chore(ci): implement setup profiles, matrix setup and cleanup jobs

- Setup profiles: single profile 'sds' with storage class 'sds-replicated-volume'
- Matrix setup (prepare): real setup logic with tools installation, kubeconfig, values preparation
- Cleanup: real cleanup logic for nightly-nested-e2e-* namespaces

Signed-off-by: Anton T. <[email protected]>

Author: Antony

.github/workflows/e2e-matrix.yml

@@ -39,39 +39,152 @@ on:
 permissions:
   contents: read
 
+env:
+  E2E_K8S_URL: https://api.e2e.virtlab.flant.com
+
 jobs:
   setup:
-    name: Setup (skeleton)
+    name: Setup Profiles
     runs-on: ubuntu-latest
     outputs:
       profiles: ${{ steps.profiles.outputs.profiles }}
     steps:
       - uses: actions/checkout@v4
 
-      - name: Set profiles matrix (static)
+      - name: Load storage profiles
         id: profiles
         run: |
-          echo 'profiles=["sds","cephrbd"]' >> "$GITHUB_OUTPUT"
+          # Single profile: sds with storage class sds-replicated-volume
+          echo 'profiles=["sds"]' >> "$GITHUB_OUTPUT"
 
-      - name: Echo planned matrix
+      - name: Print matrix
         run: |
-          echo "Matrix profiles: ${{ steps.profiles.outputs.profiles }}"
+          echo "Will test profiles: ${{ steps.profiles.outputs.profiles }}"
 
   prepare:
-    name: Prepare (${{ matrix.profile }}) [skeleton]
+    name: Matrix Setup (${{ matrix.profile }})
     needs: [setup]
     runs-on: ubuntu-latest
+    timeout-minutes: 300
     concurrency:
       group: prepare-${{ github.ref }}-${{ matrix.profile }}
       cancel-in-progress: true
     strategy:
       fail-fast: false
       matrix:
         profile: ${{ fromJson(needs.setup.outputs.profiles) }}
+
+    env:
+      GO_VERSION: "1.24.6"
+      TMP_ROOT: ${{ github.workspace }}/ci/dvp-e2e/tmp
+      STORAGE_CLASS: sds-replicated-volume
+
+    outputs:
+      run_id: ${{ steps.prep.outputs.run_id }}
+      storage_class: ${{ env.STORAGE_CLASS }}
+
     steps:
-      - name: Echo prepare
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Install Task
+        uses: arduino/setup-task@v2
+        with:
+          version: 3.x
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Install Helm
+        uses: azure/[email protected]
+        with:
+          version: v3.17.2
+
+      - name: Install kubectl
+        uses: azure/setup-kubectl@v4
+        with:
+          version: 'latest'
+
+      - name: Install Deckhouse CLI
+        env:
+          D8_VERSION: v0.13.2
+        run: |
+          set -euo pipefail
+          echo "Installing d8 ${D8_VERSION}..."
+          curl -fsSL -o d8.tgz "https://deckhouse.io/downloads/deckhouse-cli/${D8_VERSION}/d8-${D8_VERSION}-linux-amd64.tar.gz"
+          tar -xzf d8.tgz linux-amd64/bin/d8
+          mv linux-amd64/bin/d8 /usr/local/bin/d8
+          chmod +x /usr/local/bin/d8
+          rm -rf d8.tgz linux-amd64
+          d8 --version
+
+      - name: Install yq
         run: |
-          echo "Prepare stage for profile=${{ matrix.profile }}"
+          echo "Installing yq..."
+          curl -L -o /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/v4.44.1/yq_linux_amd64
+          chmod +x /usr/local/bin/yq
+
+      - name: Prepare environment
+        id: prep
+        run: |
+          RUN_ID="nightly-nested-e2e-${{ matrix.profile }}-$(date +%H%M)"
+          echo "run_id=$RUN_ID" >> "$GITHUB_OUTPUT"
+          echo "RUN_ID=$RUN_ID" >> "$GITHUB_ENV"
+          echo "PROFILE=${{ matrix.profile }}" >> "$GITHUB_ENV"
+          echo "TMP_ROOT=${{ env.TMP_ROOT }}" >> "$GITHUB_ENV"
+          mkdir -p "${{ env.TMP_ROOT }}/shared" "${{ env.TMP_ROOT }}/matrix-logs"
+
+      - name: Build parent kubeconfig from secret
+        shell: bash
+        run: |
+          set -euo pipefail
+          mkdir -p "$HOME/.kube"
+          cat > "$HOME/.kube/config" <<EOF
+          apiVersion: v1
+          kind: Config
+          clusters:
+          - cluster:
+              server: ${E2E_K8S_URL}
+              insecure-skip-tls-verify: true
+            name: parent
+          contexts:
+          - context:
+              cluster: parent
+              user: sa
+            name: parent
+          current-context: parent
+          users:
+          - name: sa
+            user:
+              token: "${{ secrets.E2E_NESTED_SA_SECRET }}"
+          EOF
+          chmod 600 "$HOME/.kube/config"
+          echo "KUBECONFIG=$HOME/.kube/config" >> "$GITHUB_ENV"
+
+      - name: Prepare run values.yaml
+        working-directory: ci/dvp-e2e
+        run: |
+          task run:values:prepare \
+            RUN_ID="${{ env.RUN_ID }}" \
+            RUN_NAMESPACE="${{ env.RUN_ID }}" \
+            RUN_DIR="${{ env.TMP_ROOT }}/runs/${{ env.RUN_ID }}"
+          echo "VALUES_TEMPLATE_FILE=${{ env.TMP_ROOT }}/runs/${{ env.RUN_ID }}/values.yaml" >> $GITHUB_ENV
+
+      - name: Configure storage profile
+        working-directory: ci/dvp-e2e
+        run: |
+          # Set storage profile to sds with storage class sds-replicated-volume
+          PROFILE='sds' yq eval --inplace '.storageProfile = strenv(PROFILE)' "${{ env.TMP_ROOT }}/runs/${{ env.RUN_ID }}/values.yaml"
+          echo "Configured storage profile: sds with storage class: ${STORAGE_CLASS}"
+
+      - name: Upload run context
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: run-context-${{ env.RUN_ID }}
+          path: |
+            ci/dvp-e2e/tmp/runs/${{ env.RUN_ID }}
+            ci/dvp-e2e/tmp/shared
+          if-no-files-found: warn
 
   run-e2e:
     name: E2E (${{ matrix.profile }}) [skeleton]
@@ -87,6 +200,7 @@ jobs:
     steps:
       - name: Echo run
         run: |
+          echo "E2E stage for profile=${{ matrix.profile }} (skeleton - placeholder)"
   report:
     name: Report [skeleton]
     needs: [setup, run-e2e]
@@ -98,11 +212,74 @@ jobs:
           echo "Report stage (skeleton). Collecting results from matrix..."
 
   cleanup:
-    name: Cleanup [skeleton]
+    name: Cleanup Resources
     needs: report
     if: always()
     runs-on: ubuntu-latest
     steps:
-      - name: Echo cleanup
+      - uses: actions/checkout@v4
+
+      - name: Install Task
+        uses: arduino/setup-task@v2
+
+      - name: Install kubectl
+        uses: azure/setup-kubectl@v4
+        with:
+          version: 'latest'
+
+      - name: Build parent kubeconfig from secret (cleanup)
+        shell: bash
+        run: |
+          set -euo pipefail
+          mkdir -p "$HOME/.kube"
+          cat > "$HOME/.kube/config" <<EOF
+          apiVersion: v1
+          kind: Config
+          clusters:
+          - cluster:
+              server: ${E2E_K8S_URL}
+              insecure-skip-tls-verify: true
+            name: parent
+          contexts:
+          - context:
+              cluster: parent
+              user: sa
+            name: parent
+          current-context: parent
+          users:
+          - name: sa
+            user:
+              token: "${{ secrets.E2E_NESTED_SA_SECRET }}"
+          EOF
+          chmod 600 "$HOME/.kube/config"
+          echo "KUBECONFIG=$HOME/.kube/config" >> "$GITHUB_ENV"
+
+      - name: Cleanup test namespaces
+        run: |
+          set -euo pipefail
+          PREFIX="nightly-nested-e2e-"
+          echo "🧹 Cleaning up namespaces matching prefix '${PREFIX}'"
+          mapfile -t CANDIDATES < <(kubectl get ns -o jsonpath='{range .items[*]}{.metadata.name}{"\n"}{end}' | grep "^${PREFIX}" || true)
+          OURS=()
+          for ns in "${CANDIDATES[@]:-}"; do
+            [ -z "$ns" ] && continue
+            if kubectl -n "$ns" get deploy jump-host >/dev/null 2>&1; then
+              OURS+=("$ns")
+            fi
+          done
+          if [ "${#OURS[@]}" -eq 0 ]; then
+            echo "[INFO] No namespaces to delete."
+          else
+            echo "[INFO] Deleting namespaces:"
+            printf ' - %s\n' "${OURS[@]}"
+            for ns in "${OURS[@]}"; do
+              kubectl delete ns "$ns" --wait=false || true
+            done
+          fi
+
+      - name: Report cleanup results
+        if: always()
         run: |
-          echo "Cleanup stage (skeleton). Nothing to do."
+          echo "### Cleanup Results" >> $GITHUB_STEP_SUMMARY
+          echo "✅ Cleanup job completed" >> $GITHUB_STEP_SUMMARY
+          echo "🧹 Attempted to clean up namespaces matching 'nightly-nested-e2e-*'" >> $GITHUB_STEP_SUMMARY