terrarium/.github/workflows/integration-smoke.yml at 862c70bf6ef35d9a9bd2abbe6419afbbac99d81b · terion-labs/terrarium · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
name: integration-smoke

on:
  push:
    branches:
      - main
    paths:
      - "scripts/**"
      - "ansible/**"
      - "tests/integration/**"
      - "install.sh"
      - "package.json"
      - "bun.lock"
      - "requirements.yml"
  workflow_dispatch:
    inputs:
      keep_on_failure:
        description: Leave infrastructure running for debugging
        required: false
        default: false
        type: boolean
      only:
        description: Optional scenario filter
        required: false
        type: string

permissions:
  contents: read

jobs:
  smoke:
    runs-on: ubuntu-24.04
    timeout-minutes: 90
    concurrency:
      group: terrarium-integration-smoke
      cancel-in-progress: false
    env:
      HCLOUD_TOKEN: ${{ secrets.HCLOUD_TOKEN }}
      HCLOUD_LOCATION: ${{ secrets.HCLOUD_LOCATION }}
      HCLOUD_SERVER_TYPE: ${{ secrets.HCLOUD_SERVER_TYPE }}
      HCLOUD_SSH_PRIVATE_KEY: ${{ secrets.HCLOUD_SSH_PRIVATE_KEY }}
      HCLOUD_SSH_PUBLIC_KEY: ${{ secrets.HCLOUD_SSH_PUBLIC_KEY }}
      DUCKDNS_DOMAIN: ${{ secrets.DUCKDNS_DOMAIN }}
      DUCKDNS_TOKEN: ${{ secrets.DUCKDNS_TOKEN }}
      ZITADEL_CLOUD_ISSUER: ${{ secrets.ZITADEL_CLOUD_ISSUER }}
      ZITADEL_CLOUD_PAT: ${{ secrets.ZITADEL_CLOUD_PAT }}
      ZITADEL_CLOUD_ORG_ID: ${{ secrets.ZITADEL_CLOUD_ORG_ID }}
      S3_ENDPOINT: ${{ secrets.S3_ENDPOINT }}
      S3_BUCKET: ${{ secrets.S3_BUCKET }}
      S3_REGION: ${{ secrets.S3_REGION }}
      S3_ACCESS_KEY: ${{ secrets.S3_ACCESS_KEY }}
      S3_SECRET_KEY: ${{ secrets.S3_SECRET_KEY }}
      CIFS_ADDRESS: ${{ secrets.CIFS_ADDRESS }}
      CIFS_USERNAME: ${{ secrets.CIFS_USERNAME }}
      CIFS_PASSWORD: ${{ secrets.CIFS_PASSWORD }}
      CIFS_HOST_PATH_BASE: ${{ secrets.CIFS_HOST_PATH_BASE }}
      TERRARIUM_INTEGRATION_OUTPUT_DIR: ${{ github.workspace }}/tests/integration/output
      KEEP_ON_FAILURE: ${{ inputs.keep_on_failure && 'true' || 'false' }}
      ONLY_SCENARIO: ${{ inputs.only }}
    steps:
      - uses: actions/checkout@v4
      - uses: oven-sh/setup-bun@v2
      - name: Install integration dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y openssh-client tar
          bun install --frozen-lockfile
          bunx playwright install --with-deps chromium
      - name: Run smoke suite
        run: |
          if [ -n "${ONLY_SCENARIO}" ]; then
            bun run tests/integration/index.ts --suite smoke --only "${ONLY_SCENARIO}"
          else
            bun run tests/integration/index.ts --suite smoke
          fi
      - name: Upload integration artifacts
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: integration-smoke-artifacts
          path: tests/integration/output
          if-no-files-found: warn