ci: build deploy-camunda binary on the nightly integration path (#6439)

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: eamonnmoloney

.github/actions/generate-chart-matrix/action.yaml

@@ -102,13 +102,6 @@ runs:
     - name: Export deploy-camunda to PATH
       shell: bash
       run: echo "$HOME/.local/bin" >> "$GITHUB_PATH"
-    - name: Upload deploy-camunda binary
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
-      with:
-        name: deploy-camunda-binary
-        path: ~/.local/bin/deploy-camunda
-        if-no-files-found: error
-        retention-days: 1
     - name: Generate matrix
       shell: bash
       id: set-chart-versions

.github/workflows/test-integration-runner.yaml

@@ -27,6 +27,11 @@ on:
         description: The unique identifier of used in the deployment hostname.
         required: true
         type: string
+      binary-artifact-name:
+        description: Name of the uploaded deploy-camunda binary artifact to download. Callers that build the binary per-leg must override this with a per-run-unique name to avoid artifact-name collisions across parallel reusable-workflow legs.
+        required: false
+        default: deploy-camunda-binary
+        type: string
       camunda-helm-repo:
         description: The Helm repo which is used during the upgrade flow.
         required: false
@@ -335,7 +340,7 @@ jobs:
       - name: Download deploy-camunda binary
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
-          name: deploy-camunda-binary
+          name: ${{ inputs.binary-artifact-name }}
           path: ${{ runner.temp }}/bin
       - name: Add deploy-camunda to PATH
         run: |
@@ -798,7 +803,7 @@ jobs:
       - name: Download deploy-camunda binary
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
-          name: deploy-camunda-binary
+          name: ${{ inputs.binary-artifact-name }}
           path: ${{ runner.temp }}/bin
       - name: Add deploy-camunda to PATH
         run: |
@@ -1475,7 +1480,7 @@ jobs:
       - name: Download deploy-camunda binary
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
-          name: deploy-camunda-binary
+          name: ${{ inputs.binary-artifact-name }}
           path: ${{ runner.temp }}/bin
       - name: Add deploy-camunda to PATH
         run: |

.github/workflows/test-integration-template.yaml

@@ -323,6 +323,35 @@ jobs:
           echo "${matrix}" | jq
           echo "matrix=$(echo ${matrix} | jq -c)" > "$GITHUB_OUTPUT"
 
+      - name: Restore deploy-camunda binary
+        id: binary-cache
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
+        with:
+          path: ~/.local/bin/deploy-camunda
+          key: deploy-camunda-v2-${{ runner.os }}-${{ hashFiles('scripts/deploy-camunda/**/*.go', 'scripts/deploy-camunda/go.sum') }}
+      - name: Setup Go
+        if: steps.binary-cache.outputs.cache-hit != 'true'
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
+        with:
+          go-version-file: scripts/deploy-camunda/go.mod
+          cache: true
+          cache-dependency-path: scripts/deploy-camunda/go.sum
+      - name: Build deploy-camunda
+        if: steps.binary-cache.outputs.cache-hit != 'true'
+        shell: bash
+        run: |
+          mkdir -p "$HOME/.local/bin"
+          # CGO_ENABLED=0 produces a static binary so it runs unchanged inside the
+          # ci-runner container used by downstream matrix jobs.
+          (cd scripts/deploy-camunda && CGO_ENABLED=0 go build -o "$HOME/.local/bin/deploy-camunda" .)
+      - name: Upload deploy-camunda binary
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: deploy-camunda-binary-${{ inputs.identifier }}
+          path: ~/.local/bin/deploy-camunda
+          if-no-files-found: error
+          retention-days: 1
+
   # The runner job is used to run the install/upgrade flows on the plaform (gke, rosa, etc.). This level of abstraction is needed so
   # we can shard the tests across multiple jobs (this is done via the matrix). If the tests where another job in this workflow, we
   # would need to wait for all the install/upgrade flows to complete before we can run the tests.
@@ -345,6 +374,7 @@ jobs:
       auth: ${{ inputs.auth }}
       exclude: ${{ inputs.exclude }}
       identifier: ${{ inputs.identifier }}-${{ inputs.shortname }}
+      binary-artifact-name: deploy-camunda-binary-${{ inputs.identifier }}
       camunda-helm-repo: ${{ inputs.camunda-helm-repo }}
       camunda-helm-dir: ${{ inputs.camunda-helm-dir }}
       camunda-helm-git-ref: ${{ inputs.camunda-helm-git-ref }}