test.yml

# Terraform Provider testing workflow.
name: Tests

# This GitHub action runs tests for each pull request and push.
on:
  pull_request:
    paths-ignore:
      - 'README.md'
  push:
    paths-ignore:
      - 'README.md'

permissions:
  contents: read

jobs:
  # Ensure project builds before running testing matrix
  build:
    name: Build
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version-file: 'go.mod'
          cache: true
      - run: go mod download
      - run: go build -v ./...
      - name: Run linters
        uses: golangci/golangci-lint-action@v6
        with:
          version: latest

  generate:
    name: Generate Docs
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
      - uses: actions/setup-go@v5
        with:
          go-version-file: 'go.mod'
          cache: true
      - uses: hashicorp/setup-terraform@v3
        with:
          terraform_wrapper: false
      - run: go generate ./...
      - name: Check for changes
        id: git-check
        run: |
          git diff --compact-summary --exit-code || echo "has_changes=true" >> $GITHUB_OUTPUT
      - name: Commit and push changes (push events)
        if: steps.git-check.outputs.has_changes == 'true' && github.event_name == 'push'
        run: |
          git config --global user.name 'github-actions[bot]'
          git config --global user.email 'github-actions[bot]@users.noreply.github.com'
          git add -A
          git commit -m "docs: Auto-generate documentation from schema changes"
          git push
      - name: Fail on uncommitted changes (pull requests)
        if: steps.git-check.outputs.has_changes == 'true' && github.event_name == 'pull_request'
        run: |
          echo "Unexpected difference in directories after code generation."
          echo "Run 'go generate ./...' command and commit the changes."
          git diff --compact-summary
          exit 1

  # Run acceptance tests in a matrix with Terraform CLI versions.
  # Tests require TF_ACC=1 and SIMPLEMDM_APIKEY to run; without them,
  # acceptance tests are automatically skipped while unit/coverage tests run.
  test:
    name: Terraform Provider Tests (${{ matrix.terraform }})
    needs: build
    runs-on: ubuntu-latest
    timeout-minutes: 30
    strategy:
      fail-fast: false
      matrix:
        terraform:
          - '1.8.*'
          - '1.9.*'
          - '1.10.*'
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version-file: 'go.mod'
          cache: true
      - uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: ${{ matrix.terraform }}
          terraform_wrapper: false
      - run: go mod download
      - name: Run tests
        env:
          TF_ACC: "1"
          SIMPLEMDM_APIKEY: ${{ secrets.SIMPLEMDM_APIKEY }}
          # Fixture IDs for data source tests
          SIMPLEMDM_APP_ID: ${{ secrets.SIMPLEMDM_APP_ID }}
          SIMPLEMDM_ASSIGNMENT_GROUP_ID: ${{ secrets.SIMPLEMDM_ASSIGNMENT_GROUP_ID }}
          SIMPLEMDM_ATTRIBUTE_NAME: ${{ secrets.SIMPLEMDM_ATTRIBUTE_NAME }}
          SIMPLEMDM_CUSTOM_PROFILE_ID: ${{ secrets.SIMPLEMDM_CUSTOM_PROFILE_ID }}
          SIMPLEMDM_CUSTOM_DECLARATION_ID: ${{ secrets.SIMPLEMDM_CUSTOM_DECLARATION_ID }}
          SIMPLEMDM_DEVICE_GROUP_ID: ${{ secrets.SIMPLEMDM_DEVICE_GROUP_ID }}
          SIMPLEMDM_DEVICE_ID: ${{ secrets.SIMPLEMDM_DEVICE_ID }}
          SIMPLEMDM_ENROLLMENT_ID: ${{ secrets.SIMPLEMDM_ENROLLMENT_ID }}
          SIMPLEMDM_PROFILE_ID: ${{ secrets.SIMPLEMDM_PROFILE_ID }}
          SIMPLEMDM_SCRIPT_ID: ${{ secrets.SIMPLEMDM_SCRIPT_ID }}
          SIMPLEMDM_SCRIPT_JOB_ID: ${{ secrets.SIMPLEMDM_SCRIPT_JOB_ID }}
          SIMPLEMDM_MANAGED_APP_ID: ${{ secrets.SIMPLEMDM_MANAGED_APP_ID }}
          # Fixture IDs for resource tests
          SIMPLEMDM_DEVICE_GROUP_CLONE_SOURCE_ID: ${{ secrets.SIMPLEMDM_DEVICE_GROUP_CLONE_SOURCE_ID }}
          SIMPLEMDM_ENROLLMENT_CONTACT: ${{ secrets.SIMPLEMDM_ENROLLMENT_CONTACT }}
          SIMPLEMDM_CUSTOM_DECLARATION_DEVICE_ID: ${{ secrets.SIMPLEMDM_CUSTOM_DECLARATION_DEVICE_ID }}
          SIMPLEMDM_DEP_SERVER_ID: ${{ secrets.SIMPLEMDM_DEP_SERVER_ID }}
        run: go test -v -cover ./provider/... ./internal/...
        timeout-minutes: 20