From e434b9948eaa0cbeec9d2e5b4a84614910450d64 Mon Sep 17 00:00:00 2001
From: fdegier <fdegier@gitlab.com>
Date: Thu, 10 Jul 2025 21:13:48 +0200
Subject: [PATCH] Use service account for converting pipelines

Changelog: changed
EE: true
---
 .../javascripts/ai/components/duo_workflow_action.vue       | 6 ++++++
 ee/app/assets/javascripts/blob/components/blob_header.vue   | 1 +
 ee/spec/frontend/ai/components/duo_workflow_action_spec.js  | 2 ++
 ee/spec/frontend/blob/components/blob_header_spec.js        | 1 +
 4 files changed, 10 insertions(+)

diff --git a/ee/app/assets/javascripts/ai/components/duo_workflow_action.vue b/ee/app/assets/javascripts/ai/components/duo_workflow_action.vue
index b8dd0ccf4d74eb..dc32177cd5e16f 100644
--- a/ee/app/assets/javascripts/ai/components/duo_workflow_action.vue
+++ b/ee/app/assets/javascripts/ai/components/duo_workflow_action.vue
@@ -62,6 +62,11 @@ export default {
       required: false,
       validator: (size) => ['small', 'medium', 'large'].includes(size),
     },
+    useServiceAccount: {
+      type: Boolean,
+      required: false,
+      default: false,
+    },
   },
   methods: {
     startWorkflow() {
@@ -76,6 +81,7 @@ export default {
         environment: FLOW_WEB_ENVIRONMENT,
         workflow_definition: this.workflowDefinition,
         agent_privileges: this.agentPrivileges,
+        use_service_account: this.useServiceAccount,
       };
 
       if (this.currentRef) {
diff --git a/ee/app/assets/javascripts/blob/components/blob_header.vue b/ee/app/assets/javascripts/blob/components/blob_header.vue
index 702724832bc527..068b8c24c9a96c 100644
--- a/ee/app/assets/javascripts/blob/components/blob_header.vue
+++ b/ee/app/assets/javascripts/blob/components/blob_header.vue
@@ -154,6 +154,7 @@ export default {
         workflow-definition="convert_to_gitlab_ci"
         :agent-privileges="agentPrivileges"
         :duo-workflow-invoke-path="duoWorkflowInvokePath"
+        :use-service-account="true"
       />
     </template>
 
diff --git a/ee/spec/frontend/ai/components/duo_workflow_action_spec.js b/ee/spec/frontend/ai/components/duo_workflow_action_spec.js
index a655facac1bd6d..93692229bf99d3 100644
--- a/ee/spec/frontend/ai/components/duo_workflow_action_spec.js
+++ b/ee/spec/frontend/ai/components/duo_workflow_action_spec.js
@@ -31,6 +31,7 @@ describe('DuoWorkflowAction component', () => {
     workflowDefinition: 'convert_to_gitlab_ci',
     agentPrivileges: [1, 2, 5],
     duoWorkflowInvokePath,
+    useServiceAccount: false,
   };
 
   const createComponent = (props = {}, provide = {}) => {
@@ -73,6 +74,7 @@ describe('DuoWorkflowAction component', () => {
       goal: defaultProps.goal,
       workflow_definition: defaultProps.workflowDefinition,
       agent_privileges: defaultProps.agentPrivileges,
+      use_service_account: defaultProps.useServiceAccount,
     };
 
     beforeEach(() => {
diff --git a/ee/spec/frontend/blob/components/blob_header_spec.js b/ee/spec/frontend/blob/components/blob_header_spec.js
index c3ed47f521e9c1..e43bca2cade509 100644
--- a/ee/spec/frontend/blob/components/blob_header_spec.js
+++ b/ee/spec/frontend/blob/components/blob_header_spec.js
@@ -94,6 +94,7 @@ describe('EE Blob Header', () => {
         workflowDefinition: 'convert_to_gitlab_ci',
         agentPrivileges: [1, 2, 5],
         duoWorkflowInvokePath: '/api/duo/workflow',
+        useServiceAccount: true,
       });
 
       expect(getIdFromGraphQLId).toHaveBeenCalledWith('gid://gitlab/Project/123');
-- 
GitLab