Skip to content

Commit 33049c6

Browse files
Ian-wang-liyangIan-wang-liyang
authored
Merge branch 'main' into 6340-derive-ci-validation-from-data
2 parents e0090b6 + 0f3d022 commit 33049c6

22 files changed

Lines changed: 605 additions & 0 deletions

‎charts/camunda-platform-8.7/test/ci-test-config.yaml‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,21 @@
11
# Used in the GitHub Actions unit test CI workflow.
2+
# auth can be the following values: basic, keycloak, oidc
3+
#
4+
# ─── `unit:` block: LIVE ─────────────────────────────────────────────────────
5+
# The `unit:` block below is still the source of truth for the unit test
6+
# workflow — read via yq in `.github/actions/test-type-vars/action.yaml`.
7+
# Edit freely.
8+
#
9+
# ─── `integration:` block: FROZEN SNAPSHOT (do not edit) ─────────────────────
10+
# As of 2026-06-08 the integration test matrix is sourced from the
11+
# composable scenario registry under `test/ci/registry/` (ADR 0093).
12+
# `deploy-camunda matrix run/list` auto-detects the registry via
13+
# `test/ci/registry/manifest.yaml`; the `integration:` block here is retained
14+
# only as the equivalence-test baseline (`TestRegistryEquivalence` in
15+
# `scripts/deploy-camunda/matrix/registry_equivalence_test.go`). Edit
16+
# registry files instead. Scheduled for deletion once 8.8 is migrated and the
17+
# matrix has held green on `main` for one full nightly cycle.
18+
# ─────────────────────────────────────────────────────────────────────────────
219
unit:
320
enabled: true
421
matrix:

‎charts/camunda-platform-8.7/test/ci/registry-snapshot.yaml‎

Lines changed: 298 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,298 @@
1+
integration:
2+
vars:
3+
tasksBaseDir: ../../../test/integration/scenarios
4+
valuesBaseDir: integration/scenarios
5+
chartsBaseDir: ../../../..
6+
case:
7+
pr:
8+
scenario:
9+
- name: elasticsearch
10+
enabled: true
11+
shortname: eske
12+
auth: keycloak
13+
flow: install
14+
platforms:
15+
- gke
16+
exclude: []
17+
tier: 1
18+
infra-type:
19+
eks: preemptible
20+
gke: distroci
21+
identity: keycloak
22+
persistence: elasticsearch
23+
helmVersion: 3.20.2
24+
skip-e2e: true
25+
- name: enterprise-values
26+
enabled: true
27+
shortname: entv
28+
auth: keycloak
29+
flow: install
30+
platforms:
31+
- gke
32+
exclude: []
33+
tier: 2
34+
infra-type:
35+
gke: distroci
36+
identity: keycloak
37+
persistence: elasticsearch
38+
features:
39+
- enterprise
40+
helmVersion: 3.20.2
41+
skip-e2e: true
42+
- name: keycloak-mt
43+
enabled: true
44+
shortname: kemt
45+
auth: keycloak
46+
flow: install,upgrade-patch
47+
platforms:
48+
- gke
49+
exclude: []
50+
tier: 2
51+
infra-type:
52+
eks: preemptible
53+
gke: distroci
54+
identity: keycloak
55+
persistence: elasticsearch
56+
helmVersion: 3.20.2
57+
skip-e2e: true
58+
- name: keycloak-rba
59+
enabled: true
60+
shortname: kerba
61+
auth: keycloak
62+
flow: install
63+
platforms:
64+
- gke
65+
exclude: []
66+
tier: 2
67+
infra-type:
68+
gke: distroci
69+
identity: keycloak
70+
persistence: elasticsearch
71+
helmVersion: 3.20.2
72+
skip-e2e: true
73+
- name: oidc
74+
enabled: true
75+
shortname: esoi
76+
auth: oidc
77+
flow: install,upgrade-patch
78+
platforms:
79+
- gke
80+
exclude: []
81+
tier: 2
82+
infra-type:
83+
eks: preemptible
84+
gke: distroci
85+
persistence: elasticsearch
86+
helmVersion: 3.20.2
87+
skip-e2e: true
88+
skip-it: true
89+
- name: keycloak-original
90+
enabled: true
91+
shortname: keyc
92+
auth: keycloak
93+
flow: install,upgrade-patch
94+
platforms:
95+
- gke
96+
exclude: []
97+
tier: 2
98+
infra-type:
99+
eks: preemptible
100+
gke: distroci
101+
identity: keycloak
102+
persistence: elasticsearch
103+
helmVersion: 3.20.2
104+
skip-e2e: true
105+
- name: opensearch-embedded
106+
enabled: true
107+
shortname: osem
108+
auth: keycloak
109+
flow: install
110+
platforms:
111+
- gke
112+
exclude: []
113+
tier: 2
114+
infra-type:
115+
gke: distroci
116+
identity: keycloak
117+
persistence: opensearch-embedded
118+
dependencies:
119+
- chart: opensearch/opensearch
120+
version: 2.31.0
121+
release-name: opensearch
122+
values-file: test/integration/companion-values/opensearch.yaml
123+
repo-name: opensearch
124+
repo-url: https://opensearch-project.github.io/helm-charts/
125+
- name: component-persistence
126+
enabled: true
127+
shortname: cprst
128+
auth: keycloak
129+
flow: install
130+
platforms:
131+
- gke
132+
exclude: []
133+
tier: 2
134+
infra-type:
135+
gke: distroci
136+
identity: keycloak
137+
persistence: elasticsearch
138+
features:
139+
- persistence
140+
skip-e2e: true
141+
- name: shadow-e2e
142+
enabled: true
143+
shortname: shde2
144+
auth: keycloak
145+
flow: install
146+
platforms:
147+
- gke
148+
exclude: []
149+
tier: 2
150+
infra-type:
151+
gke: distroci
152+
identity: keycloak
153+
persistence: elasticsearch
154+
skip-e2e: true
155+
- name: keycloak-original
156+
enabled: true
157+
shortname: keyco
158+
auth: keycloak
159+
flow: install
160+
platforms:
161+
- gke
162+
exclude: []
163+
tier: 1
164+
infra-type:
165+
gke: distroci
166+
identity: keycloak
167+
persistence: elasticsearch
168+
post-deploy:
169+
script: post-deploy-keycloak-token-lifespan.sh
170+
description: |
171+
Increases Keycloak access token lifespan to 30 minutes and SSO
172+
session idle timeout to 2 hours for E2E test stability.
173+
- name: alwaysgreen
174+
enabled: false
175+
shortname: agrn
176+
auth: keycloak
177+
flow: install
178+
platforms:
179+
- gke
180+
exclude: []
181+
infra-type:
182+
gke: alwaysgreen
183+
identity: keycloak
184+
persistence: elasticsearch
185+
- name: qa-elasticsearch
186+
enabled: false
187+
shortname: qael
188+
auth: keycloak
189+
flow: install
190+
platforms:
191+
- gke
192+
- eks
193+
exclude: []
194+
infra-type:
195+
eks: preemptible
196+
gke: qa-workloads
197+
identity: keycloak
198+
persistence: elasticsearch
199+
qa: true
200+
image-tags: true
201+
post-deploy:
202+
script: post-deploy-keycloak-token-lifespan.sh
203+
description: |
204+
Increases Keycloak access token lifespan to 30 minutes and SSO
205+
session idle timeout to 2 hours. Prevents session-expiry flakiness
206+
in long-running E2E test flows (diagram building, process deployment)
207+
when the cluster is under heavy load.
208+
- name: qa-elasticsearch-rba
209+
enabled: false
210+
shortname: qarba
211+
auth: keycloak
212+
flow: install
213+
platforms:
214+
- gke
215+
exclude: []
216+
infra-type:
217+
gke: qa-workloads
218+
identity: keycloak
219+
persistence: elasticsearch
220+
features:
221+
- rba
222+
qa: true
223+
image-tags: true
224+
post-deploy:
225+
script: post-deploy-keycloak-token-lifespan.sh
226+
description: |
227+
Increases Keycloak access token lifespan to 30 minutes and SSO
228+
session idle timeout to 2 hours for E2E test stability.
229+
- name: qa-elasticsearch-mt
230+
enabled: false
231+
shortname: qamt
232+
auth: keycloak
233+
flow: install
234+
platforms:
235+
- gke
236+
exclude: []
237+
infra-type:
238+
gke: qa-workloads
239+
identity: keycloak
240+
persistence: elasticsearch
241+
features:
242+
- multitenancy
243+
qa: true
244+
image-tags: true
245+
post-deploy:
246+
script: post-deploy-keycloak-token-lifespan.sh
247+
description: |
248+
Increases Keycloak access token lifespan to 30 minutes and SSO
249+
session idle timeout to 2 hours for E2E test stability.
250+
- name: qa-license
251+
enabled: false
252+
shortname: lic
253+
auth: keycloak
254+
flow: install
255+
platforms:
256+
- gke
257+
exclude: []
258+
infra-type:
259+
gke: qa-workloads
260+
identity: keycloak
261+
persistence: elasticsearch
262+
features:
263+
- license
264+
qa: true
265+
image-tags: true
266+
post-deploy:
267+
script: post-deploy-keycloak-token-lifespan.sh
268+
description: |
269+
Increases Keycloak access token lifespan to 30 minutes and SSO
270+
session idle timeout to 2 hours for E2E test stability.
271+
- name: qa-opensearch
272+
enabled: false
273+
shortname: qaos
274+
auth: keycloak
275+
flow: install
276+
platforms:
277+
- gke
278+
exclude: []
279+
infra-type:
280+
gke: qa-workloads
281+
identity: keycloak
282+
persistence: opensearch-embedded
283+
qa: true
284+
image-tags: true
285+
dependencies:
286+
- chart: opensearch/opensearch
287+
version: 2.31.0
288+
release-name: opensearch
289+
values-file: test/integration/companion-values/opensearch.yaml
290+
repo-name: opensearch
291+
repo-url: https://opensearch-project.github.io/helm-charts/
292+
post-deploy:
293+
script: post-deploy-keycloak-token-lifespan.sh
294+
description: |
295+
Increases Keycloak access token lifespan to 30 minutes and SSO
296+
session idle timeout to 2 hours for E2E test stability.
297+
nightly:
298+
scenario: []

‎charts/camunda-platform-8.7/test/ci/registry/dependencies/opensearch.yaml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
chart: opensearch/opensearch
2+
version: 2.31.0
3+
release-name: opensearch
4+
values-file: test/integration/companion-values/opensearch.yaml
5+
repo-name: opensearch
6+
repo-url: https://opensearch-project.github.io/helm-charts/

‎charts/camunda-platform-8.7/test/ci/registry/hooks/keycloak-token-lifespan-2.yaml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
script: post-deploy-keycloak-token-lifespan.sh
2+
description: |
3+
Increases Keycloak access token lifespan to 30 minutes and SSO
4+
session idle timeout to 2 hours. Prevents session-expiry flakiness
5+
in long-running E2E test flows (diagram building, process deployment)
6+
when the cluster is under heavy load.

‎charts/camunda-platform-8.7/test/ci/registry/hooks/keycloak-token-lifespan.yaml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
script: post-deploy-keycloak-token-lifespan.sh
2+
description: |
3+
Increases Keycloak access token lifespan to 30 minutes and SSO
4+
session idle timeout to 2 hours for E2E test stability.

0 commit comments

Comments
 (0)