From 5855665a35a3443b825c0eb8d6acc1c371f6337f Mon Sep 17 00:00:00 2001
From: "igor.udot" <igor.udot@espressif.com>
Date: Thu, 12 Mar 2026 09:51:47 +0800
Subject: [PATCH] ci: manual job to block pipeline start

---
 .gitlab-ci.yml                  |  1 +
 .gitlab/ci/common.yml           |  1 +
 .gitlab/ci/host-test.yml        |  4 +++-
 .gitlab/ci/integration_test.yml |  2 ++
 .gitlab/ci/manual_gate.yml      | 11 +++++++++++
 .gitlab/ci/test-win.yml         | 12 +++++++++---
 6 files changed, 27 insertions(+), 4 deletions(-)
 create mode 100644 .gitlab/ci/manual_gate.yml

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index e55ad1825dd..1c95ffaadd4 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -9,6 +9,7 @@ include:
   - ".gitlab/ci/danger.yml"
   - ".gitlab/ci/common.yml"
   - ".gitlab/ci/rules.yml"
+  - ".gitlab/ci/manual_gate.yml"
   - ".gitlab/ci/upload_cache.yml"
   - ".gitlab/ci/docs.yml"
   - ".gitlab/ci/static-code-analysis.yml"
diff --git a/.gitlab/ci/common.yml b/.gitlab/ci/common.yml
index 0cd6b5b320b..38b38bb1a2b 100644
--- a/.gitlab/ci/common.yml
+++ b/.gitlab/ci/common.yml
@@ -2,6 +2,7 @@
 # Default Variables #
 #####################
 stages:
+  - manual_gate
   - upload_cache
   - pre_check
   - build
diff --git a/.gitlab/ci/host-test.yml b/.gitlab/ci/host-test.yml
index 97a0ab0f614..6d32d7c82e4 100644
--- a/.gitlab/ci/host-test.yml
+++ b/.gitlab/ci/host-test.yml
@@ -301,7 +301,9 @@ build_docker:
     - .before_script:minimal
     - .rules:build:docker
   stage: host_test
-  needs: []
+  needs:
+    - job: manual_gate
+      optional: true
   image: espressif/docker-builder:1
   tags: [shiny, dind]
   variables:
diff --git a/.gitlab/ci/integration_test.yml b/.gitlab/ci/integration_test.yml
index 2be6e42ebb8..f08889ea3d3 100644
--- a/.gitlab/ci/integration_test.yml
+++ b/.gitlab/ci/integration_test.yml
@@ -39,6 +39,8 @@ gen_integration_pipeline:
     SUBMODULES_TO_FETCH: "none"
     GIT_LFS_SKIP_SMUDGE: 1
   needs:
+    - job: manual_gate
+      optional: true
     - job: fast_template_app
       artifacts: false
       optional: true
diff --git a/.gitlab/ci/manual_gate.yml b/.gitlab/ci/manual_gate.yml
new file mode 100644
index 00000000000..d22fb140cfb
--- /dev/null
+++ b/.gitlab/ci/manual_gate.yml
@@ -0,0 +1,11 @@
+manual_gate:
+  stage: manual_gate
+  image: $ESP_ENV_IMAGE
+  tags: [fast_run, shiny]
+  allow_failure: false
+  rules:
+    - if: '($CI_COMMIT_REF_NAME == "master" || $CI_COMMIT_BRANCH =~ /^release\/v/) && $CI_PIPELINE_SOURCE == "push"'
+      when: manual
+    - when: never
+  script:
+    - echo "Manual approval received for master pipeline."
diff --git a/.gitlab/ci/test-win.yml b/.gitlab/ci/test-win.yml
index 2eceab04ba4..c617358959f 100644
--- a/.gitlab/ci/test-win.yml
+++ b/.gitlab/ci/test-win.yml
@@ -94,7 +94,9 @@ pytest_build_system_win:
     - .test_build_system_template_win
     - .rules:labels:windows_pytest_build_system
   parallel: 6
-  needs: []
+  needs:
+    - job: manual_gate
+      optional: true
   tags: [windows-build, brew]
   artifacts:
     paths:
@@ -109,7 +111,9 @@ pytest_build_system_win_minimal_cmake:
   extends:
     - .test_build_system_template_win
     - .rules:labels:windows_pytest_build_system
-  needs: []
+  needs:
+    - job: manual_gate
+      optional: true
   tags: [windows-build, brew]
   artifacts:
     paths:
@@ -142,7 +146,9 @@ pytest_buildv2_system_win:
     - .test_build_system_template_win
     - .rules:labels:buildv2
   parallel: 2
-  needs: []
+  needs:
+    - job: manual_gate
+      optional: true
   tags: [windows-build, brew]
   artifacts:
     paths: