integration-konnect.yaml

name: Konnect Integration Test

concurrency:
  # Only run one workflow at a time. Konnect integration tests cannot be run in parallel
  # as they rely on manifests with static identifiers and/or names that would conflict
  # if run in parallel.
  # Ref: https://docs.github.com/en/actions/using-jobs/using-concurrency
  group: ${{ github.workflow }}
  cancel-in-progress: false

on: [pull_request]

jobs:
  integration:
    timeout-minutes: ${{ fromJSON(vars.DECK_WORKFLOW_KONNECT_TIMEOUT || '10') }}
    env:
      KONG_ANONYMOUS_REPORTS: "off"
      DECK_KONNECT_EMAIL : ${{ secrets.DECK_KONNECT_EMAIL }}
      DECK_KONNECT_PASSWORD : ${{ secrets.DECK_KONNECT_PASSWORD }}
      DECK_KONNECT_ADDR : ${{ secrets.DECK_KONNECT_ADDR }}
      DECK_KONNECT_TOKEN : ${{ secrets.DECK_KONNECT_TOKEN }}
      DECK_TIMEOUT: ${{ vars.DECK_TIMEOUT || '60' }}
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
        with:
          egress-policy: audit
      - name: Checkout repository
        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
      - name: Setup go
        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
        with:
          go-version-file: go.mod
      - name: Run integration tests
        # DECK_WORKFLOW_KONNECT_TIMEOUT is a plain number of minutes (used for timeout-minutes above), append 'm' for go test -timeout.
        run: make test-integration TEST_TIMEOUT=${{ vars.DECK_WORKFLOW_KONNECT_TIMEOUT || '20' }}m