Build & Test #8427
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: "Build & Test" | |
| on: # yamllint disable-line rule:truthy | |
| push: | |
| branches: | |
| - "main" | |
| pull_request: | |
| branches: | |
| - "*" | |
| merge_group: | |
| types: | |
| - "checks_requested" | |
| permissions: | |
| contents: "read" | |
| env: | |
| DOCKERHUB_PUBLIC_ACCESS_TOKEN: "dckr_pat_8AEETZWxu8f7FvJUk9NrpyX_ZEQ" | |
| DOCKERHUB_PUBLIC_USER: "spicedbgithubactions" | |
| jobs: | |
| paths-filter: | |
| runs-on: "depot-ubuntu-24.04-small" | |
| outputs: | |
| codechange: "${{ steps.code-filter.outputs.codechange }}" | |
| protochange: "${{ steps.proto-filter.outputs.protochange }}" | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| - uses: "dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36" # v3.0.2 | |
| id: "code-filter" | |
| with: | |
| filters: | | |
| codechange: | |
| - ".github/workflows/build-test.yaml" | |
| - "Dockerfile" | |
| - "go.mod" | |
| - "go.sum" | |
| - "cmd/**" | |
| - "pkg/**" | |
| - "e2e/**" | |
| - "internal/**" | |
| - uses: "dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36" # v3.0.2 | |
| id: "proto-filter" | |
| with: | |
| filters: | | |
| protochange: | |
| - "buf.gen.yaml" | |
| - "buf.work.yaml" | |
| - "proto/**" | |
| - "go.mod" | |
| build: | |
| name: "Build Binary & Image" | |
| runs-on: "depot-ubuntu-24.04-4" | |
| needs: "paths-filter" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| - uses: "docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1" # v3.5.0 | |
| with: | |
| username: "${{ env.DOCKERHUB_PUBLIC_USER }}" | |
| password: "${{ env.DOCKERHUB_PUBLIC_ACCESS_TOKEN }}" | |
| - uses: "authzed/actions/go-build@11667c9b2e8b3649ad2af4d788e57d18f8e8eaf1" # main | |
| - name: "Image tests" | |
| run: "go run mage.go test:image" | |
| unit: | |
| name: "Unit" | |
| runs-on: "depot-ubuntu-24.04-4" | |
| needs: "paths-filter" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| - name: "Unit tests with coverage" | |
| run: "go run mage.go test:unitCover" | |
| - name: "Coverage" | |
| uses: "codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00" # v5.5.0 | |
| with: | |
| files: "./coverage.txt" | |
| token: "${{ secrets.CODECOV_TOKEN }}" | |
| fail_ci_if_error: false | |
| steelthread: | |
| name: "Steelthread" | |
| runs-on: "depot-ubuntu-24.04-4" | |
| needs: "paths-filter" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| - name: "Steelthread tests" | |
| run: "go run mage.go test:steelthread" | |
| integration: | |
| name: "Integration Tests" | |
| runs-on: "depot-ubuntu-24.04-4" | |
| needs: "paths-filter" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| - uses: "docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1" # v3.5.0 | |
| with: | |
| username: "${{ env.DOCKERHUB_PUBLIC_USER }}" | |
| password: "${{ env.DOCKERHUB_PUBLIC_ACCESS_TOKEN }}" | |
| - name: "Integration tests with coverage" | |
| run: "go run mage.go test:integrationCover" | |
| - name: "Coverage" | |
| uses: "codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00" # v5.5.0 | |
| with: | |
| files: "./coverage.txt" | |
| token: "${{ secrets.CODECOV_TOKEN }}" | |
| fail_ci_if_error: false | |
| datastoreinttest: | |
| name: "Datastore Integration Tests" | |
| runs-on: "depot-ubuntu-24.04-8" | |
| needs: "paths-filter" | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| datastore: ["mysql", "spanner"] | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| - uses: "docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1" # v3.5.0 | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| with: | |
| username: "${{ env.DOCKERHUB_PUBLIC_USER }}" | |
| password: "${{ env.DOCKERHUB_PUBLIC_ACCESS_TOKEN }}" | |
| - name: "Integration tests" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| run: "go run mage.go testds:${{ matrix.datastore }}" | |
| - name: "Coverage" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| uses: "codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00" # v5.5.0 | |
| with: | |
| files: "./coverage.txt" | |
| token: "${{ secrets.CODECOV_TOKEN }}" | |
| fail_ci_if_error: false | |
| datastoreconstest: | |
| name: "Datastore Consistency Tests" | |
| runs-on: "depot-ubuntu-24.04-8" | |
| needs: "paths-filter" | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| datastore: ["mysql", "spanner"] | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| - uses: "docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1" # v3.5.0 | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| with: | |
| username: "${{ env.DOCKERHUB_PUBLIC_USER }}" | |
| password: "${{ env.DOCKERHUB_PUBLIC_ACCESS_TOKEN }}" | |
| - name: "Consistency tests" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| run: "go run mage.go testcons:${{ matrix.datastore }}" | |
| - name: "Coverage" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| uses: "codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00" # v5.5.0 | |
| with: | |
| files: "./coverage.txt" | |
| token: "${{ secrets.CODECOV_TOKEN }}" | |
| fail_ci_if_error: false | |
| pgdatastoreinttest: | |
| name: "Datastore Integration Tests" | |
| runs-on: "depot-ubuntu-24.04-4" | |
| needs: "paths-filter" | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| datastore: ["postgres", "pgbouncer"] | |
| pgversion: ["13.8", "14", "15", "16", "17"] | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| - uses: "docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1" # v3.5.0 | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| with: | |
| username: "${{ env.DOCKERHUB_PUBLIC_USER }}" | |
| password: "${{ env.DOCKERHUB_PUBLIC_ACCESS_TOKEN }}" | |
| - name: "Integration tests" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| run: "go run mage.go testds:${{ matrix.datastore }}ver ${{ matrix.pgversion }}" | |
| - name: "Coverage" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| uses: "codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00" # v5.5.0 | |
| with: | |
| files: "./coverage.txt" | |
| token: "${{ secrets.CODECOV_TOKEN }}" | |
| fail_ci_if_error: false | |
| pgdatastoreconstest: | |
| name: "Datastore Consistency Tests" | |
| runs-on: "depot-ubuntu-24.04-4" | |
| needs: "paths-filter" | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| datastore: ["postgres"] | |
| pgversion: ["13.8", "14", "15", "16", "17"] | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| - uses: "docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1" # v3.5.0 | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| with: | |
| username: "${{ env.DOCKERHUB_PUBLIC_USER }}" | |
| password: "${{ env.DOCKERHUB_PUBLIC_ACCESS_TOKEN }}" | |
| - name: "Consistency tests" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| run: "go run mage.go testcons:postgresver ${{ matrix.pgversion }}" | |
| - name: "Coverage" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| uses: "codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00" # v5.5.0 | |
| with: | |
| files: "./coverage.txt" | |
| token: "${{ secrets.CODECOV_TOKEN }}" | |
| fail_ci_if_error: false | |
| crdbdatastoreinttest: | |
| name: "Datastore Integration Tests" | |
| runs-on: "depot-ubuntu-24.04-4" | |
| needs: "paths-filter" | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| datastore: ["crdb"] | |
| crdbversion: ["24.3.6", "25.1.0", "25.2.0"] | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| - uses: "docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1" # v3.5.0 | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| with: | |
| username: "${{ env.DOCKERHUB_PUBLIC_USER }}" | |
| password: "${{ env.DOCKERHUB_PUBLIC_ACCESS_TOKEN }}" | |
| - name: "Integration tests" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| run: "go run mage.go testds:${{ matrix.datastore }}ver ${{ matrix.crdbversion }}" | |
| - name: "Coverage" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| uses: "codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00" # v5.5.0 | |
| with: | |
| files: "./coverage.txt" | |
| token: "${{ secrets.CODECOV_TOKEN }}" | |
| fail_ci_if_error: false | |
| crdbdatastoreconstest: | |
| name: "Datastore Consistency Tests" | |
| runs-on: "depot-ubuntu-24.04-4" | |
| needs: "paths-filter" | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| datastore: ["crdb"] | |
| crdbversion: ["24.3.6", "25.1.0", "25.2.0"] | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| - uses: "docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1" # v3.5.0 | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| with: | |
| username: "${{ env.DOCKERHUB_PUBLIC_USER }}" | |
| password: "${{ env.DOCKERHUB_PUBLIC_ACCESS_TOKEN }}" | |
| - name: "Consistency tests" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| run: "go run mage.go testcons:crdbver ${{ matrix.crdbversion }}" | |
| - name: "Coverage" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| uses: "codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00" # v5.5.0 | |
| with: | |
| files: "./coverage.txt" | |
| token: "${{ secrets.CODECOV_TOKEN }}" | |
| fail_ci_if_error: false | |
| e2e: | |
| name: "E2E" | |
| runs-on: "depot-ubuntu-24.04-8" | |
| needs: "paths-filter" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| with: | |
| go-version-file: "e2e/go.mod" | |
| cache-dependency-path: "e2e/go.sum" | |
| - name: "Install cockroachdb and chaosd" | |
| if: "steps.cache-binaries.outputs.cache-hit != 'true'" | |
| working-directory: "e2e/newenemy" | |
| run: | | |
| curl https://binaries.cockroachdb.com/cockroach-v22.1.5.linux-amd64.tgz | tar -xz && mv cockroach-v22.1.5.linux-amd64/cockroach ./cockroach | |
| curl -fsSL https://mirrors.chaos-mesh.org/chaosd-v1.1.1-linux-amd64.tar.gz | tar -xz && mv chaosd-v1.1.1-linux-amd64/chaosd ./chaosd | |
| - name: "Build SpiceDB" | |
| run: | | |
| go get -d ./... | |
| go build -o ./e2e/newenemy/spicedb ./cmd/spicedb/... | |
| - name: "Run e2e" | |
| working-directory: "e2e/newenemy" | |
| run: | | |
| go test -v -timeout 11m ./... | |
| - uses: "actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02" # v4.6.2 | |
| if: "always()" | |
| # this upload step is really flaky, don't fail the job if it fails | |
| continue-on-error: true | |
| with: | |
| name: "node-logs" | |
| path: "e2e/newenemy/*.log" | |
| analyzers-unit-tests: | |
| name: "Analyzers Unit Tests" | |
| runs-on: "depot-ubuntu-24.04-small" | |
| needs: "paths-filter" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| with: | |
| go-version-file: "tools/analyzers/go.mod" | |
| cache-dependency-path: "tools/analyzers/go.sum" | |
| - name: "Analyzer tests" | |
| run: "go run mage.go test:analyzers" | |
| development: | |
| name: "WASM Tests" | |
| runs-on: "ubuntu-22.04" # do not run Depot runners due to somehow triggering https://github.com/agnivade/wasmbrowsertest/issues/40 | |
| needs: "paths-filter" | |
| if: | | |
| needs.paths-filter.outputs.codechange == 'true' | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| - name: "WASM tests" | |
| run: "go run mage.go test:wasm" | |
| protobuf: | |
| name: "Generate Protobufs" | |
| runs-on: "depot-ubuntu-24.04-small" | |
| needs: "paths-filter" | |
| if: | | |
| needs.paths-filter.outputs.protochange == 'true' | |
| steps: | |
| - uses: "actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493" # v4.2.2 | |
| - uses: "authzed/actions/setup-go@f00cad69713a135d0b55c16bae64171367f319d5" # main | |
| - name: "Generate Protos" | |
| run: "go run mage.go gen:proto" | |
| - uses: "chainguard-dev/actions/nodiff@3caedd3784c809ba873cbb8c6a12e2bc6bf6ab09" # main | |
| with: | |
| path: "" | |
| fixup-command: "go run mage.go gen:proto" | |
| - uses: "bufbuild/buf-setup-action@a47c93e0b1648d5651a065437926377d060baa99" # v1.5.0 | |
| - uses: "bufbuild/buf-breaking-action@c57b3d842a5c3f3b454756ef65305a50a587c5ba" # v1.1.4 TODO(miparnisari) deprecated, use buf-action | |
| if: "github.event_name == 'pull_request'" | |
| env: | |
| BUF_INPUT_HTTPS_USERNAME: "${{ github.actor }}" | |
| BUF_INPUT_HTTPS_PASSWORD: "${{ github.token }}" | |
| with: | |
| input: "proto/internal" | |
| against: "https://github.com/authzed/spicedb.git#branch=main,subdir=proto/internal" | |
| buf_token: "${{ secrets.BUF_REGISTRY_TOKEN }}" |