cloud-database-tests.yml

name: Cloud database tests
on:
  workflow_call:
  workflow_dispatch:
    inputs:
      target:
        description: Which managed database to test against
        required: true
        default: all
        type: choice
        options:
          - all
          - azure-sqlserver
          - azure-postgresql
          - aurora-postgresql
          - rds-sqlserver
env:
  DOTNET_NOLOGO: true
  # Its own region rather than the AWS_REGION secret the SQS tests use: that one is at its VPC
  # ceiling, so RDS has no default VPC to place a publicly accessible instance in. us-east-2 already
  # has one, has VPC headroom, and offers both instance classes these targets ask for.
  AWS_DATABASE_REGION: us-east-2
defaults:
  run:
    shell: pwsh
concurrency:
  # Deliberately not cancel-in-progress: cancelling a run mid-flight risks skipping the teardown
  # step and leaving billable cloud resources behind.
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: false
jobs:
  plan:
    name: Plan
    runs-on: ubuntu-latest
    outputs:
      targets: ${{ steps.select.outputs.targets }}
    steps:
      - name: Select targets
        id: select
        run: |
          $all = @(
            @{ target = 'azure-sqlserver';    provider = 'SqlServer'  }
            @{ target = 'azure-postgresql';   provider = 'PostgreSql' }
            @{ target = 'aurora-postgresql';  provider = 'PostgreSql' }
            @{ target = 'rds-sqlserver';      provider = 'SqlServer'  }
          )

          # A tag push has no input, and runs everything.
          $requested = '${{ inputs.target }}'
          $targets = if (-not $requested -or $requested -eq 'all') { $all } else { $all | Where-Object { $_.target -eq $requested } }

          if (-not $targets) {
            throw "No cloud target named '$requested'."
          }

          $targets | ForEach-Object { Write-Output "Will test against $($_.target)" }

          $matrix = @{ include = @($targets) }
          "targets=$(ConvertTo-Json -InputObject $matrix -Compress -Depth 4)" | Out-File -FilePath $Env:GITHUB_OUTPUT -Encoding utf8 -Append

  test:
    name: ${{ matrix.target }}
    needs: plan
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix: ${{ fromJSON(needs.plan.outputs.targets) }}
    # The suites that exercise the primary and audit persisters. Named outright rather than
    # selected by test category, because the category also carries the transport tests, which test
    # the queue transport against its own connection string and have no business running here.
    env:
      PERSISTENCE_PROJECT: src/ServiceControl.Persistence.Tests.${{ matrix.provider }}/ServiceControl.Persistence.Tests.${{ matrix.provider }}.csproj
      ACCEPTANCE_PROJECT: src/ServiceControl.AcceptanceTests.${{ matrix.provider }}/ServiceControl.AcceptanceTests.${{ matrix.provider }}.csproj
      AUDIT_PERSISTENCE_PROJECT: src/ServiceControl.Audit.Persistence.Tests.${{ matrix.provider }}/ServiceControl.Audit.Persistence.Tests.${{ matrix.provider }}.csproj
      AUDIT_ACCEPTANCE_PROJECT: src/ServiceControl.Audit.AcceptanceTests.${{ matrix.provider }}/ServiceControl.Audit.AcceptanceTests.${{ matrix.provider }}.csproj
    steps:
      - name: Check for secrets
        env:
          SECRETS_AVAILABLE: ${{ secrets.SECRETS_AVAILABLE }}
        run: exit $(If ($env:SECRETS_AVAILABLE -eq 'true') { 0 } Else { 1 })
      - name: Checkout
        uses: actions/checkout@v7.0.1
        with:
          fetch-depth: 0
      - name: Setup .NET SDK
        uses: actions/setup-dotnet@v6.0.0
        with:
          global-json-file: global.json
      - name: Determine runtime version
        run: |
          # Read settings from Custom.Build.props
          [xml]$xml = Get-Content ./src/Custom.Build.props
          $runtimeVersion = $xml.selectNodes('/Project/PropertyGroup/RuntimeFrameworkVersion').InnerText
          if (-not ($runtimeVersion)) {
            throw "Missing RuntimeFrameworkVersion setting in Custom.Build.props"
          }
          echo "RuntimeVersion=$runtimeVersion" | Out-File -FilePath $Env:GITHUB_ENV -Encoding utf-8 -Append
      - name: Install .NET Runtime
        shell: bash
        run: |
          ./tools/dotnet-install.sh --skip-non-versioned-files --install-dir /usr/share/dotnet --runtime dotnet --version ${{ env.RuntimeVersion }}
          ./tools/dotnet-install.sh --skip-non-versioned-files --install-dir /usr/share/dotnet --runtime aspnetcore --version ${{ env.RuntimeVersion }}
      - name: Build
        id: build
        background: true
        run: |
          dotnet build $Env:PERSISTENCE_PROJECT --configuration Release
          dotnet build $Env:ACCEPTANCE_PROJECT --configuration Release
          dotnet build $Env:AUDIT_PERSISTENCE_PROJECT --configuration Release
          dotnet build $Env:AUDIT_ACCEPTANCE_PROJECT --configuration Release
      - name: Azure login
        uses: azure/login@v3.1.0
        if: startsWith(matrix.target, 'azure-')
        with:
          creds: ${{ secrets.AZURE_ACI_CREDENTIALS }}
      - name: Setup AWS environment variables
        if: startsWith(matrix.target, 'aurora-') || startsWith(matrix.target, 'rds-')
        run: |
          echo "AWS_REGION=${{ env.AWS_DATABASE_REGION }}" | Out-File -FilePath $Env:GITHUB_ENV -Encoding utf-8 -Append
          echo "AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }}" | Out-File -FilePath $Env:GITHUB_ENV -Encoding utf-8 -Append
          echo "AWS_SECRET_ACCESS_KEY=${{ secrets.AWS_SECRET_ACCESS_KEY }}" | Out-File -FilePath $Env:GITHUB_ENV -Encoding utf-8 -Append
      # Unlike ci.yml, which holds its cloud resources back until the build is done, provisioning
      # starts first: it is the long pole here at anywhere from 3 to 25 minutes, and the database is
      # torn down by this action's post step whatever the job does afterwards.
      #
      # It has to come after the login steps above. Post steps run in reverse, so this one's teardown
      # runs before azure/login's post step signs the CLI out from under it.
      - name: Provision database
        uses: ./.github/actions/cloud-database
        with:
          target: ${{ matrix.target }}
          # The server is what isolates one run from another, so this has to be unique per run. It
          # includes the attempt because run_id does not change when a run is retried, and the
          # previous attempt's server may still be there or still be deleting.
          name: sc-ct-${{ github.run_id }}-${{ github.run_attempt }}
      - name: Wait for build
        wait: build
      - name: Run tests
        uses: Particular/run-tests-action@v1.9.0
        with:
          projects: ${{ env.PERSISTENCE_PROJECT }};${{ env.ACCEPTANCE_PROJECT }};${{ env.AUDIT_PERSISTENCE_PROJECT }};${{ env.AUDIT_ACCEPTANCE_PROJECT }}
          max-parallel: 2
        env:
          ServiceControl_TESTS_FILTER: ${{ matrix.provider }}
          PARTICULARSOFTWARE_LICENSE: ${{ secrets.LICENSETEXT }}