e2e_tests.yml

name: Run E2E tests

on:
  push:
    branches:
      - main
  pull_request:
  workflow_dispatch:

jobs:
  azure-e2e-test:
    name: Run end-to-end tests of Pulumi Kotlin Azure
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Check out project sources
        uses: actions/checkout@v4
      - name: Set up Java
        uses: actions/setup-java@v4
        with:
          distribution: adopt
          java-version: 21
      - name: Set up Pulumi CLI
        uses: pulumi/actions@v5
      - name: Publish Pulumi Kotlin Azure to Maven Local
        run: ./gradlew publishPulumiAzureE2ePublicationToMavenLocal -q
      - name: Publish Pulumi Kotlin Random to Maven Local
        run: ./gradlew publishPulumiRandomE2ePublicationToMavenLocal -q
      - name: Run E2E tests
        id: run-azure-e2e-tests
        run: ./gradlew e2eTest --tests AzureE2eTest
        env:
          # These values were copied from jvm-lab/identity-federation/dev stack's output
          # The Azure tenant/subscription that is used here belongs to VirtusLab
          ARM_TENANT_ID: 'd09acba4-fb14-464d-851a-44a7cf8a064d' # tenant-id output of jvm-lab/identity-federation/dev stack
          ARM_SUBSCRIPTION_ID: '46170faf-ef0a-4e4a-af7e-4bf4206045a3' # subscription-id output of jvm-lab/identity-federation/dev stack
          ARM_CLIENT_ID: 'e4e7a816-ca21-4527-9a57-f5ac641002f2' # service-principal-client-id output of jvm-lab/identity-federation/dev stack
          ARM_CLIENT_SECRET: ${{ secrets.AZURE_SERVICE_PRINCIPAL_CLIENT_SECRET }} # This could be done by OIDC, but it's not supported by Pulumi yet (see https://github.com/VirtuslabRnD/pulumi-kotlin/issues/195)

          # Pulumi personal access token manually added to `pulumi-kotlin` repo by @myhau (Michal Fudala)
          PULUMI_ACCESS_TOKEN: ${{ secrets.ACCESS_TOKEN_PULUMI }}
      - name: Upload E2E test report
        if: ${{ failure() && steps.run-azure-e2e-tests.outcome == 'failure' }}
        uses: actions/upload-artifact@v4
        with:
          name: azure-e2e-test-report
          path: ./build/reports/tests/e2eTest/*
          retention-days: 3
  azure-native-e2e-test:
    name: Run end-to-end tests of Pulumi Kotlin Azure Native
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Check out project sources
        uses: actions/checkout@v4
      - name: Set up Java
        uses: actions/setup-java@v4
        with:
          distribution: adopt
          java-version: 21
      - name: Set up Pulumi CLI
        uses: pulumi/actions@v5
      - name: Publish Pulumi Kotlin Azure Native to Maven Local
        run: ./gradlew publishPulumiAzure-nativeE2ePublicationToMavenLocal -q
      - name: Publish Pulumi Kotlin Random to Maven Local
        run: ./gradlew publishPulumiRandomE2ePublicationToMavenLocal -q
      - name: Run E2E tests
        id: run-azure-native-e2e-tests
        run: ./gradlew e2eTest --tests AzureNativeE2eTest
        env:
          # These values were copied from jvm-lab/identity-federation/dev stack's output
          # The Azure tenant/subscription that is used here belongs to VirtusLab
          ARM_TENANT_ID: 'd09acba4-fb14-464d-851a-44a7cf8a064d' # tenant-id output of jvm-lab/identity-federation/dev stack
          ARM_SUBSCRIPTION_ID: '46170faf-ef0a-4e4a-af7e-4bf4206045a3' # subscription-id output of jvm-lab/identity-federation/dev stack
          ARM_CLIENT_ID: 'e4e7a816-ca21-4527-9a57-f5ac641002f2' # service-principal-client-id output of jvm-lab/identity-federation/dev stack
          ARM_CLIENT_SECRET: ${{ secrets.AZURE_SERVICE_PRINCIPAL_CLIENT_SECRET }} # This could be done by OIDC, but it's not supported by Pulumi yet (see https://github.com/VirtuslabRnD/pulumi-kotlin/issues/195)

          # Pulumi personal access token manually added to `pulumi-kotlin` repo by @myhau (Michal Fudala)
          PULUMI_ACCESS_TOKEN: ${{ secrets.ACCESS_TOKEN_PULUMI }}
      - name: Upload E2E test report
        if: ${{ failure() && steps.run-azure-native-e2e-tests.outcome == 'failure' }}
        uses: actions/upload-artifact@v4
        with:
          name: azure-native-e2e-test-report
          path: ./build/reports/tests/e2eTest/*
          retention-days: 3
  gcp-e2e-test:
    name: Run end-to-end tests of Pulumi Kotlin GCP
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Check out project sources
        uses: actions/checkout@v4
      - name: Set up Java
        uses: actions/setup-java@v4
        with:
          distribution: adopt
          java-version: 21
      - name: Set up Pulumi CLI
        uses: pulumi/actions@v5
      - name: Authenticate to Google Cloud
        uses: google-github-actions/auth@v2
        id: auth
        with:
          # the credentials were generated using the following script:
          # https://github.com/VirtuslabRnD/jvm-lab/blob/main/scripts/setup-github-actions-google-cloud-authentication.sh
          workload_identity_provider: 'projects/954450653667/locations/global/workloadIdentityPools/github-actions-pool/providers/github-actions-provider'
          service_account: 'github-actions@jvm-lab.iam.gserviceaccount.com'
      - name: Publish Pulumi Kotlin GCP to Maven Local
        run: ./gradlew publishPulumiGcpE2ePublicationToMavenLocal -q
      - name: Run E2E tests
        id: run-gcp-e2e-tests
        run: ./gradlew e2eTest --tests GcpE2eTest
        env:
          # Pulumi personal access token manually added to `pulumi-kotlin` repo by @myhau (Michal Fudala)
          PULUMI_ACCESS_TOKEN: ${{ secrets.ACCESS_TOKEN_PULUMI }}
      - name: Upload E2E test report
        if: ${{ failure() && steps.run-gcp-e2e-tests.outcome == 'failure' }}
        uses: actions/upload-artifact@v4
        with:
          name: gcp-e2e-test-report
          path: ./build/reports/tests/e2eTest/*
          retention-days: 3
  google-native-e2e-test:
    name: Run end-to-end tests of Pulumi Kotlin Google Native
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Check out project sources
        uses: actions/checkout@v4
      - name: Set up Java
        uses: actions/setup-java@v4
        with:
          distribution: adopt
          java-version: 21
      - name: Set up Pulumi CLI
        uses: pulumi/actions@v5
      - name: Authenticate to Google Cloud
        uses: google-github-actions/auth@v2
        id: auth
        with:
          # the credentials were generated using the following script:
          # https://github.com/VirtuslabRnD/jvm-lab/blob/main/scripts/setup-github-actions-google-cloud-authentication.sh
          workload_identity_provider: 'projects/954450653667/locations/global/workloadIdentityPools/github-actions-pool/providers/github-actions-provider'
          service_account: 'github-actions@jvm-lab.iam.gserviceaccount.com'
      - name: Publish Pulumi Kotlin Google Native to Maven Local
        run: ./gradlew publishPulumiGoogle-nativeE2ePublicationToMavenLocal -q
      - name: Run E2E tests
        id: run-google-native-e2e-tests
        run: ./gradlew e2eTest --tests GoogleNativeE2eTest
        env:
          # Pulumi personal access token manually added to `pulumi-kotlin` repo by @myhau (Michal Fudala)
          PULUMI_ACCESS_TOKEN: ${{ secrets.ACCESS_TOKEN_PULUMI }}
      - name: Upload E2E test report
        if: ${{ failure() && steps.run-google-native-e2e-tests.outcome == 'failure' }}
        uses: actions/upload-artifact@v4
        with:
          name: google-native-e2e-test-report
          path: ./build/reports/tests/e2eTest/*
          retention-days: 3
  kubernetes-e2e-test:
    name: Run end-to-end tests of Pulumi Kotlin Kubernetes
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Check out project sources
        uses: actions/checkout@v4
      - name: Set up Java
        uses: actions/setup-java@v4
        with:
          distribution: adopt
          java-version: 21
      - name: Start Minikube
        run: minikube start --force
      - name: Set up Pulumi CLI
        uses: pulumi/actions@v5
      - name: Publish Pulumi Kotlin Kubernetes to Maven Local
        run: ./gradlew publishPulumiKubernetesE2ePublicationToMavenLocal -q
      - name: Run E2E tests
        id: run-kubernetes-e2e-tests
        run: ./gradlew e2eTest --tests KubernetesE2eTest
        env:
          # Pulumi personal access token manually added to `pulumi-kotlin` repo by @myhau (Michal Fudala)
          PULUMI_ACCESS_TOKEN: ${{ secrets.ACCESS_TOKEN_PULUMI }}
      - name: Upload E2E test report
        if: ${{ failure() && steps.run-kubernetes-e2e-tests.outcome == 'failure' }}
        uses: actions/upload-artifact@v4
        with:
          name: kubernetes-e2e-test-report
          path: ./build/reports/tests/e2eTest/*
          retention-days: 3