Merge branch 'master' into feat/add-lb-pn-resource

Author: yfodil

.github/labeler.yml

@@ -117,3 +117,8 @@ webhosting:
   - changed-files:
       - any-glob-to-any-file:
           - internal/services/webhosting/**
+file:
+  - changed-files:
+      - any-glob-to-any-file:
+          - internal/services/file/**
+

.github/workflows/acceptance-tests.yaml

@@ -1,5 +1,8 @@
 name: Acceptance Tests
 
+permissions:
+  contents: read
+
 on:
   pull_request:
   merge_group:
@@ -19,6 +22,7 @@ jobs:
           - cockpit
           - container
           - domain
+          - file
           - flexibleip
           - function
           - iam
@@ -53,8 +57,79 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version: 1.24.0
+      # This CI supports skipping flaky or broken tests via GitHub repository variables.
+      # This allows quick fixes without code changes when tests break due to external factors.
+      #
+      # HOW TO SKIP TESTS:
+      # 1. Go to: Settings → Secrets and variables → Actions → Variables
+      # 2. Create or edit Repository variables:
+      #    - SKIP_TESTS_<PRODUCT>: Skip patterns for any product (uppercase)
+      #    - SKIP_TESTS_ALL: Skip patterns applied to ALL products
+      #
+      # PATTERN SYNTAX:
+      # - Single test: TestAccServer_Basic
+      # - Multiple tests: TestAccServer_Basic|TestAccServer_Other
+      # - Wildcard: TestAccServer.*
+      # - Contains: .*IPAM.*
+      #
+      # EXAMPLE:
+      # Variable: SKIP_TESTS_BAREMETAL
+      # Value: TestAccServer_Basic|TestAccServer_WithIPAMPrivateNetwork
+      - name: Determine Skip Pattern
+        id: skip-config
+        run: |
+          PRODUCT="${{ matrix.products }}"
+          SKIP_PATTERN=""
+          
+          case "$PRODUCT" in
+            baremetal)
+              SKIP_PATTERN="$SKIP_TESTS_BAREMETAL"
+              ;;
+          esac
+
+          if [ -n "$SKIP_TESTS_ALL" ]; then
+            if [ -n "$SKIP_PATTERN" ]; then
+              SKIP_PATTERN="${SKIP_PATTERN}|${SKIP_TESTS_ALL}"
+            else
+              SKIP_PATTERN="$SKIP_TESTS_ALL"
+            fi
+          fi
+
+          echo "skip_pattern=$SKIP_PATTERN" >> $GITHUB_OUTPUT
+        env:
+          SKIP_TESTS_BAREMETAL: ${{ vars.SKIP_TESTS_BAREMETAL }}
+          SKIP_TESTS_ALL: ${{ vars.SKIP_TESTS_ALL }}
       - name: Run Acceptance Tests
-        run: go test -v ./internal/services/${{ matrix.products }} -timeout=2h
+        run: |
+          SKIP_PATTERN="${{ steps.skip-config.outputs.skip_pattern }}"
+
+          if [ -n "$SKIP_PATTERN" ]; then
+            echo ""
+            echo "SKIPPING TESTS"
+            echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+            echo "Pattern: $SKIP_PATTERN"
+            echo ""
+            echo "Tests that will be skipped:"
+            go test -list=. ./internal/services/${{ matrix.products }} | grep -E "$SKIP_PATTERN" || true
+            echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+            echo ""
+
+            go test -v ./internal/services/${{ matrix.products }} -timeout=2h -skip="$SKIP_PATTERN"
+            TEST_RESULT=$?
+          else
+            go test -v ./internal/services/${{ matrix.products }} -timeout=2h
+            TEST_RESULT=$?
+          fi
+
+          if [ -n "$SKIP_PATTERN" ]; then
+            echo ""
+            echo "CI Skip Configuration:"
+            echo "Pattern: $SKIP_PATTERN"
+            echo "To modify: Update SKIP_TESTS_$(echo ${{ matrix.products }} | tr '[:lower:]' '[:upper:]') in GitHub repository variables"
+          fi
+          echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+
+          exit $TEST_RESULT
         env:
           TF_LOG: DEBUG
           TF_ACC: 1

.github/workflows/actionlint.yml

@@ -1,6 +1,9 @@
 name: Lint GitHub Actions workflows
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   actionlint:
     runs-on: ubuntu-latest

.github/workflows/announce.yaml

@@ -1,5 +1,8 @@
 name: Slack Announcement
 
+permissions:
+  contents: read
+
 on:
   release:
     types:

.github/workflows/codeql-analysis.yml

@@ -5,6 +5,11 @@
 # or to provide custom queries or build logic.
 name: "CodeQL"
 
+permissions:
+  contents: read
+  security-events: write
+  actions: read
+
 on:
   push:
     branches: [master]
@@ -24,7 +29,7 @@ jobs:
       matrix:
         # Override automatic language detection by changing the below list
         # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
-        language: ['go']
+        language: ['go', 'actions']
         # Learn more...
         # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
 

.github/workflows/documentation.yml

@@ -1,4 +1,8 @@
 name: Documentation Checks
+
+permissions:
+  contents: read
+
 on:
   push:
     branches:
@@ -61,3 +65,5 @@ jobs:
           go-version: ${{ env.GO_VERSION }}
       - uses: hashicorp/setup-terraform@v3
       - run: go tool tfplugindocs validate
+      - run: go tool tfplugindocs generate
+      - run: git diff --exit-code docs

.github/workflows/golangci-lint.yml

@@ -15,6 +15,5 @@ jobs:
       - name: golangci-lint
         uses: golangci/[email protected]
         with:
-          # Required: the version of golangci-lint is required and must be specified without patch version: we always use the latest patch version.
-          version: latest
+          version: v2.3.0
           args: --timeout 5m

.github/workflows/nightly.yml

@@ -1,5 +1,8 @@
 name: Nightly Acceptance Tests
 
+permissions:
+  contents: read
+
 on:
   schedule:
     # Will run at 00:00 every day
@@ -13,6 +16,7 @@ jobs:
         products:
           - account
           - applesilicon
+          - autoscaling
           - az
           - baremetal
           - billing

.github/workflows/purge.yml

@@ -1,4 +1,8 @@
 name: Manual Purge
+
+permissions:
+  contents: read
+
 on:
   workflow_dispatch:
 

.github/workflows/release.yml

@@ -10,6 +10,8 @@
 # in `goreleaser` to indicate this is being used in a non-interactive mode.
 #
 name: release
+permissions:
+  contents: write
 on:
   push:
     tags: