Skip to content

Add new Github pipeline for integration testing #15

Add new Github pipeline for integration testing

Add new Github pipeline for integration testing #15

Workflow file for this run

# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
name: "Tests"
on:
push:
branches:
- master
pull_request:
branches:
- master
schedule:
- cron: '0 3 * * *'
workflow_dispatch:
inputs:
terraform_version:
description: "Use Terraform 11.4"
required: true
default: 1.11.4
type: string
env:
GOOGLE_APPLICATION_CREDENTIALS: "/home/runner/credentials.json"
PYTEST_ADDOPTS: "--color=yes"
PYTHON_VERSION: "3.12"
TF_PLUGIN_CACHE_DIR: "/home/runner/.terraform.d/plugin-cache"
TFTEST_COPY: 1
DEFAULT_TERRAFORM_FLAVOUR: terraform
DEFAULT_TERRAFORM_VERSION: ${{ inputs.terraform_version || '1.11.4' }}
DEFAULT_TOFU_VERSION: "1.9.0"
jobs:
compute-matrix:
runs-on: ubuntu-latest
outputs:
DEFAULT_TERRAFORM_FLAVOUR: ${{ env.DEFAULT_TERRAFORM_FLAVOUR }}
DEFAULT_TERRAFORM_VERSION: ${{ env.DEFAULT_TERRAFORM_VERSION }}
DEFAULT_TOFU_VERSION: ${{ env.DEFAULT_TOFU_VERSION }}
steps:
- name: Setup TF provider versions
run: echo "Set Terraform provider versions"
- name: Set up uv and python
uses: astral-sh/setup-uv@v6
with:
python-version: ${{ inputs.PYTHON_VERSION }}
enable-cache: true
cache-dependency-glob: |
./pyproject.toml
./uv.lock
get-latest-tag:
runs-on: ubuntu-latest
outputs:
latest_tag: ${{ steps.find_tag.outputs.latest_tag }}
steps:
- name: Checkout repository
uses: actions/checkout@v4
with:
repository: GoogleCloudPlatform/cloud-foundation-fabric
fetch-depth: 0
fetch-tags: true
- name: Run script to find latest tag
id: find_tag
run: |
LATEST_TAG=$(git tag -l 'v*' --sort=-committerdate | head -n 1)
echo ${LATEST_TAG}
echo "latest_tag=${LATEST_TAG}" >> $GITHUB_OUTPUT
- name: Display latest tag
run: |
echo "The latest tag is: ${{ steps.find_tag.outputs.latest_tag }}"
setup-tf-providers:
runs-on: ubuntu-latest
needs:
- compute-matrix
- get-latest-tag
strategy:
matrix:
include:
- flavour: terraform
version: "${{ needs.compute-matrix.outputs.DEFAULT_TERRAFORM_VERSION }}"
- flavour: tofu
version: "${{ needs.compute-matrix.outputs.DEFAULT_TOFU_VERSION }}"
steps:
- uses: actions/checkout@v4
- name: Set up uv and python
uses: astral-sh/setup-uv@v6
with:
python-version: ${{ inputs.PYTHON_VERSION }}
enable-cache: true
cache-dependency-glob: |
./pyproject.toml
./uv.lock
- name: Update reference to Fabric modules (${{ needs.get-latest-tag.outputs.latest_tag }})
shell: bash
run: |
python tools/update_fabric_ref.py . ${{ needs.get-latest-tag.outputs.latest_tag }}
- uses: hashicorp/setup-terraform@v3
if: ${{ matrix.flavour == 'terraform' }}
with:
terraform_version: ${{ matrix.version }}
terraform_wrapper: false
- uses: opentofu/setup-opentofu@v1
if: ${{ matrix.flavour == 'tofu' }}
with:
tofu_version: ${{ matrix.version }}
tofu_wrapper: false
- name: Build lockfile and fetch providers
shell: bash
run: |
mkdir -p ${{ env.TF_PLUGIN_CACHE_DIR }}
echo 'plugin_cache_dir = "${{ env.TF_PLUGIN_CACHE_DIR }}"' | tee -a /home/runner/.terraformrc
echo 'disable_checkpoint = true' | tee -a /home/runner/.terraformrc
# sed -i -e 's/>=\(.*# tftest\)/=\1/g' tools/lockfile/versions.tf
# change terraform version to the one that is running
sed -i 's/required_version = .*$/required_version = ">= ${{ matrix.version }}"/g' tools/lockfile/versions.tf
cd tools/lockfile
${{ matrix.flavour }} init
- name: Upload Terraform provider cache
uses: actions/cache@v4
with:
path: ${{ env.TF_PLUGIN_CACHE_DIR }}
key: ${{ runner.os }}-${{ matrix.flavour }}-${{ matrix.version }}-${{ hashFiles('tools/lockfile/.terraform.lock.hcl') }}
- name: Upload lockfile
uses: actions/upload-artifact@v4
with:
name: lockfile-${{ runner.os }}-${{ matrix.flavour }}-${{ matrix.version }}
path: tools/lockfile/.terraform.lock.hcl
overwrite: true
include-hidden-files: true
tests:
runs-on: ubuntu-latest
needs:
- compute-matrix
- get-latest-tag
- setup-tf-providers
strategy:
matrix:
include:
- flavour: terraform
version: "${{ needs.compute-matrix.outputs.DEFAULT_TERRAFORM_VERSION }}"
- flavour: tofu
version: "${{ needs.compute-matrix.outputs.DEFAULT_TOFU_VERSION }}"
steps:
- uses: actions/checkout@v4
- name: Set up uv and python
uses: astral-sh/setup-uv@v6
with:
python-version: ${{ inputs.PYTHON_VERSION }}
enable-cache: true
cache-dependency-glob: |
./pyproject.toml
./uv.lock
- name: Update reference to Fabric modules (${{ needs.get-latest-tag.outputs.latest_tag }})
shell: bash
run: |
python tools/update_fabric_ref.py . ${{ needs.get-latest-tag.outputs.latest_tag }}
- name: Call composite action tests-setup
uses: ./.github/actions/tests-setup
env:
TERRAFORM: ${{ matrix.flavour }}
with:
PYTHON_VERSION: ${{ env.PYTHON_VERSION }}
TERRAFORM_VERSION: ${{ matrix.version }}
TERRAFORM_FLAVOUR: ${{ matrix.flavour }}
- name: Run tests
env:
TERRAFORM: ${{ matrix.flavour }}
run: uv run pytest -vv ${{ matrix.flavour == 'terraform' && '-n4' || '-n4' }} --tb=line --junit-xml=test-results-raw.xml tests
- name: Create report
uses: ./.github/actions/gen-test-report
if: always()
push-changes:
runs-on: ubuntu-latest
needs:
- get-latest-tag
- tests
if: ${{ needs.tests.result == 'success' }}
steps:
- uses: actions/checkout@v4
- name: Update reference to Fabric modules (${{ needs.get-latest-tag.outputs.latest_tag }})
shell: bash
run: |
python tools/update_fabric_ref.py . ${{ needs.get-latest-tag.outputs.latest_tag }}
- name: Configure Git
run: |
git config user.name "github-actions[bot]"
git config user.email "github-actions[bot]@users.noreply.github.com"
- name: Check for file changes
id: git-status
run: echo "changes=$(git status --porcelain)" >> $GITHUB_OUTPUT
- name: Commit and Push Changes
if: steps.git-status.outputs.changes != ''
run: |
git add .
git commit -m "[Automated commit by GitHub Actions] Reference Fabric ${{ needs.get-latest-tag.outputs.latest_tag }}."
git push