nginx-datadog/.github/workflows/system-tests.yml at master · DataDog/nginx-datadog · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
name: System Tests

on:
  push:
    branches:
      - master
  pull_request:
  schedule:
    - cron:  '00 03 * * *'

jobs:

  build:
    runs-on: ubuntu-latest
    env:
      ARCH: x86_64
      # The Nginx version must match the one in System Tests, in
      # https://github.com/DataDog/system-tests/blob/main/utils/build/docker/cpp_nginx/nginx.Dockerfile#L3,
      # and must be one of the versions built in GitLab CI build-and-test-fast.
      NGINX_VERSION: 1.29.8
      WAF: ON
      MIRROR_REGISTRY: ""
    steps:
      - name: checkout
        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
      - run: git submodule sync dd-trace-cpp libddwaf && git submodule update --init --recursive dd-trace-cpp libddwaf
      - name: Login to Docker Hub
        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - name: build
        run: 'make build-musl'
        env:
          BUILD_TYPE: RelWithDebInfo
      - name: Upload artifact
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        with:
          name: binaries
          path: .musl-build/ngx_http_datadog_module.so

  main:
    needs:
    - build
    uses:  DataDog/system-tests/.github/workflows/system-tests.yml@main
    secrets:
      DD_API_KEY: ${{ secrets.DD_API_KEY }}
      TEST_OPTIMIZATION_API_KEY: ${{ secrets.DD_API_KEY }}
    permissions:
      contents: read
      id-token: write
    with:
      library: cpp_nginx
      binaries_artifact: binaries
      desired_execution_time: 600  # 10 minutes
      scenarios_groups: ${{ (github.event_name == 'schedule' || github.event_name == 'push') && 'tracer_release' || 'appsec' }}
      scenarios: DEFAULT
      excluded_scenarios: INTEGRATIONS  # no test activated, and long warm-up
      skip_empty_scenarios: ${{ github.event_name == 'pull_request' }}
      push_to_test_optimization: true

  # Ensure the main job is run to completion
  check:
    name: Check system tests success
    runs-on: ubuntu-latest
    needs:
    - main
    steps:
    - run: exit 0