custard-run-dev.yaml

# Copyright 2024 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

name: (dev) Custard run

on:
  # Run tests when a pull request is created or updated.
  # This allows to run tests from forked repos (after reviewer's approval).
  workflow_run:
    workflows:
      - Custard CI # .github/workflows/custard-ci.yaml
    types:
      - in_progress

  # Run tests again as validation when a PR merge into main.
  push:
    branches:
      - main

  # To do manual runs through the Actions UI.
  workflow_dispatch:
    inputs:
      run-all:
        description: Run all tests
        type: boolean
        default: false
      paths:
        description: Comma separated packages to test
        type: string
      ref:
        description: Branch, tag, or commit SHA to run tests on
        type: string
        default: main

jobs:
  affected:
    uses: GoogleCloudPlatform/cloud-samples-tools/.github/workflows/affected.yaml@9ee708234e240605d96e78f652c333ed6aa95a23 # v0.3.2
    permissions:
      statuses: write
    with:
      head-sha: ${{ github.event.workflow_run.head_sha || inputs.ref || github.sha }}
      config-file: .github/config/nodejs-dev.jsonc
      paths: ${{ (inputs.run-all && '.') || inputs.paths || '' }}
      check-name: (dev) Custard CI / tests
      create-check-if: ${{ !!github.event.workflow_run }}

  test:
    if: needs.affected.outputs.paths != '[]'
    needs: affected
    runs-on: ubuntu-latest
    timeout-minutes: 120 # 2 hours hard limit
    permissions:
      id-token: write
      statuses: write
    strategy:
      fail-fast: false
      matrix:
        path: ${{ needs.affected.outputs.paths }}
    continue-on-error: true
    env:
      GOOGLE_SAMPLES_PROJECT: long-door-651
      SERVICE_ACCOUNT: kokoro-system-test@long-door-651.iam.gserviceaccount.com
    steps:
      - name: Check queued
        uses: GoogleCloudPlatform/cloud-samples-tools/actions/steps/create-check@9ee708234e240605d96e78f652c333ed6aa95a23 # v0.3.2
        id: queued
        with:
          sha: ${{ github.event.workflow_run.head_sha || inputs.ref || github.sha }}
          name: (dev) Custard CI / ${{ github.job }} (${{ matrix.path }})
          job-name: ${{ github.job }} (${{ matrix.path }})
          if: ${{ !!github.event.workflow_run }}
      - name: Checkout
        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
        with:
          ref: ${{ github.event.workflow_run.head_sha || inputs.ref || github.sha }}
      - name: Authenticate
        uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3.0.0
        id: auth
        with:
          project_id: ${{ env.GOOGLE_SAMPLES_PROJECT }}
          workload_identity_provider: projects/1046198160504/locations/global/workloadIdentityPools/github-actions-pool/providers/github-actions-provider
          service_account: ${{ env.SERVICE_ACCOUNT }}
          access_token_lifetime: 600s # 10 minutes
          token_format: id_token
          id_token_audience: https://action.test/ # service must have this custom audience
          id_token_include_email: true
      - name: Setup Custard
        uses: GoogleCloudPlatform/cloud-samples-tools/actions/steps/setup-custard@9ee708234e240605d96e78f652c333ed6aa95a23 # v0.3.2
        with:
          path: ${{ matrix.path }}
          ci-setup: ${{ toJson(fromJson(needs.affected.outputs.ci-setups)[matrix.path]) }}
          id-token: ${{ steps.auth.outputs.id_token }}
      - name: Check in_progress
        uses: GoogleCloudPlatform/cloud-samples-tools/actions/steps/update-check@9ee708234e240605d96e78f652c333ed6aa95a23 # v0.3.2
        id: in_progress
        with:
          check: ${{ steps.queued.outputs.check }}
          status: in_progress
      - name: Run tests for ${{ matrix.path }}
        run: |
          timeout ${{ fromJson(needs.affected.outputs.ci-setups)[matrix.path].timeout-minutes }}m \
            make test dir=${{ matrix.path }}
        env:
          # TODO: remove this when the self-contained runner lands.
          SERVICE_ACCOUNT: kokoro-system-test@long-door-651.iam.gserviceaccount.com
      - name: Check success
        uses: GoogleCloudPlatform/cloud-samples-tools/actions/steps/update-check@9ee708234e240605d96e78f652c333ed6aa95a23 # v0.3.2
        with:
          check: ${{ steps.in_progress.outputs.check }}
          status: success
      - name: Check failure
        uses: GoogleCloudPlatform/cloud-samples-tools/actions/steps/update-check@9ee708234e240605d96e78f652c333ed6aa95a23 # v0.3.2
        if: failure()
        with:
          check: ${{ steps.in_progress.outputs.check }}
          status: failure

  done:
    needs: [affected, test]
    if: always()
    runs-on: ubuntu-latest
    permissions:
      statuses: write
    steps:
      - name: Check success
        uses: GoogleCloudPlatform/cloud-samples-tools/actions/steps/update-check@9ee708234e240605d96e78f652c333ed6aa95a23 # v0.3.2
        with:
          check: ${{ needs.affected.outputs.check }}
          status: success