test.yml

name: Test

on:
  push:
    branches:
      - master
      - main
  pull_request:
    branches: ['*']
  merge_group:
    types: [checks_requested]
  workflow_dispatch:

permissions:
  contents: read

jobs:
  # Skip duplicate runs
  pre-job:
    runs-on: ubuntu-latest
    name: Pre job checks
    outputs:
      should_skip: ${{ steps.skip_check.outputs.should_skip }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - id: skip_check
        uses: fkirc/skip-duplicate-actions@v3.4.1
        with:
          cancel_others: false
          paths_ignore: '["**/*.md", "**/*.adoc", "LICENSE"]'

  # Unit tests with coverage
  unit-tests:
    name: Unit Tests
    if: ${{ github.event_name == 'schedule' || needs.pre-job.outputs.should_skip != 'true' }}
    needs: pre-job
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version-file: go.mod
          cache: true

      - name: Cache tool binaries
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: bin/
          key: ${{ runner.os }}-tools-${{ hashFiles('Makefile') }}
          restore-keys: |
            ${{ runner.os }}-tools-

      - name: Run unit tests
        run: make test-unit

      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: ./_output/unit.cov
          flags: unit
          fail_ci_if_error: false
          verbose: true

  # CRD validation tests
  test-crds:
    name: CRD Validation
    if: ${{ github.event_name == 'schedule' || needs.pre-job.outputs.should_skip != 'true' }}
    needs: pre-job
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version-file: go.mod

      - name: Cache tool binaries
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: bin/
          key: ${{ runner.os }}-tools-${{ hashFiles('Makefile') }}
          restore-keys: |
            ${{ runner.os }}-tools-

      - name: Run CRD tests
        run: make test-crds

  # Manifest version tests
  test-manifests-version:
    name: Manifest Version Tests
    if: ${{ github.event_name == 'schedule' || needs.pre-job.outputs.should_skip != 'true' }}
    needs: pre-job
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version-file: go.mod

      - name: Cache tool binaries
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: bin/
          key: ${{ runner.os }}-tools-${{ hashFiles('Makefile') }}
          restore-keys: |
            ${{ runner.os }}-tools-

      - name: Run manifest version tests
        run: make test-manifests-version

  # Bundle validation
  bundle-validate:
    name: Bundle Validation
    if: ${{ github.event_name == 'schedule' || needs.pre-job.outputs.should_skip != 'true' }}
    needs: pre-job
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version-file: go.mod

      - name: Cache tool binaries 
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: bin/
          key: ${{ runner.os }}-tools-${{ hashFiles('Makefile') }}
          restore-keys: |
            ${{ runner.os }}-tools-

      - name: Generate bundle
        run: make bundle

      - name: Validate bundle
        run: make bundle-update-test

  # Assets validation
  assets-validate:
    name: Assets Validation
    if: ${{ github.event_name == 'schedule' || needs.pre-job.outputs.should_skip != 'true' }}
    needs: pre-job
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version-file: go.mod

      - name: Cache tool binaries
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: bin/
          key: ${{ runner.os }}-tools-${{ hashFiles('Makefile') }}
          restore-keys: |
            ${{ runner.os }}-tools-

      - name: Validate assets
        run: make assets-update-test

  # Prometheus rules validation
  prometheusrules-validate:
    name: Prometheus Rules Validation
    if: ${{ github.event_name == 'schedule' || needs.pre-job.outputs.should_skip != 'true' }}
    needs: pre-job
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version-file: go.mod

      - name: Cache tool binaries
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: bin/
          key: ${{ runner.os }}-tools-${{ hashFiles('Makefile') }}
          restore-keys: |
            ${{ runner.os }}-tools-

      - name: Validate Prometheus rules
        run: make prometheusrules-update-test

  # License compliance check
  license-check:
    name: License Check
    if: ${{ github.event_name == 'schedule' || needs.pre-job.outputs.should_skip != 'true' }}
    needs: pre-job
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version-file: go.mod

      - name: Setup Ruby
        uses: ruby/setup-ruby@c4e5b1316158f92e3d49443a9d58b31d25ac0f8f # v1.306.0
        with:
          ruby-version: '3.0'

      - name: Install license_finder
        run: gem install license_finder --version 7.2.1

      - name: Run license check
        run: make licenses-check

  lint:
    name: Lint
    if: ${{ github.event_name == 'schedule' || needs.pre-job.outputs.should_skip != 'true' }}
    needs: pre-job
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version-file: go.mod
      - name: Go Lint
        run: make run-lint

  verify-fmt:
    name: Verify fmt
    if: ${{ github.event_name == 'schedule' || needs.pre-job.outputs.should_skip != 'true' }}
    needs: pre-job
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Setup Go
        uses: actions/setup-go@v6
        with:
          go-version-file: go.mod
      - name: Run make verify-fmt
        run: |
          make verify-fmt

  verify-go-mod:
    name: Verify go.mod
    if: ${{ github.event_name == 'schedule' || needs.pre-job.outputs.should_skip != 'true' }}
    needs: pre-job
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version-file: go.mod

      - name: Verify generate command
        run: |
          make verify-go-mod

  verify-generate:
    name: Verify generate
    if: ${{ github.event_name == 'schedule' || needs.pre-job.outputs.should_skip != 'true' }}
    needs: pre-job
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version-file: go.mod

      - name: Verify generate command
        run: |
          make verify-generate

  verify-manifests:
    name: Verify manifests
    if: ${{ github.event_name == 'schedule' || needs.pre-job.outputs.should_skip != 'true' }}
    needs: pre-job
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version-file: go.mod

      - name: Verify manifests
        run: make verify-manifests

  # Required checks aggregation
  required-checks:
    name: All CI Checks
    needs:
      - license-check
      - test-crds
      - test-manifests-version
      - unit-tests
      - bundle-validate
      - assets-validate
      - prometheusrules-validate
      - lint
      - verify-fmt
      - verify-go-mod
      - verify-generate
      - verify-manifests
    if: always()
    runs-on: ubuntu-latest
    steps:
      - name: Check all job results
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Verify all jobs succeeded
        run: echo '${{ toJSON(needs) }}' | jq -e 'all(.[]; .result == "success" or .result == "skipped")'