ci: remove integration test --test-it infrastructure (#6043)

Co-authored-by: hisImminence <55736962+hisImminence@users.noreply.github.com>

Author: eamonnmoloney

.github/actions/generate-chart-matrix/action.yaml

@@ -78,18 +78,37 @@ runs:
     - name: Get chart versions
       id: get-chart-versions
       uses: ./.github/actions/get-chart-versions
+    - name: Restore deploy-camunda binary
+      id: binary-cache
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
+      with:
+        path: ~/.local/bin/deploy-camunda
+        key: deploy-camunda-v2-${{ runner.os }}-${{ hashFiles('scripts/deploy-camunda/**/*.go', 'scripts/deploy-camunda/go.sum') }}
     - name: Setup Go
+      if: steps.binary-cache.outputs.cache-hit != 'true'
       uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
       with:
         go-version-file: scripts/deploy-camunda/go.mod
         cache: true
         cache-dependency-path: scripts/deploy-camunda/go.sum
     - name: Build deploy-camunda
+      if: steps.binary-cache.outputs.cache-hit != 'true'
       shell: bash
       run: |
         mkdir -p "$HOME/.local/bin"
-        (cd scripts/deploy-camunda && go build -o "$HOME/.local/bin/deploy-camunda" .)
-        echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+        # CGO_ENABLED=0 produces a static binary so it runs unchanged inside the
+        # ci-runner container used by downstream matrix jobs.
+        (cd scripts/deploy-camunda && CGO_ENABLED=0 go build -o "$HOME/.local/bin/deploy-camunda" .)
+    - name: Export deploy-camunda to PATH
+      shell: bash
+      run: echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+    - name: Upload deploy-camunda binary
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+      with:
+        name: deploy-camunda-binary
+        path: ~/.local/bin/deploy-camunda
+        if-no-files-found: error
+        retention-days: 1
     - name: Generate matrix
       shell: bash
       id: set-chart-versions

.github/workflows/renovate-config-check.yaml

@@ -29,9 +29,11 @@ jobs:
         args: renovate-config-validator
 
     - name: Set up Go
-      uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
+      uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
       with:
         go-version-file: scripts/renovate-config-check/go.mod
+        cache: true
+        cache-dependency-path: scripts/renovate-config-check/go.sum
 
     - name: Validate alpha versioning consistency
       working-directory: scripts/renovate-config-check

.github/workflows/test-chart-version-template.yaml

@@ -117,11 +117,6 @@ on:
         required: false
         default: false
         type: boolean
-      skip-it:
-        description: "Skip integration (Playwright IT) tests for this scenario"
-        required: false
-        default: false
-        type: boolean
       helm-version:
         description: "Helm version to install. Empty means use the pre-baked Helm from the CI runner image."
         required: false
@@ -219,7 +214,6 @@ jobs:
       test-qa: ${{ inputs.test-qa }}
       test-upgrade: ${{ inputs.test-upgrade }}
       skip-e2e: ${{ inputs.skip-e2e }}
-      skip-it: ${{ inputs.skip-it }}
       helm-version: ${{ inputs.helm-version }}
       pr-head-sha: ${{ inputs.pr-head-sha }}
       camunda-version: ${{ inputs.camunda-version }}

.github/workflows/test-chart-version.yaml

@@ -191,8 +191,11 @@ jobs:
         uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
           go-version-file: scripts/ci-result-cache/go.mod
-          cache: true
-          cache-dependency-path: scripts/ci-result-cache/go.sum
+          # Cache disabled: the previous setup-go invocation (in the
+          # generate-chart-matrix composite) already populated GOMODCACHE
+          # with overlapping packages. Restoring a second cache on top of
+          # the first triggers tar "File exists" errors.
+          cache: false
 
       - name: Annotate matrix with cache status
         id: annotate-cache
@@ -299,7 +302,6 @@ jobs:
       test-qa: ${{ matrix.qa == 'true' }}
       test-upgrade: ${{ matrix.upgrade == 'true' }}
       skip-e2e: ${{ matrix.skipE2E == 'true' }}
-      skip-it: ${{ matrix.skipIT == 'true' }}
       helm-version: ${{ matrix.helmVersion }}
       cached: ${{ matrix.cached == 'true' }}
       pr-head-sha: ${{ needs.init.outputs.pr-head-sha }}

.github/workflows/test-integration-runner.yaml

@@ -139,11 +139,6 @@ on:
         required: false
         default: false
         type: boolean
-      skip-it:
-        description: "Skip integration (Playwright IT) tests for this scenario (declared in ci-test-config.yaml)"
-        required: false
-        default: false
-        type: boolean
       pr-head-sha:
         description: "PR HEAD commit SHA for recording cache results"
         required: false
@@ -337,6 +332,16 @@ jobs:
       - name: CI Setup - Configure Git safe directory
         run: git config --global --add safe.directory "${GITHUB_WORKSPACE}"
 
+      - name: Download deploy-camunda binary
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        with:
+          name: deploy-camunda-binary
+          path: ${{ runner.temp }}/bin
+      - name: Add deploy-camunda to PATH
+        run: |
+          chmod +x "${RUNNER_TEMP}/bin/deploy-camunda"
+          echo "${RUNNER_TEMP}/bin" >> "$GITHUB_PATH"
+
       - name: Configure curl and wget
         uses: ./.github/actions/setup-curl
 
@@ -520,11 +525,10 @@ jobs:
         run: |
           echo "Extra values from workflow:"
           echo "$EXTRA_VALUES" | tee /tmp/extra-values-file.yaml
-          cd ./scripts/deploy-camunda
-          go run . entra update-redirect-uris \
+          deploy-camunda entra update-redirect-uris \
             --ingress-host "$TEST_INGRESS_HOST" \
             --log-level info
-          go run . entra ensure-venom-app \
+          deploy-camunda entra ensure-venom-app \
             --namespace "$TEST_NAMESPACE" \
             --log-level info | tee /tmp/entra-output.txt
           # Capture VENOM_CLIENT_ID and CONNECTORS_CLIENT_ID from Go CLI stdout.
@@ -675,8 +679,7 @@ jobs:
             EXTRA_VALUES_ARGS=(--extra-values /tmp/extra-values-file.yaml)
           fi
 
-          cd ./scripts/deploy-camunda
-          go run . matrix run \
+          deploy-camunda matrix run \
             --repo-root "${GITHUB_WORKSPACE}" \
             --include-disabled \
             --scenario-filter "${{ inputs.scenario }}" \
@@ -792,6 +795,16 @@ jobs:
       - name: CI Setup - Configure Git safe directory
         run: git config --global --add safe.directory "${GITHUB_WORKSPACE}"
 
+      - name: Download deploy-camunda binary
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        with:
+          name: deploy-camunda-binary
+          path: ${{ runner.temp }}/bin
+      - name: Add deploy-camunda to PATH
+        run: |
+          chmod +x "${RUNNER_TEMP}/bin/deploy-camunda"
+          echo "${RUNNER_TEMP}/bin" >> "$GITHUB_PATH"
+
       # Tools (golang, helm, kubectl, oc, task, yq, zbctl) are pre-installed in the CI runner container image
       # See: .github/docker/ci-runner/Dockerfile
       # The per-scenario helm-version input below can override the pre-baked helm when set in ci-test-config.yaml.
@@ -887,11 +900,10 @@ jobs:
         run: |
           echo "Extra values from workflow:"
           echo "$EXTRA_VALUES" | tee /tmp/extra-values-file.yaml
-          cd ./scripts/deploy-camunda
-          go run . entra update-redirect-uris \
+          deploy-camunda entra update-redirect-uris \
             --ingress-host "$TEST_INGRESS_HOST" \
             --log-level info
-          go run . entra ensure-venom-app \
+          deploy-camunda entra ensure-venom-app \
             --namespace "$TEST_NAMESPACE" \
             --log-level info | tee /tmp/entra-output.txt
           # Capture VENOM_CLIENT_ID and CONNECTORS_CLIENT_ID from Go CLI stdout.
@@ -1029,8 +1041,7 @@ jobs:
           # scenario injection is tracked in #6312. (The install flow, being single-
           # step, forwards the file safely; see that step.)
 
-          cd ./scripts/deploy-camunda
-          go run . matrix run \
+          deploy-camunda matrix run \
             --repo-root "${GITHUB_WORKSPACE}" \
             --include-disabled \
             --scenario-filter "${{ inputs.scenario }}" \
@@ -1461,6 +1472,16 @@ jobs:
       - name: CI Setup - Configure Git safe directory
         run: git config --global --add safe.directory "${GITHUB_WORKSPACE}"
 
+      - name: Download deploy-camunda binary
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        with:
+          name: deploy-camunda-binary
+          path: ${{ runner.temp }}/bin
+      - name: Add deploy-camunda to PATH
+        run: |
+          chmod +x "${RUNNER_TEMP}/bin/deploy-camunda"
+          echo "${RUNNER_TEMP}/bin" >> "$GITHUB_PATH"
+
       - name: CI Setup - ℹ️ Set workflow vars for both install and upgrade ℹ️
         id: vars
         uses: ./.github/actions/workflow-vars
@@ -1542,8 +1563,7 @@ jobs:
           ENTRA_APP_OBJECT_ID: ${{ steps.test-credentials-secret.outputs.ENTRA_APP_OBJECT_ID }}
           ENTRA_APP_DIRECTORY_ID: ${{ steps.test-credentials-secret.outputs.ENTRA_APP_DIRECTORY_ID }}
         run: |
-          cd ./scripts/deploy-camunda
-          go run . entra cleanup-venom-app \
+          deploy-camunda entra cleanup-venom-app \
             --namespace "$TEST_NAMESPACE" \
             --log-level info
 
@@ -1559,8 +1579,7 @@ jobs:
           AUTH0_MGMT_CLIENT_ID: ${{ steps.test-credentials-secret.outputs.AUTH0_MGMT_CLIENT_ID }}
           AUTH0_MGMT_CLIENT_SECRET: ${{ steps.test-credentials-secret.outputs.AUTH0_MGMT_CLIENT_SECRET }}
         run: |
-          cd ./scripts/deploy-camunda
-          go run . auth0 cleanup-clients \
+          deploy-camunda auth0 cleanup-clients \
             --namespace "$TEST_NAMESPACE" \
             --domain "$AUTH0_DOMAIN" \
             --log-level info

.github/workflows/test-integration-template.yaml

@@ -131,7 +131,11 @@ on:
         default: false
         type: boolean
       skip-it:
-        description: "Skip integration (Playwright IT) tests for this scenario"
+        # Deprecated no-op: kept so existing external callers (camunda/camunda,
+        # camunda/identity, camunda/connectors, …) don't fail on unknown-input.
+        # The integration test runner was removed; remove this input once
+        # downstream repos stop passing it.
+        description: "Deprecated — no-op. The --test-it runner was removed."
         required: false
         default: false
         type: boolean
@@ -374,7 +378,6 @@ jobs:
       test-qa: ${{ inputs.test-qa }}
       test-upgrade: ${{ inputs.test-upgrade }}
       skip-e2e: ${{ inputs.skip-e2e }}
-      skip-it: ${{ inputs.skip-it }}
       pr-head-sha: ${{ inputs.pr-head-sha }}
       camunda-version: ${{ inputs.camunda-version }}
       camunda-helm-post-render: ${{ inputs.camunda-helm-post-render }}

charts/camunda-platform-8.10/test/ci/registry-snapshot.yaml

@@ -227,7 +227,6 @@ integration:
           features:
             - postgresql-companion
           skip-e2e: true
-          skip-it: true
           dependencies:
             - chart: charts/internal-postgresql
               release-name: postgresql
@@ -474,7 +473,6 @@ integration:
           features:
             - no-secondary-storage
           skip-e2e: true
-          skip-it: true
           dependencies:
             - chart: charts/internal-keycloak-26
               release-name: keycloak

charts/camunda-platform-8.10/test/ci/registry/scenarios/no-secondary-storage.yaml

@@ -11,7 +11,6 @@ platforms:
 infra-type:
   gke: distroci
 skip-e2e: true
-skip-it: true
 dependencies:
   - keycloak
   - postgresql

charts/camunda-platform-8.10/test/ci/registry/scenarios/oidc.yaml

@@ -16,7 +16,6 @@ infra-type:
   eks: preemptible
   gke: distroci
 skip-e2e: true
-skip-it: true
 dependencies:
   - postgresql
   - elasticsearch

charts/camunda-platform-8.7/test/ci/registry-snapshot.yaml

@@ -85,7 +85,6 @@ integration:
           persistence: elasticsearch
           helmVersion: 3.20.2
           skip-e2e: true
-          skip-it: true
         - name: keycloak-original
           enabled: true
           shortname: keyc