ci: skip integration tests on fork PRs (#2049) #13501
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright 2020 Google LLC | |
| # | |
| # Licensed under the Apache License, Version 2.0 (the "License"); | |
| # you may not use this file except in compliance with the License. | |
| # You may obtain a copy of the License at | |
| # | |
| # http://www.apache.org/licenses/LICENSE-2.0 | |
| # | |
| # Unless required by applicable law or agreed to in writing, software | |
| # distributed under the License is distributed on an "AS IS" BASIS, | |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
| # See the License for the specific language governing permissions and | |
| # limitations under the License. | |
| name: tests | |
| on: | |
| pull_request: | |
| push: | |
| branches: | |
| - main | |
| schedule: | |
| - cron: "0 2 * * *" | |
| # Declare default permissions as read only. | |
| permissions: read-all | |
| jobs: | |
| units: | |
| name: unit tests | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| os: [macos-latest, windows-latest, ubuntu-latest] | |
| java-version: ["8", "11", "17"] | |
| fail-fast: false | |
| permissions: | |
| contents: "read" | |
| id-token: "write" | |
| issues: write | |
| pull-requests: write | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 | |
| - name: Set up JDK | |
| uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1 | |
| with: | |
| distribution: "zulu" | |
| java-version: ${{matrix.java-version}} | |
| - id: auth | |
| name: Authenticate to Google Cloud | |
| uses: google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa # v2.1.3 | |
| with: | |
| workload_identity_provider: ${{ vars.PROVIDER_NAME }} | |
| service_account: ${{ vars.SERVICE_ACCOUNT }} | |
| access_token_lifetime: 600s | |
| - id: secrets | |
| name: Get secrets | |
| uses: google-github-actions/get-secretmanager-secrets@dc4a1392bad0fd60aee00bb2097e30ef07a1caae # v2.1.3 | |
| with: | |
| secrets: |- | |
| MYSQL_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_CONNECTION_NAME | |
| MYSQL_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_USER | |
| MYSQL_IAM_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_JAVA_IAM_CONNECTION_NAME | |
| MYSQL_IAM_USER_JAVA:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_USER_IAM_JAVA | |
| MYSQL_PASS:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_PASS | |
| MYSQL_DB:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_DB | |
| POSTGRES_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_CONNECTION_NAME | |
| POSTGRES_IAM_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_IAM_CONNECTION_NAME | |
| POSTGRES_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_USER | |
| POSTGRES_IAM_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_USER_IAM_JAVA | |
| POSTGRES_PASS:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_PASS | |
| POSTGRES_DB:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_DB | |
| SQLSERVER_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/SQLSERVER_CONNECTION_NAME | |
| SQLSERVER_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/SQLSERVER_USER | |
| SQLSERVER_PASS:${{ vars.GOOGLE_CLOUD_PROJECT }}/SQLSERVER_PASS | |
| SQLSERVER_DB:${{ vars.GOOGLE_CLOUD_PROJECT }}/SQLSERVER_DB | |
| IMPERSONATED_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/IMPERSONATED_USER | |
| QUOTA_PROJECT:${{ vars.GOOGLE_CLOUD_PROJECT }}/QUOTA_PROJECT | |
| - name: Run tests | |
| env: | |
| MYSQL_CONNECTION_NAME: "${{ steps.secrets.outputs.MYSQL_CONNECTION_NAME }}" | |
| MYSQL_USER: "${{ steps.secrets.outputs.MYSQL_USER }}" | |
| MYSQL_IAM_CONNECTION_NAME: "${{ steps.secrets.outputs.MYSQL_IAM_CONNECTION_NAME }}" | |
| MYSQL_IAM_USER: "${{ steps.secrets.outputs.MYSQL_IAM_USER_JAVA }}" | |
| MYSQL_PASS: "${{ steps.secrets.outputs.MYSQL_PASS }}" | |
| MYSQL_DB: "${{ steps.secrets.outputs.MYSQL_DB }}" | |
| POSTGRES_CONNECTION_NAME: "${{ steps.secrets.outputs.POSTGRES_CONNECTION_NAME }}" | |
| POSTGRES_IAM_CONNECTION_NAME: "${{ steps.secrets.outputs.POSTGRES_IAM_CONNECTION_NAME }}" | |
| POSTGRES_USER: "${{ steps.secrets.outputs.POSTGRES_USER }}" | |
| POSTGRES_IAM_USER: "${{ steps.secrets.outputs.POSTGRES_IAM_USER }}" | |
| POSTGRES_PASS: "${{ steps.secrets.outputs.POSTGRES_PASS }}" | |
| POSTGRES_DB: "${{ steps.secrets.outputs.POSTGRES_DB }}" | |
| SQLSERVER_CONNECTION_NAME: "${{ steps.secrets.outputs.SQLSERVER_CONNECTION_NAME }}" | |
| SQLSERVER_USER: "${{ steps.secrets.outputs.SQLSERVER_USER }}" | |
| SQLSERVER_PASS: "${{ steps.secrets.outputs.SQLSERVER_PASS }}" | |
| SQLSERVER_DB: "${{ steps.secrets.outputs.SQLSERVER_DB }}" | |
| IMPERSONATED_USER: "${{ steps.secrets.outputs.IMPERSONATED_USER }}" | |
| QUOTA_PROJECT: "${{ steps.secrets.outputs.QUOTA_PROJECT }}" | |
| JOB_TYPE: test | |
| run: ./.github/scripts/run_tests.sh | |
| shell: bash | |
| - name: Check Coverage | |
| run: .kokoro/check_coverage.sh | |
| shell: bash | |
| - name: FlakyBot (Linux) | |
| # only run flakybot on periodic (schedule) and continuous (push) events | |
| if: ${{ (github.event_name == 'schedule' || github.event_name == 'push') && runner.os == 'Linux' && always() }} | |
| run: | | |
| curl https://github.com/googleapis/repo-automation-bots/releases/download/flakybot-1.1.0/flakybot -o flakybot -s -L | |
| chmod +x ./flakybot | |
| ./flakybot --repo ${{github.repository}} --commit_hash ${{github.sha}} --build_url https://github.com/${{github.repository}}/actions/runs/${{github.run_id}} | |
| - name: FlakyBot (Windows) | |
| # only run flakybot on periodic (schedule) and continuous (push) events | |
| if: ${{ (github.event_name == 'schedule' || github.event_name == 'push') && runner.os == 'Windows' && always() }} | |
| run: | | |
| curl https://github.com/googleapis/repo-automation-bots/releases/download/flakybot-1.1.0/flakybot.exe -o flakybot.exe -s -L | |
| ./flakybot.exe --repo ${{github.repository}} --commit_hash ${{github.sha}} --build_url https://github.com/${{github.repository}}/actions/runs/${{github.run_id}} | |
| - name: FlakyBot (macOS) | |
| # only run flakybot on periodic (schedule) and continuous (push) events | |
| if: ${{ (github.event_name == 'schedule' || github.event_name == 'push') && runner.os == 'macOS' && always() }} | |
| run: | | |
| curl https://github.com/googleapis/repo-automation-bots/releases/download/flakybot-1.1.0/flakybot-darwin-amd64 -o flakybot -s -L | |
| chmod +x ./flakybot | |
| ./flakybot --repo ${{github.repository}} --commit_hash ${{github.sha}} --build_url https://github.com/${{github.repository}}/actions/runs/${{github.run_id}} | |
| unit-e2e: | |
| name: units + e2e | |
| # run integration tests on all builds except pull requests from forks or dependabot | |
| if: | | |
| github.event_name != 'pull_request' || | |
| (github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]') | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| os: [ubuntu-latest] | |
| java-version: ["17"] | |
| fail-fast: false | |
| permissions: | |
| contents: read | |
| id-token: write | |
| issues: write | |
| pull-requests: write | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 | |
| - name: Set up JDK | |
| uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1 | |
| with: | |
| distribution: "zulu" | |
| java-version: ${{matrix.java-version}} | |
| - id: auth | |
| name: Authenticate to Google Cloud | |
| uses: google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa # v2.1.3 | |
| with: | |
| workload_identity_provider: ${{ vars.PROVIDER_NAME }} | |
| service_account: ${{ vars.SERVICE_ACCOUNT }} | |
| access_token_lifetime: 600s | |
| - id: secrets | |
| name: Get secrets | |
| uses: google-github-actions/get-secretmanager-secrets@dc4a1392bad0fd60aee00bb2097e30ef07a1caae # v2.1.3 | |
| with: | |
| secrets: |- | |
| MYSQL_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_CONNECTION_NAME | |
| MYSQL_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_USER | |
| MYSQL_PASS:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_PASS | |
| MYSQL_DB:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_DB | |
| MYSQL_IAM_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_JAVA_IAM_CONNECTION_NAME | |
| MYSQL_IAM_USER_JAVA:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_USER_IAM_JAVA | |
| POSTGRES_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_CONNECTION_NAME | |
| POSTGRES_IAM_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_IAM_CONNECTION_NAME | |
| POSTGRES_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_USER | |
| POSTGRES_IAM_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_USER_IAM_JAVA | |
| POSTGRES_PASS:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_PASS | |
| POSTGRES_DB:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_DB | |
| SQLSERVER_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/SQLSERVER_CONNECTION_NAME | |
| SQLSERVER_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/SQLSERVER_USER | |
| SQLSERVER_PASS:${{ vars.GOOGLE_CLOUD_PROJECT }}/SQLSERVER_PASS | |
| SQLSERVER_DB:${{ vars.GOOGLE_CLOUD_PROJECT }}/SQLSERVER_DB | |
| IMPERSONATED_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/IMPERSONATED_USER | |
| QUOTA_PROJECT:${{ vars.GOOGLE_CLOUD_PROJECT }}/QUOTA_PROJECT | |
| - name: Run tests | |
| env: | |
| MYSQL_CONNECTION_NAME: "${{ steps.secrets.outputs.MYSQL_CONNECTION_NAME }}" | |
| MYSQL_USER: "${{ steps.secrets.outputs.MYSQL_USER }}" | |
| MYSQL_PASS: "${{ steps.secrets.outputs.MYSQL_PASS }}" | |
| MYSQL_DB: "${{ steps.secrets.outputs.MYSQL_DB }}" | |
| MYSQL_IAM_CONNECTION_NAME: "${{ steps.secrets.outputs.MYSQL_IAM_CONNECTION_NAME }}" | |
| MYSQL_IAM_USER: "${{ steps.secrets.outputs.MYSQL_IAM_USER_JAVA }}" | |
| POSTGRES_CONNECTION_NAME: "${{ steps.secrets.outputs.POSTGRES_CONNECTION_NAME }}" | |
| POSTGRES_IAM_CONNECTION_NAME: "${{ steps.secrets.outputs.POSTGRES_IAM_CONNECTION_NAME }}" | |
| POSTGRES_USER: "${{ steps.secrets.outputs.POSTGRES_USER }}" | |
| POSTGRES_IAM_USER: "${{ steps.secrets.outputs.POSTGRES_IAM_USER }}" | |
| POSTGRES_PASS: "${{ steps.secrets.outputs.POSTGRES_PASS }}" | |
| POSTGRES_DB: "${{ steps.secrets.outputs.POSTGRES_DB }}" | |
| SQLSERVER_CONNECTION_NAME: "${{ steps.secrets.outputs.SQLSERVER_CONNECTION_NAME }}" | |
| SQLSERVER_USER: "${{ steps.secrets.outputs.SQLSERVER_USER }}" | |
| SQLSERVER_PASS: "${{ steps.secrets.outputs.SQLSERVER_PASS }}" | |
| SQLSERVER_DB: "${{ steps.secrets.outputs.SQLSERVER_DB }}" | |
| IMPERSONATED_USER: "${{ steps.secrets.outputs.IMPERSONATED_USER }}" | |
| QUOTA_PROJECT: "${{ steps.secrets.outputs.QUOTA_PROJECT }}" | |
| JOB_TYPE: integration | |
| run: ./.github/scripts/run_tests.sh | |
| shell: bash | |
| - name: Check Coverage | |
| run: .kokoro/check_coverage.sh | |
| shell: bash | |
| - name: FlakyBot (Linux) | |
| # only run flakybot on periodic (schedule) and continuous (push) events | |
| if: ${{ (github.event_name == 'schedule' || github.event_name == 'push') && runner.os == 'Linux' && always() }} | |
| run: | | |
| curl https://github.com/googleapis/repo-automation-bots/releases/download/flakybot-1.1.0/flakybot -o flakybot -s -L | |
| chmod +x ./flakybot | |
| ./flakybot --repo ${{github.repository}} --commit_hash ${{github.sha}} --build_url https://github.com/${{github.repository}}/actions/runs/${{github.run_id}} | |
| - name: FlakyBot (Windows) | |
| # only run flakybot on periodic (schedule) and continuous (push) events | |
| if: ${{ (github.event_name == 'schedule' || github.event_name == 'push') && runner.os == 'Windows' && always() }} | |
| run: | | |
| curl https://github.com/googleapis/repo-automation-bots/releases/download/flakybot-1.1.0/flakybot.exe -o flakybot.exe -s -L | |
| ./flakybot.exe --repo ${{github.repository}} --commit_hash ${{github.sha}} --build_url https://github.com/${{github.repository}}/actions/runs/${{github.run_id}} | |
| - name: FlakyBot (macOS) | |
| # only run flakybot on periodic (schedule) and continuous (push) events | |
| if: ${{ (github.event_name == 'schedule' || github.event_name == 'push') && runner.os == 'macOS' && always() }} | |
| run: | | |
| curl https://github.com/googleapis/repo-automation-bots/releases/download/flakybot-1.1.0/flakybot-darwin-amd64 -o flakybot -s -L | |
| chmod +x ./flakybot | |
| ./flakybot --repo ${{github.repository}} --commit_hash ${{github.sha}} --build_url https://github.com/${{github.repository}}/actions/runs/${{github.run_id}} | |
| graalvm: | |
| # run job on periodic (schedule) event | |
| if: "${{ github.event_name == 'schedule' }}" | |
| name: graalvm native / linux | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| id-token: write | |
| issues: write | |
| pull-requests: write | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 | |
| - name: Set up GraalVM | |
| uses: graalvm/setup-graalvm@2911b2304bee2c2f59b9a67bf45f025a6b6de4b1 # v1.2.2 | |
| with: | |
| java-version: "21" | |
| distribution: "graalvm-community" | |
| components: "native-image" | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| - id: auth | |
| name: Authenticate to Google Cloud | |
| uses: google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa # v2.1.3 | |
| with: | |
| workload_identity_provider: ${{ vars.PROVIDER_NAME }} | |
| service_account: ${{ vars.SERVICE_ACCOUNT }} | |
| access_token_lifetime: 600s | |
| - id: secrets | |
| name: Get secrets | |
| uses: google-github-actions/get-secretmanager-secrets@dc4a1392bad0fd60aee00bb2097e30ef07a1caae # v2.1.3 | |
| with: | |
| secrets: |- | |
| MYSQL_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_CONNECTION_NAME | |
| MYSQL_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_USER | |
| MYSQL_PASS:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_PASS | |
| MYSQL_DB:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_DB | |
| MYSQL_IAM_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_JAVA_IAM_CONNECTION_NAME | |
| MYSQL_IAM_USER_JAVA:${{ vars.GOOGLE_CLOUD_PROJECT }}/MYSQL_USER_IAM_JAVA | |
| POSTGRES_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_CONNECTION_NAME | |
| POSTGRES_IAM_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_IAM_CONNECTION_NAME | |
| POSTGRES_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_USER | |
| POSTGRES_IAM_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_USER_IAM_JAVA | |
| POSTGRES_PASS:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_PASS | |
| POSTGRES_DB:${{ vars.GOOGLE_CLOUD_PROJECT }}/POSTGRES_DB | |
| SQLSERVER_CONNECTION_NAME:${{ vars.GOOGLE_CLOUD_PROJECT }}/SQLSERVER_CONNECTION_NAME | |
| SQLSERVER_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/SQLSERVER_USER | |
| SQLSERVER_PASS:${{ vars.GOOGLE_CLOUD_PROJECT }}/SQLSERVER_PASS | |
| SQLSERVER_DB:${{ vars.GOOGLE_CLOUD_PROJECT }}/SQLSERVER_DB | |
| IMPERSONATED_USER:${{ vars.GOOGLE_CLOUD_PROJECT }}/IMPERSONATED_USER | |
| QUOTA_PROJECT:${{ vars.GOOGLE_CLOUD_PROJECT }}/QUOTA_PROJECT | |
| - name: Run tests | |
| env: | |
| MYSQL_CONNECTION_NAME: "${{ steps.secrets.outputs.MYSQL_CONNECTION_NAME }}" | |
| MYSQL_USER: "${{ steps.secrets.outputs.MYSQL_USER }}" | |
| MYSQL_PASS: "${{ steps.secrets.outputs.MYSQL_PASS }}" | |
| MYSQL_DB: "${{ steps.secrets.outputs.MYSQL_DB }}" | |
| MYSQL_IAM_CONNECTION_NAME: "${{ steps.secrets.outputs.MYSQL_IAM_CONNECTION_NAME }}" | |
| MYSQL_IAM_USER: "${{ steps.secrets.outputs.MYSQL_IAM_USER_JAVA }}" | |
| POSTGRES_CONNECTION_NAME: "${{ steps.secrets.outputs.POSTGRES_CONNECTION_NAME }}" | |
| POSTGRES_IAM_CONNECTION_NAME: "${{ steps.secrets.outputs.POSTGRES_IAM_CONNECTION_NAME }}" | |
| POSTGRES_USER: "${{ steps.secrets.outputs.POSTGRES_USER }}" | |
| POSTGRES_IAM_USER: "${{ steps.secrets.outputs.POSTGRES_IAM_USER }}" | |
| POSTGRES_PASS: "${{ steps.secrets.outputs.POSTGRES_PASS }}" | |
| POSTGRES_DB: "${{ steps.secrets.outputs.POSTGRES_DB }}" | |
| SQLSERVER_CONNECTION_NAME: "${{ steps.secrets.outputs.SQLSERVER_CONNECTION_NAME }}" | |
| SQLSERVER_USER: "${{ steps.secrets.outputs.SQLSERVER_USER }}" | |
| SQLSERVER_PASS: "${{ steps.secrets.outputs.SQLSERVER_PASS }}" | |
| SQLSERVER_DB: "${{ steps.secrets.outputs.SQLSERVER_DB }}" | |
| IMPERSONATED_USER: "${{ steps.secrets.outputs.IMPERSONATED_USER }}" | |
| QUOTA_PROJECT: "${{ steps.secrets.outputs.QUOTA_PROJECT }}" | |
| run: ./.github/scripts/run_tests_graalvm_native.sh | |
| shell: bash | |
| - name: Check Coverage | |
| run: .kokoro/check_coverage.sh | |
| shell: bash | |
| - name: FlakyBot | |
| # only run flakybot on periodic (schedule) and continuous (push) events | |
| if: ${{ (github.event_name == 'schedule' || github.event_name == 'push') && always() }} | |
| run: | | |
| curl https://github.com/googleapis/repo-automation-bots/releases/download/flakybot-1.1.0/flakybot -o flakybot -s -L | |
| chmod +x ./flakybot | |
| ./flakybot --repo ${{github.repository}} --commit_hash ${{github.sha}} --build_url https://github.com/${{github.repository}}/actions/runs/${{github.run_id}} |