ci.yml

name: CI

on:
  pull_request:
    branches: [main, master]
    types: [opened, synchronize, reopened, ready_for_review]

concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref }}
  cancel-in-progress: true

permissions:
  id-token: write
  contents: read

env:
  CARGO_TERM_COLOR: always
  RESOURCE_PREFIX: pr-${{ github.event.pull_request.number }}-

jobs:
  fmt:
    name: Format
    if: github.event.pull_request.draft == false
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt
      - run: cargo fmt --all --check

  test:
    name: Test
    if: github.event.pull_request.draft == false
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo test --all-features

  python-distro-test:
    name: Python Distro Unit Tests
    if: github.event.pull_request.draft == false
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: '3.12'
      - name: Install dependencies
        run: |
          python -m venv opt/python/distro/.venv
          opt/python/distro/.venv/bin/pip install -r opt/python/distro/requirements-dev.txt
      - name: Run tests
        working-directory: opt/python/distro
        run: .venv/bin/pytest

  node-distro-test:
    name: Node Distro Unit Tests
    if: github.event.pull_request.draft == false
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '20'
      - name: Build @opentelemetry/instrumentation-aws-sdk from fork
        run: bash opt/node/scripts/build-aws-sdk-tarball.sh
      - name: Install dependencies
        working-directory: opt/node
        run: npm install
      - name: Run tests
        working-directory: opt/node
        run: npm test

  build:
    name: Build Rust Binaries
    if: github.event.pull_request.draft == false
    uses: ./.github/workflows/build.yml

  deploy:
    name: Publish Layers
    if: github.event.pull_request.head.repo.full_name == github.repository
    needs: build
    uses: ./.github/workflows/publish.yml
    with:
      environment: staging
      prefix: pr-${{ github.event.pull_request.number }}-
    secrets: inherit

  sls-plugin-test:
    name: SLS Plugin Unit Tests
    if: github.event.pull_request.draft == false
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '20'
      - name: Install dependencies
        working-directory: sls-plugin
        run: npm ci
      - name: Build
        working-directory: sls-plugin
        run: npm run build
      - name: Run tests
        working-directory: sls-plugin
        run: npm test

  deploy-sls:
    name: Deploy SLS Stacks
    if: github.event.pull_request.head.repo.full_name == github.repository
    needs: deploy
    runs-on: ubuntu-latest
    environment: staging
    strategy:
      fail-fast: false
      matrix:
        sls-version: [v3, v4]
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '20'
      - uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: ${{ vars.AWS_ROLE_ARN }}
          aws-region: ${{ vars.AWS_REGION }}
      - name: Install plugin dependencies
        working-directory: sls-plugin
        run: npm ci
      - name: Build plugin
        working-directory: sls-plugin
        run: npm run build
      - name: Install SLS project dependencies
        working-directory: integration-tests/sls/${{ matrix.sls-version }}
        run: npm ci
      - name: Resolve latest layer version
        run: |
          DASH0_LAYER_VERSION=$(aws lambda list-layer-versions \
            --layer-name "${{ env.RESOURCE_PREFIX }}dash0-extension-node" \
            --query 'LayerVersions[0].Version' --output text)
          echo "Latest layer version: $DASH0_LAYER_VERSION"
          if [ "$DASH0_LAYER_VERSION" = "None" ] || [ -z "$DASH0_LAYER_VERSION" ]; then
            echo "::error::No layer versions found for ${{ env.RESOURCE_PREFIX }}dash0-extension-node"
            exit 1
          fi
          echo "DASH0_LAYER_VERSION=$DASH0_LAYER_VERSION" >> "$GITHUB_ENV"
      - name: Deploy with Serverless
        working-directory: integration-tests/sls/${{ matrix.sls-version }}
        run: npx serverless deploy
        env:
          DASH0_DEV_API_TOKEN: ${{ secrets.DASH0_DEV_API_TOKEN }}
          DASH0_LAYER_VERSION: ${{ env.DASH0_LAYER_VERSION }}
          SERVERLESS_ACCESS_KEY: ${{ secrets.SERVERLESS_ACCESS_KEY }}

  deploy-cdk:
    name: Deploy CDK Stack
    if: github.event.pull_request.head.repo.full_name == github.repository
    needs: deploy
    runs-on: ubuntu-latest
    environment: staging
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'
          cache-dependency-path: integration-tests/iac/package-lock.json
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: ${{ vars.AWS_ROLE_ARN }}
          aws-region: ${{ vars.AWS_REGION }}
      - name: Free disk space
        run: |
          sudo rm -rf /usr/share/dotnet
          sudo rm -rf /usr/local/lib/android
          sudo rm -rf /opt/ghcrunner
          sudo rm -rf /usr/local/share/boost
          sudo rm -rf /usr/share/swift
          docker system prune -af
          df -h
      - name: Install dependencies
        working-directory: integration-tests/iac
        run: npm ci
      - name: Deploy CDK stack
        working-directory: integration-tests/iac
        run: npm run deploy
        env:
          DASH0_DEV_API_TOKEN: ${{ secrets.DASH0_DEV_API_TOKEN }}
          TEST_POSTGRESS_PASSWORD: ${{ secrets.TEST_POSTGRESS_PASSWORD }}
          TEST_MYSQL_PASSWORD: ${{ secrets.TEST_MYSQL_PASSWORD }}

  integration-test:
    name: Integration Test
    if: github.event.pull_request.head.repo.full_name == github.repository
    needs: [deploy-cdk, deploy-sls]
    runs-on: ubuntu-latest
    environment: staging
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'
          cache-dependency-path: integration-tests/tests/package-lock.json
      - uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: ${{ vars.AWS_ROLE_ARN }}
          aws-region: ${{ vars.AWS_REGION }}
      - name: Install test dependencies
        working-directory: integration-tests/tests
        run: npm ci
      - name: Run integration tests
        working-directory: integration-tests/tests
        run: npm run test
        env:
          DASH0_DEV_API_TOKEN: ${{ secrets.DASH0_DEV_API_TOKEN }}