ci.yml

name: "Integration Tests"
on:
  push:
    paths:
      - 'libraries/**'
      - 'resources/**'
      - 'test/**'
      - 'ohai/**'
      - '.github/workflows/ci.yml'
  pull_request_target:
    types: [labeled]
    paths:
      - 'libraries/**'
      - 'resources/**'
      - 'test/**'
      - 'ohai/**'
      - '.github/workflows/ci.yml'
  workflow_call:
    secrets:
      FALCON_CLIENT_ID:
        description: 'Falcon API Client ID'
        required: true
      FALCON_CLIENT_SECRET:
        description: 'Falcon API Client Secret'
        required: true
      FALCON_CID:
        description: 'Falcon API CID'
        required: true
      FALCON_CLOUD:
        description: 'Falcon API Cloud'
        required: true
      FALCON_VERSION:
        description: 'Falcon API Version'
        required: true

jobs:
  integration:
    if: |
      github.event_name == 'push' ||
      github.event_name == 'schedule' ||
      (github.event_name == 'pull_request_target' &&
      github.event.label.name == 'ok-to-test')
    runs-on: ubuntu-20.04
    strategy:
      matrix:
        os:
          - almalinux-8
          - amazonlinux-2
          - centos-7
          - debian-10
          - debian-11
          # - opensuse-leap-15
          - rockylinux-9
          - ubuntu-1804
          - ubuntu-2004
        suite:
          - default
          - install-api-version
          - install-api-policy
          - install-api-decrement
          - install-cleanup-installer
          - install-local
          - config-set
          - config-delete
      fail-fast: false

    steps:
      - name: Check out code
        uses: actions/checkout@v3
        if: github.event_name != 'pull_request_target'

      - name: Check out code
        uses: actions/checkout@v3
        with:
          ref: ${{github.event.pull_request.head.sha}}
        if: github.event_name == 'pull_request_target'

      - name: Install Chef
        uses: actionshub/chef-install@main

      - name: Run role tests
        uses: nick-fields/retry@v2
        env:
          CHEF_LICENSE: accept-no-persist
          KITCHEN_LOCAL_YAML: kitchen.yml
          FALCON_CLIENT_ID: ${{ secrets.FALCON_CLIENT_ID }}
          FALCON_CLIENT_SECRET: ${{ secrets.FALCON_CLIENT_SECRET }}
          FALCON_CID: ${{ secrets.FALCON_CID }}
          FALCON_CLOUD: ${{ secrets.FALCON_CLOUD }}
          FALCON_VERSION: ${{ secrets.FALCON_VERSION }}
        with:
          timeout_minutes: 6
          max_attempts: 3
          retry_on: error
          command: >-
            chef exec kitchen test ${{ matrix.suite }}-${{ matrix.os }}

      - name: Print debug output on failure
        if: failure()
        run: |
            set -x
            sudo journalctl -l --since today
            KITCHEN_LOCAL_YAML=kitchen.yml /usr/bin/kitchen exec ${{ matrix.suite }}-${{ matrix.os }} -c "journalctl -l"