From 3741be3529d08442e42c2cfe19d01d437a061365 Mon Sep 17 00:00:00 2001
From: mateo-berri <277851410+mateo-berri@users.noreply.github.com>
Date: Thu, 30 Jul 2026 10:54:42 -0700
Subject: [PATCH 1/3] qa: simulate GitHub OIDC broker outage on the Codecov
 upload step

---
 .github/workflows/_test-unit-base.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/_test-unit-base.yml b/.github/workflows/_test-unit-base.yml
index 7fd66e3325e..a03b6d41320 100644
--- a/.github/workflows/_test-unit-base.yml
+++ b/.github/workflows/_test-unit-base.yml
@@ -154,6 +154,8 @@ jobs:
           merge-multiple: true
 
       - name: Upload to Codecov
+        env:
+          ACTIONS_ID_TOKEN_REQUEST_URL: http://127.0.0.1:9/simulated-oidc-broker-outage
         uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
         with:
           use_oidc: true

From 1e5dc5bf783e90d9c418e0e1ec690a17e5c76486 Mon Sep 17 00:00:00 2001
From: mateo-berri <277851410+mateo-berri@users.noreply.github.com>
Date: Thu, 30 Jul 2026 11:38:13 -0700
Subject: [PATCH 2/3] ci: retry the Codecov upload, with the first attempt
 sabotaged to prove it

---
 .github/workflows/_test-unit-base.yml | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/_test-unit-base.yml b/.github/workflows/_test-unit-base.yml
index a03b6d41320..5de2ee7b121 100644
--- a/.github/workflows/_test-unit-base.yml
+++ b/.github/workflows/_test-unit-base.yml
@@ -154,8 +154,20 @@ jobs:
           merge-multiple: true
 
       - name: Upload to Codecov
-        env:
-          ACTIONS_ID_TOKEN_REQUEST_URL: http://127.0.0.1:9/simulated-oidc-broker-outage
+        id: codecov-upload
+        continue-on-error: true
+        uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
+        with:
+          use_oidc: true
+          directory: simulated-first-attempt-outage
+          disable_search: true
+          root_dir: ${{ github.workspace }}
+          flags: ${{ inputs.artifact-name }}
+          fail_ci_if_error: true
+
+      - name: Upload to Codecov (retry)
+        if: steps.codecov-upload.outcome == 'failure'
+        continue-on-error: true
         uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
         with:
           use_oidc: true

From 325c426d8922535ee0617b97fb8ec03e9a1c8c45 Mon Sep 17 00:00:00 2001
From: mateo-berri <277851410+mateo-berri@users.noreply.github.com>
Date: Thu, 30 Jul 2026 11:50:03 -0700
Subject: [PATCH 3/3] ci: drop the OIDC outage simulation

---
 .github/workflows/_test-unit-base.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/_test-unit-base.yml b/.github/workflows/_test-unit-base.yml
index 5de2ee7b121..cee93bde7f2 100644
--- a/.github/workflows/_test-unit-base.yml
+++ b/.github/workflows/_test-unit-base.yml
@@ -159,11 +159,10 @@ jobs:
         uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
         with:
           use_oidc: true
-          directory: simulated-first-attempt-outage
-          disable_search: true
+          directory: coverage-reports
           root_dir: ${{ github.workspace }}
           flags: ${{ inputs.artifact-name }}
-          fail_ci_if_error: true
+          fail_ci_if_error: false
 
       - name: Upload to Codecov (retry)
         if: steps.codecov-upload.outcome == 'failure'