test postgres unit test

Author: taddes

.github/workflows/checks.yml

@@ -201,3 +201,137 @@ jobs:
 
       - name: Rust Clippy ${{ matrix.target }}
         run: make clippy_${{ matrix.target }}
+
+  build-and-test-postgres:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
+
+    services:
+      postgres:
+        image: postgres:18.0
+        env:
+          POSTGRES_USER: test
+          POSTGRES_PASSWORD: test
+          POSTGRES_DB: syncstorage
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd="pg_isready -U test"
+          --health-interval=10s
+          --health-timeout=5s
+          --health-retries=5
+
+    env:
+      SYNC_SYNCSTORAGE__DATABASE_URL: postgres://test:test@127.0.0.1/syncstorage
+      SYNC_TOKENSERVER__DATABASE_URL: postgres://test:test@127.0.0.1/tokenserver
+      SYNC_TOKENSERVER__NODE_TYPE: postgres
+      RUST_BACKTRACE: 1
+      RUST_TEST_THREADS: 1
+
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          persist-credentials: false
+
+      - name: Restore Rust toolchain
+        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5
+        with:
+          path: |
+            ~/.rustup/toolchains
+            ~/.rustup/update-hashes
+          key: ${{ runner.os }}-rust-toolchain-${{ env.RUST_VERSION }}
+
+      - name: Restore pip and Poetry virtualenv
+        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5
+        with:
+          path: |
+            ~/.cache/pip
+            ~/.cache/pypoetry/virtualenvs
+          key: ${{ runner.os }}-python-${{ hashFiles('pyproject.toml', 'poetry.lock') }}
+
+      - name: Install PostgreSQL client
+        run: sudo apt-get update && sudo apt-get install -y postgresql-client
+
+      - name: Create Tokenserver database
+        run: |
+          PGPASSWORD=test psql -U test -h 127.0.0.1 -d syncstorage -c 'CREATE DATABASE tokenserver;'
+
+      - name: Create version.json
+        run: |
+          printf '{"commit":"%s","version":"%s","source":"https://github.com/%s/%s","build":"%s"}\n' \
+            "${GITHUB_SHA}" \
+            "${GITHUB_REF_NAME}" \
+            "${GITHUB_REPOSITORY_OWNER}" \
+            "${GITHUB_REPOSITORY_NAME}" \
+            "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}" \
+            > version.json
+        env:
+          GITHUB_REPOSITORY_NAME: ${{ github.event.repository.name }}
+
+      - name: Install cargo-nextest
+        run: curl -LsSf https://get.nexte.st/latest/linux | tar zxf - -C ${CARGO_HOME:-~/.cargo}/bin
+
+      - name: Install cargo-llvm-cov
+        run: cargo install --locked cargo-llvm-cov
+
+      - name: Run unit tests with coverage
+        run: make postgres_test_with_coverage
+
+      - name: Run unit tests with coverage (quota enforced)
+        run: make postgres_test_with_coverage
+        env:
+          SYNC_SYNCSTORAGE__ENFORCE_QUOTA: 1
+
+      - name: Run Postgres utils tests
+        working-directory: tools/postgres
+        run: |
+          poetry install --no-interaction --no-ansi
+          WORKFLOW=$(echo "${GITHUB_WORKFLOW}" | tr ' ' '-' | tr '[:upper:]' '[:lower:]')
+          poetry run pytest test_purge_ttl.py -v --junit-xml="../../workflow/test-results/${GITHUB_RUN_NUMBER}__$(date +%s)__$(basename ${GITHUB_REPOSITORY})__${WORKFLOW}__postgres_utils__results.xml"
+        env:
+          SYNC_SYNCSTORAGE__DATABASE_URL: postgresql://test:test@127.0.0.1/syncstorage
+
+      - name: Publish Test Report
+        uses: dorny/test-reporter@a810f9bf83f2344124a920a7a0a85a6716e791f0
+        if: always()
+        with:
+          name: Postgres Unit Tests
+          path: workflow/test-results/*.xml
+          reporter: java-junit
+          fail-on-error: false
+
+      - name: Upload test results
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
+        with:
+          name: postgres-test-results
+          path: workflow/test-results/
+
+      # Upload to GCS on master
+      - name: Authenticate to Google Cloud
+        if: github.ref == 'refs/heads/master'
+        uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3
+        with:
+          credentials_json: ${{ secrets.ETE_GCLOUD_SERVICE_KEY }}
+
+      - name: Upload JUnit results to GCS
+        if: github.ref == 'refs/heads/master'
+        uses: google-github-actions/upload-cloud-storage@c0f6160ff80057923ff50e5e567695cea181ec23 # v2
+        with:
+          path: workflow/test-results
+          destination: ecosystem-test-eng-metrics/syncstorage-rs/junit
+          glob: "*.xml"
+          parent: false
+          process_gcloudignore: false
+
+      - name: Upload coverage results to GCS
+        if: github.ref == 'refs/heads/master'
+        uses: google-github-actions/upload-cloud-storage@c0f6160ff80057923ff50e5e567695cea181ec23 # v2
+        with:
+          path: workflow/test-results
+          destination: ecosystem-test-eng-metrics/syncstorage-rs/coverage
+          glob: "*.json"
+          parent: false
+          process_gcloudignore: false