multi_az_integration_tests.yml

name: Multi-AZ Integration Tests

on:
  workflow_dispatch:
  push:
    branches:
      - main
    paths-ignore:
      - "**/*.md"
      - "**/*.jpg"
      - "**/README.txt"
      - "**/LICENSE.txt"
      - "docs/**"
      - "ISSUE_TEMPLATE/**"
      - "**/remove-old-artifacts.yml"

jobs:
  run-integration-tests:
    name: Run Integration Tests
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        dbEngine: ["multi-az-mysql", "multi-az-postgres"]

    steps:
      - name: Clone repository
        uses: actions/checkout@v4
      - name: "Set up JDK 8"
        uses: actions/setup-java@v3
        with:
          distribution: "corretto"
          java-version: 8
      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "20.x"
      - name: Install dependencies
        run: npm install --no-save

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_DEFAULT_REGION }}

      - name: Set up Temp AWS Credentials
        run: |
          creds=($(aws sts get-session-token \
            --duration-seconds 21600 \
            --query 'Credentials.[AccessKeyId, SecretAccessKey, SessionToken]' \
            --output text \
          | xargs));
          echo "::add-mask::${creds[0]}"
          echo "::add-mask::${creds[1]}"
          echo "::add-mask::${creds[2]}"
          echo "TEMP_AWS_ACCESS_KEY_ID=${creds[0]}" >> $GITHUB_ENV
          echo "TEMP_AWS_SECRET_ACCESS_KEY=${creds[1]}" >> $GITHUB_ENV
          echo "TEMP_AWS_SESSION_TOKEN=${creds[2]}" >> $GITHUB_ENV

      - name: Run Integration Tests
        run: |
          ./gradlew --no-parallel --no-daemon test-${{ matrix.dbEngine }} --info
        env:
          RDS_DB_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
          AWS_ACCESS_KEY_ID: ${{ env.TEMP_AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ env.TEMP_AWS_SECRET_ACCESS_KEY }}
          AWS_SESSION_TOKEN: ${{ env.TEMP_AWS_SESSION_TOKEN }}
          RDS_MYSQL_DB_ENGINE_VERSION: "default"
          RDS_PG_DB_ENGINE_VERSION: "default"

      - name: "Get Github Action IP"
        if: always()
        id: ip
        uses: haythem/public-ip@v1.3

      - name: "Remove Github Action IP"
        if: always()
        run: |
          aws ec2 revoke-security-group-ingress \
            --group-name default \
            --protocol -1 \
            --port -1 \
            --cidr ${{ steps.ip.outputs.ipv4 }}/32 \
          2>&1 > /dev/null;

      - name: Archive results
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: integration-report-${{ matrix.dbEngine }}
          path: ./tests/integration/container/reports
          retention-days: 5