continuous-integration-workflow.yml

# This is a basic workflow

name: CI

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

# Controls when the action will run. Triggers the workflow on push or pull request
# events but only for the master branch
on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
  # This workflow contains a single job called "build"
  build:
    # The type of runner that the job will run on
    runs-on: ${{ matrix.os }}

    permissions:
      contents: read
      actions: write
      pull-requests: write

    strategy:
      fail-fast: false
      matrix:
        os: [macos-latest, windows-latest, ubuntu-latest]
        node: [ 24 ]

    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v7
        with:
          fetch-depth: 1

      # Set up Node
      - name: Use Node.js ${{ matrix.node }}
        uses: actions/setup-node@v6
        with:
          node-version: ${{ matrix.node }}

      - name: Dependency Review
        if: github.event_name == 'pull_request' && runner.os == 'Linux'
        uses: actions/dependency-review-action@v5
        with:
          fail-on-severity: moderate
          fail-on-scopes: runtime, development
          comment-summary-in-pr: on-failure
          license-check: false

      # Run install dependencies
      - name: Install dependencies
        run: |
          npm ci --ignore-scripts
          npm rebuild cpu-features ssh2

      # Run tests without xvfb, if not running on ubuntu
      - name: Build and Test (non-Linux)
        if: (success() || failure()) && runner.os != 'Linux'
        env:
          NODE_OPTIONS: --max_old_space_size=16384
        run: npm run test:coverage --silent

      # Run tests directly running xvfb, if running on ubuntu
      - name: Build and Test (Linux)
        if: (success() || failure()) && runner.os == 'Linux'
        env:
            NODE_OPTIONS: --max_old_space_size=16384
        run: xvfb-run npm run test:coverage --silent

      - name: Start KinD cluster
        if: (success() || failure()) && runner.os == 'Linux'
        uses: helm/kind-action@v1.14.0
        with:
          version: v0.31.0
          node_image: kindest/node:v1.34.0

      - name: Configure cluster
        if: (success() || failure()) && runner.os == 'Linux'
        run: |
          curl -sL https://github.com/operator-framework/operator-lifecycle-manager/releases/download/v0.19.1/install.sh | bash -s v0.19.1
          kubectl create -f https://operatorhub.io/install/service-binding-operator.yaml
          kubectl create -f https://operatorhub.io/install/cloudnative-pg.yaml
          nb=0
          echo -n "Waiting for operator to show up "
          while [ "$nb" != "2" ]
          do
            echo -n "."
            sleep 1
            nb=`kubectl get pods -n operators --no-headers --ignore-not-found | grep Running | wc -l`
          done
          echo CLUSTER_URL=`kubectl cluster-info | sed -n -e "s/\x1B\[[0-9;]*[a-zA-Z]//g" -e '1s/.*running at \(.*\)$/\1/p'` >> $GITHUB_ENV
      # UI tests fail under linux
      # Run UI tests
      - name: Run UI Tests
        env:
            NODE_OPTIONS: --max_old_space_size=16384
        if: runner.os == 'Linux'
        run: |
          # Patch vscode:prepublish to reinstall secretlint AFTER prune
          node -e "
            const fs = require('fs');
            const pkg = JSON.parse(fs.readFileSync('package.json'));
            pkg.scripts['vscode:prepublish'] += ' && npm install --ignore-scripts @secretlint/node';
            fs.writeFileSync('package.json', JSON.stringify(pkg, null, 2));
          "
          xvfb-run --server-args="-screen 0 1920x1080x24" npm run public-ui-test

      - name: Build and run integration tests
        if: (success() || failure()) && runner.os == 'Linux'
        env:
          NODE_OPTIONS: --max_old_space_size=16384
        run: xvfb-run npm run test-integration:coverage --silent

      # Archiving integration tests artifacts
      - name: Upload test artifacts
        uses: actions/upload-artifact@v7
        if: failure() && runner.os == 'Linux'
        with:
          name: artifacts-${{ matrix.os }}
          path: |
            /tmp/test-resources/settings/logs/**/*.log
            /tmp/test-resources/screenshots/**/*.png
          retention-days: 2

      # Upload coverage to codecov.io
      - name: Codecov
        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f #v7.0.0
        if: (success() || failure()) && runner.os == 'Linux'
        with:
          files: ./coverage/unit/coverage-final.json,./coverage/integration/coverage-final.json