artifacts: false
       optional: true

.gitlab/ci/manual_gate.yml

@@ -0,0 +1,11 @@
+manual_gate:
+  stage: manual_gate
+  image: $ESP_ENV_IMAGE
+  tags: [fast_run, shiny]
+  allow_failure: false
+  rules:
+    - if: '($CI_COMMIT_REF_NAME == "master" || $CI_COMMIT_BRANCH =~ /^release\/v/) && $CI_PIPELINE_SOURCE == "push"'
+      when: manual
+    - when: never
+  script:
+    - echo "Manual approval received for master pipeline."

.gitlab/ci/test-win.yml

@@ -47,6 +47,7 @@ test_tools_win:
   extends:
     - .host_test_win_template
     - .rules:labels:windows_pytest_build_system
+  parallel: 4
   artifacts:
     paths:
       - ${IDF_PATH}/*.out
@@ -89,9 +90,11 @@ pytest_build_system_win:
     - .test_build_system_template_win
     - .rules:labels:windows_pytest_build_system
   parallel: 2
-  needs: []
   tags:
     - windows-build
+  needs:
+    - job: manual_gate
+      optional: true
   artifacts:
     paths:
       - XUNIT_RESULT.xml