ci: optimize test matrix - PR uses PG 17 only, main tests all versions

- Split into test-pr (PG 17) and test-main (PG 14-17) jobs
- Add concurrency control to cancel superseded runs
- Limit main to 2 parallel jobs (max-parallel: 2)
- Pull common env vars to workflow level

Author: tobyhede

.github/workflows/test.yml

@@ -8,44 +8,61 @@ on:
       - main
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 env:
   CARGO_TERM_COLOR: always
+  CS_CLIENT_ACCESS_KEY: ${{ secrets.CS_CLIENT_ACCESS_KEY }}
+  CS_DEFAULT_KEYSET_ID: ${{ secrets.CS_DEFAULT_KEYSET_ID }}
+  CS_TENANT_KEYSET_ID_1: ${{ secrets.CS_TENANT_KEYSET_ID_1 }}
+  CS_TENANT_KEYSET_ID_2: ${{ secrets.CS_TENANT_KEYSET_ID_2 }}
+  CS_TENANT_KEYSET_ID_3: ${{ secrets.CS_TENANT_KEYSET_ID_3 }}
+  CS_TENANT_KEYSET_NAME_1: ${{ secrets.CS_TENANT_KEYSET_NAME_1 }}
+  CS_TENANT_KEYSET_NAME_2: ${{ secrets.CS_TENANT_KEYSET_NAME_2 }}
+  CS_TENANT_KEYSET_NAME_3: ${{ secrets.CS_TENANT_KEYSET_NAME_3 }}
+  CS_CLIENT_ID: ${{ secrets.CS_CLIENT_ID }}
+  CS_CLIENT_KEY: ${{ secrets.CS_CLIENT_KEY }}
+  CS_WORKSPACE_CRN: ${{ secrets.CS_WORKSPACE_CRN }}
+  RUST_BACKTRACE: "1"
 
 jobs:
-  test:
+  # PR: Test against PostgreSQL 17 only for fast feedback
+  test-pr:
+    name: Test (PostgreSQL 17)
+    if: github.event_name == 'pull_request'
+    runs-on: blacksmith-16vcpu-ubuntu-2204
+    env:
+      PG_VERSION: 17
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/setup-test
+      - run: mise run postgres:up --extra-args "--detach --wait"
+      - run: mise run --output prefix test
+      - uses: ./.github/actions/send-slack-notification
+        with:
+          channel: engineering
+          webhook_url: ${{ secrets.SLACK_NOTIFICATION_WEBHOOK_URL }}
+
+  # Main: Test against all PostgreSQL versions (2 at a time)
+  test-main:
     name: Test (PostgreSQL ${{ matrix.pg_version }})
+    if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
     runs-on: blacksmith-16vcpu-ubuntu-2204
     strategy:
       fail-fast: false
+      max-parallel: 2
       matrix:
-        pg_version: [14, 15, 16, 17] # PG 18 not currently supported
+        pg_version: [14, 15, 16, 17]
     env:
       PG_VERSION: ${{ matrix.pg_version }}
     steps:
       - uses: actions/checkout@v4
       - uses: ./.github/actions/setup-test
-      - run: |
-          mise run postgres:up --extra-args "--detach --wait"
-      - env:
-          # REMEMBER TO ADD ENVIRONMENT VARIABLES TO tests/docker-compose.yml
-          # The tests/docker-compose.yml config passes the ENV vars into the container
-          CS_CLIENT_ACCESS_KEY: ${{ secrets.CS_CLIENT_ACCESS_KEY }}
-          CS_DEFAULT_KEYSET_ID: ${{ secrets.CS_DEFAULT_KEYSET_ID }}
-          CS_TENANT_KEYSET_ID_1: ${{ secrets.CS_TENANT_KEYSET_ID_1 }}
-          CS_TENANT_KEYSET_ID_2: ${{ secrets.CS_TENANT_KEYSET_ID_2 }}
-          CS_TENANT_KEYSET_ID_3: ${{ secrets.CS_TENANT_KEYSET_ID_3 }}
-          CS_TENANT_KEYSET_NAME_1: ${{ secrets.CS_TENANT_KEYSET_NAME_1 }}
-          CS_TENANT_KEYSET_NAME_2: ${{ secrets.CS_TENANT_KEYSET_NAME_2 }}
-          CS_TENANT_KEYSET_NAME_3: ${{ secrets.CS_TENANT_KEYSET_NAME_3 }}
-          CS_CLIENT_ID: ${{ secrets.CS_CLIENT_ID }}
-          CS_CLIENT_KEY: ${{ secrets.CS_CLIENT_KEY }}
-          CS_WORKSPACE_CRN: ${{ secrets.CS_WORKSPACE_CRN }}
-          RUST_BACKTRACE: "1"
-        run: |
-          mise run --output prefix test
-
+      - run: mise run postgres:up --extra-args "--detach --wait"
+      - run: mise run --output prefix test
       - uses: ./.github/actions/send-slack-notification
         with:
           channel: engineering
           webhook_url: ${{ secrets.SLACK_NOTIFICATION_WEBHOOK_URL }}
-