controller-integration-test.yaml

name: Integration Test

on:
  workflow_dispatch:
  push:
    branches:
      - main
  pull_request:

permissions:
  contents: read

jobs:
  integration-test:
    name: Integration Test (${{ matrix.name }})
    runs-on: ${{ matrix.runs-on }}
    timeout-minutes: 30
    strategy:
      fail-fast: false
      matrix:
        include:
          - name: PAT
            runs-on: [self-hosted, linux, arm64]
            features: ../../features/config,../../features/binpath,../../features/jobstore,../../features/vitals,../../features/management
            needs-app-key: false
          - name: GitHub App
            runs-on: [self-hosted, linux, arm64]
            features: ../../features/config,../../features/binpath,../../features/jobstore,../../features/vitals,../../features/management
            needs-app-key: true
          - name: Tart
            runs-on: [self-hosted, macos, arm64]
            features: ../../features/tart
            needs-app-key: false
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-go@v5
        with:
          go-version-file: go.mod

      - uses: pnpm/action-setup@v4
        with:
          version: 9

      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: pnpm
          cache-dependency-path: dashboard/pnpm-lock.yaml

      - name: Build dashboard (required for go:embed)
        run: cd dashboard && pnpm install --frozen-lockfile && pnpm run build

      - name: Write GitHub App private key
        if: matrix.needs-app-key
        run: |
          echo "${{ secrets.EFR_TEST_APP_PRIVATE_KEY }}" > /tmp/efr-test-app-key.pem

      - name: Run integration tests
        env:
          EFR_TEST_CONFIG_URL: ${{ vars.EFR_TEST_CONFIG_URL }}
          EFR_TEST_WORKFLOW_ORG: ${{ vars.EFR_TEST_WORKFLOW_ORG }}
          EFR_TEST_WORKFLOW_REPO: ${{ vars.EFR_TEST_WORKFLOW_REPO }}
          EFR_TEST_WORKFLOW_FILE: ${{ vars.EFR_TEST_WORKFLOW_FILE }}
          EFR_TEST_WORKFLOW_TOKEN: ${{ secrets.EFR_TEST_WORKFLOW_TOKEN }}
          EFR_TEST_PAT: ${{ secrets.EFR_TEST_PAT }}
          EFR_TEST_APP_CLIENT_ID: ${{ secrets.EFR_TEST_APP_CLIENT_ID }}
          EFR_TEST_APP_INSTALLATION_ID: ${{ secrets.EFR_TEST_APP_INSTALLATION_ID }}
          EFR_TEST_APP_PRIVATE_KEY_PATH: ${{ matrix.needs-app-key && '/tmp/efr-test-app-key.pem' || '' }}
          EFR_TEST_FEATURES: ${{ matrix.features }}
        run: go test -tags=integration -count=1 -v -timeout=25m -coverpkg=./... -coverprofile=coverage.out ./test/integration/

      - name: Upload coverage to Codecov
        if: always()
        uses: codecov/codecov-action@v5
        with:
          files: coverage.out
          flags: integration-${{ matrix.name }}
          token: ${{ secrets.CODECOV_TOKEN }}