Move to python scripts #14
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright 2025 Google LLC | ||
| # | ||
| # Licensed under the Apache License, Version 2.0 (the "License"); | ||
| # you may not use this file except in compliance with the License. | ||
| # You may obtain a copy of the License at | ||
| # | ||
| # http://www.apache.org/licenses/LICENSE-2.0 | ||
| # | ||
| # Unless required by applicable law or agreed to in writing, software | ||
| # distributed under the License is distributed on an "AS IS" BASIS, | ||
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| # See the License for the specific language governing permissions and | ||
| # limitations under the License. | ||
| name: "Tests" | ||
| on: | ||
| push: | ||
| branches: | ||
| - master | ||
| pull_request: | ||
| branches: | ||
| - master | ||
| schedule: | ||
| - cron: '0 3 * * *' | ||
| workflow_dispatch: | ||
| inputs: | ||
| terraform_version: | ||
| description: "Use Terraform 11.4" | ||
| required: true | ||
| default: 1.11.4 | ||
| type: string | ||
| env: | ||
| GOOGLE_APPLICATION_CREDENTIALS: "/home/runner/credentials.json" | ||
| PYTEST_ADDOPTS: "--color=yes" | ||
| PYTHON_VERSION: "3.12" | ||
| TF_PLUGIN_CACHE_DIR: "/home/runner/.terraform.d/plugin-cache" | ||
| TFTEST_COPY: 1 | ||
| DEFAULT_TERRAFORM_FLAVOUR: terraform | ||
| DEFAULT_TERRAFORM_VERSION: ${{ inputs.terraform_version || '1.11.4' }} | ||
| DEFAULT_TOFU_VERSION: "1.9.0" | ||
| jobs: | ||
| compute-matrix: | ||
| runs-on: ubuntu-latest | ||
| outputs: | ||
| DEFAULT_TERRAFORM_FLAVOUR: ${{ env.DEFAULT_TERRAFORM_FLAVOUR }} | ||
| DEFAULT_TERRAFORM_VERSION: ${{ env.DEFAULT_TERRAFORM_VERSION }} | ||
| DEFAULT_TOFU_VERSION: ${{ env.DEFAULT_TOFU_VERSION }} | ||
| steps: | ||
| - name: Setup TF provider versions | ||
| run: echo "Set Terraform provider versions" | ||
| - name: Set up uv and python | ||
| uses: astral-sh/setup-uv@v6 | ||
| with: | ||
| python-version: ${{ inputs.PYTHON_VERSION }} | ||
| enable-cache: true | ||
| cache-dependency-glob: | | ||
| ./pyproject.toml | ||
| ./uv.lock | ||
| get-latest-tag: | ||
| runs-on: ubuntu-latest | ||
| outputs: | ||
| latest_tag: ${{ steps.find_tag.outputs.latest_tag }} | ||
| steps: | ||
| - name: Checkout repository | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| repository: GoogleCloudPlatform/cloud-foundation-fabric | ||
| fetch-depth: 0 | ||
| fetch-tags: true | ||
| - name: Run script to find latest tag | ||
| id: find_tag | ||
| run: | | ||
| LATEST_TAG=$(git tag -l 'v*' --sort=-committerdate | head -n 1) | ||
| echo ${LATEST_TAG} | ||
| echo "latest_tag=${LATEST_TAG}" >> $GITHUB_OUTPUT | ||
| - name: Display latest tag | ||
| run: | | ||
| echo "The latest tag is: ${{ steps.find_tag.outputs.latest_tag }}" | ||
| setup-tf-providers: | ||
| runs-on: ubuntu-latest | ||
| needs: | ||
| - compute-matrix | ||
| - get-latest-tag | ||
| strategy: | ||
| matrix: | ||
| include: | ||
| - flavour: terraform | ||
| version: "${{ needs.compute-matrix.outputs.DEFAULT_TERRAFORM_VERSION }}" | ||
| - flavour: tofu | ||
| version: "${{ needs.compute-matrix.outputs.DEFAULT_TOFU_VERSION }}" | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - name: Set up uv and python | ||
| uses: astral-sh/setup-uv@v6 | ||
| with: | ||
| python-version: ${{ inputs.PYTHON_VERSION }} | ||
| enable-cache: true | ||
| cache-dependency-glob: | | ||
| ./pyproject.toml | ||
| ./uv.lock | ||
| - name: Update reference to Fabric modules (${{ needs.get-latest-tag.outputs.latest_tag }}) | ||
| shell: bash | ||
| run: | | ||
| python tools/update_fabric_ref.py . ${{ needs.get-latest-tag.outputs.latest_tag }} | ||
| - uses: hashicorp/setup-terraform@v3 | ||
| if: ${{ matrix.flavour == 'terraform' }} | ||
| with: | ||
| terraform_version: ${{ matrix.version }} | ||
| terraform_wrapper: false | ||
| - uses: opentofu/setup-opentofu@v1 | ||
| if: ${{ matrix.flavour == 'tofu' }} | ||
| with: | ||
| tofu_version: ${{ matrix.version }} | ||
| tofu_wrapper: false | ||
| - name: Build lockfile and fetch providers | ||
| shell: bash | ||
| run: | | ||
| mkdir -p ${{ env.TF_PLUGIN_CACHE_DIR }} | ||
| echo 'plugin_cache_dir = "${{ env.TF_PLUGIN_CACHE_DIR }}"' | tee -a /home/runner/.terraformrc | ||
| echo 'disable_checkpoint = true' | tee -a /home/runner/.terraformrc | ||
| # sed -i -e 's/>=\(.*# tftest\)/=\1/g' tools/lockfile/versions.tf | ||
| # change terraform version to the one that is running | ||
| sed -i 's/required_version = .*$/required_version = ">= ${{ matrix.version }}"/g' tools/lockfile/versions.tf | ||
| cd tools/lockfile | ||
| ${{ matrix.flavour }} init | ||
| - name: Upload Terraform provider cache | ||
| uses: actions/cache@v4 | ||
| with: | ||
| path: ${{ env.TF_PLUGIN_CACHE_DIR }} | ||
| key: ${{ runner.os }}-${{ matrix.flavour }}-${{ matrix.version }}-${{ hashFiles('tools/lockfile/.terraform.lock.hcl') }} | ||
| - name: Upload lockfile | ||
| uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: lockfile-${{ runner.os }}-${{ matrix.flavour }}-${{ matrix.version }} | ||
| path: tools/lockfile/.terraform.lock.hcl | ||
| overwrite: true | ||
| include-hidden-files: true | ||
| tests: | ||
| runs-on: ubuntu-latest | ||
| needs: | ||
| - compute-matrix | ||
| - get-latest-tag | ||
| - setup-tf-providers | ||
| strategy: | ||
| matrix: | ||
| include: | ||
| - flavour: terraform | ||
| version: "${{ needs.compute-matrix.outputs.DEFAULT_TERRAFORM_VERSION }}" | ||
| - flavour: tofu | ||
| version: "${{ needs.compute-matrix.outputs.DEFAULT_TOFU_VERSION }}" | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - name: Set up uv and python | ||
| uses: astral-sh/setup-uv@v6 | ||
| with: | ||
| python-version: ${{ inputs.PYTHON_VERSION }} | ||
| enable-cache: true | ||
| cache-dependency-glob: | | ||
| ./pyproject.toml | ||
| ./uv.lock | ||
| - name: Update reference to Fabric modules (${{ needs.get-latest-tag.outputs.latest_tag }}) | ||
| shell: bash | ||
| run: | | ||
| python tools/update_fabric_ref.py . ${{ needs.get-latest-tag.outputs.latest_tag }} | ||
| - name: Call composite action tests-setup | ||
| uses: ./.github/actions/tests-setup | ||
| env: | ||
| TERRAFORM: ${{ matrix.flavour }} | ||
| with: | ||
| PYTHON_VERSION: ${{ env.PYTHON_VERSION }} | ||
| TERRAFORM_VERSION: ${{ matrix.version }} | ||
| TERRAFORM_FLAVOUR: ${{ matrix.flavour }} | ||
| - name: Run tests | ||
| env: | ||
| TERRAFORM: ${{ matrix.flavour }} | ||
| run: uv run pytest -vv ${{ matrix.flavour == 'terraform' && '-n4' || '-n4' }} --tb=line --junit-xml=test-results-raw.xml tests | ||
| - name: Create report | ||
| uses: ./.github/actions/gen-test-report | ||
| if: always() | ||
| push-changes: | ||
| runs-on: ubuntu-latest | ||
| needs: | ||
| - get-latest-tag | ||
| - tests | ||
| if: ${{ needs.tests.result == 'success' }} | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - name: Update reference to Fabric modules (${{ needs.get-latest-tag.outputs.latest_tag }}) | ||
| shell: bash | ||
| run: | | ||
| python tools/update_fabric_ref.py . ${{ needs.get-latest-tag.outputs.latest_tag }} | ||
| - name: Configure Git | ||
| run: | | ||
| git config user.name "github-actions[bot]" | ||
| git config user.email "github-actions[bot]@users.noreply.github.com" | ||
| - name: Check for file changes | ||
| id: git-status | ||
| run: echo "changes=$(git status --porcelain)" >> $GITHUB_OUTPUT | ||
| - name: Commit and Push Changes | ||
| if: steps.git-status.outputs.changes != '' | ||
| run: | | ||
| git add . | ||
| git commit -m "[Automated commit by GitHub Actions] Reference Fabric ${{ needs.get-latest-tag.outputs.latest_tag }}." | ||
| git push | ||
