full postgres test workflow with checks

Author: taddes

.github/workflows/checks.yml

@@ -202,7 +202,9 @@ jobs:
       - name: Rust Clippy ${{ matrix.target }}
         run: make clippy_${{ matrix.target }}
 
-  build-and-test-postgres:
+  # Postgres
+  build-and-unit-test-postgres:
+    needs: [rust-env, python-env]
     runs-on: ubuntu-latest
     permissions:
       contents: read
@@ -335,3 +337,112 @@ jobs:
           glob: "*.json"
           parent: false
           process_gcloudignore: false
+
+  build-postgres-image:
+    runs-on: ubuntu-latest
+    needs: [rust-env, python-env]
+    permissions:
+      contents: read
+      actions: write
+
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          persist-credentials: false
+
+      - name: Create version.json
+        run: |
+          printf '{"commit":"%s","version":"%s","source":"https://github.com/%s/%s","build":"%s"}\n' \
+            "${GITHUB_SHA}" \
+            "${GITHUB_REF_NAME}" \
+            "${GITHUB_REPOSITORY_OWNER}" \
+            "${GITHUB_REPOSITORY_NAME}" \
+            "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}" \
+            > version.json
+        env:
+          GITHUB_REPOSITORY_NAME: ${{ github.event.repository.name }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+
+      - name: Build Postgres Docker image
+        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        with:
+          context: .
+          push: false
+          tags: app:build
+          build-args: |
+            SYNCSTORAGE_DATABASE_BACKEND=postgres
+            TOKENSERVER_DATABASE_BACKEND=postgres
+          outputs: type=docker,dest=/tmp/postgres-image.tar
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Upload Docker image artifact
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+        with:
+          name: postgres-docker-image
+          path: /tmp/postgres-image.tar
+          retention-days: 1
+
+  postgres-e2e-tests:
+    runs-on: ubuntu-latest
+    needs: build-postgres-image
+    permissions:
+      contents: read
+      checks: write
+
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          persist-credentials: false
+
+      - name: Download Docker image
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6
+        with:
+          name: postgres-docker-image
+          path: /tmp
+
+      - name: Load Docker image
+        run: docker load --input /tmp/postgres-image.tar
+
+      - name: Create test results directory
+        run: mkdir -p workflow/test-results
+
+      - name: Run Postgres e2e tests
+        run: make docker_run_postgres_e2e_tests
+        env:
+          SYNCSTORAGE_RS_IMAGE: app:build
+
+      - name: Publish E2E Test Report
+        uses: dorny/test-reporter@a810f9bf83f2344124a920a7a0a85a6716e791f0
+        if: always()
+        with:
+          name: Postgres E2E Tests
+          path: workflow/test-results/*.xml
+          reporter: java-junit
+          fail-on-error: false
+
+      - name: Upload e2e test results
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+        with:
+          name: postgres-e2e-test-results
+          path: workflow/test-results/
+
+      # Upload to GCS on master
+      - name: Authenticate to Google Cloud
+        if: github.ref == 'refs/heads/master'
+        uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3
+        with:
+          credentials_json: ${{ secrets.ETE_GCLOUD_SERVICE_KEY }}
+
+      - name: Upload e2e test results to GCS
+        if: github.ref == 'refs/heads/master'
+        uses: google-github-actions/upload-cloud-storage@c0f6160ff80057923ff50e5e567695cea181ec23 # v2
+        with:
+          path: workflow/test-results
+          destination: ecosystem-test-eng-metrics/syncstorage-rs/junit
+          glob: "*.xml"
+          parent: false
+          process_gcloudignore: false