From e4c58487591cc69b7a2c8f908b71058c077908e4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aur=C3=A9lien=20Sibiril?=
 <81782+aureliensibiril@users.noreply.github.com>
Date: Sun, 12 Jul 2026 19:54:25 +0200
Subject: [PATCH] Retry transient failures in the Dotfile driver
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The Square, Segment and Google Analytics drivers all wrap their transport
with retryRoundTripper for flaky 5xx responses, but the Dotfile driver used
the client directly. Wrap it the same way so all four connectors handle
transient upstream failures consistently.

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
---
 pkg/accessreview/drivers/dotfile.go | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/pkg/accessreview/drivers/dotfile.go b/pkg/accessreview/drivers/dotfile.go
index d1f2554b4..9272166b5 100644
--- a/pkg/accessreview/drivers/dotfile.go
+++ b/pkg/accessreview/drivers/dotfile.go
@@ -65,7 +65,14 @@ type dotfileUsersResponse struct {
 }
 
 func NewDotfileDriver(httpClient *http.Client) *DotfileDriver {
-	return &DotfileDriver{httpClient: httpClient}
+	return &DotfileDriver{
+		httpClient: &http.Client{
+			Transport: &retryRoundTripper{
+				next:       httpClient.Transport,
+				maxRetries: 3,
+			},
+		},
+	}
 }
 
 func (d *DotfileDriver) ListAccounts(ctx context.Context) ([]AccountRecord, error) {