ci.yml

name: CI

on:
  push:
    branches:
      - main
  pull_request: ~
  workflow_dispatch: ~

concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

jobs:
  tests:
    name: Tests
    runs-on: ubuntu-latest
    permissions:
      contents: 'read'
      id-token: 'write'
    steps:
      -
        name: Checkout
        uses: actions/checkout@v3
      -
        name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2
      -
        name: Build Docker Images
        uses: docker/bake-action@v3
        with:
          pull: true
          load: true
          files: |
            docker-compose.yml
            docker-compose.override.yml
          set: |
            *.cache-from=type=gha,scope=${{github.ref}}
            *.cache-from=type=gha,scope=refs/heads/main
            *.cache-to=type=gha,scope=${{github.ref}},mode=max
      -
        name: Start Services
        run: docker compose up --wait --no-build
      -
        name: Debug Services
        if: failure()
        run: |
          docker compose ps
          docker compose logs
      -
        name: Check HTTP Reachability
        run: curl -v -o /dev/null http://localhost
      -
        name: Check API Reachability
        run: curl -vk -o /dev/null https://localhost
      -
        name: Check PWA Reachability
        run: "curl -vk -o /dev/null -H 'Accept: text/html' https://localhost"
      -
        name: Create Test Database
        run: |
          docker compose exec -T php bin/console -e test doctrine:database:create
          docker compose exec -T php bin/console -e test doctrine:migrations:migrate --no-interaction
      -
        name: Run PHPUnit Tests
        run: docker compose exec -T php bin/phpunit
      -
        name: Doctrine Schema Validator
        run: docker compose exec -T php bin/console doctrine:schema:validate
      -
        name: Run Psalm Analysis
        run: docker compose exec -T php vendor/bin/psalm
      -
        name: Run PWA Lint
        run: docker compose exec -T pwa pnpm lint

  # run e2e tests iso-prod
  e2e-tests:
    name: E2E Tests
    runs-on: ubuntu-latest
    permissions:
      contents: 'read'
      id-token: 'write'
    env:
      PHP_DOCKER_IMAGE: eu.gcr.io/${{ secrets.GKE_PROJECT }}/php:latest
      PWA_DOCKER_IMAGE: eu.gcr.io/${{ secrets.GKE_PROJECT }}/pwa:latest
      CADDY_DOCKER_IMAGE: eu.gcr.io/${{ secrets.GKE_PROJECT }}/caddy:latest
      APP_SECRET: "ba63418865d58089f7f070e0a437b6d16b1fb970"
      CADDY_MERCURE_JWT_SECRET: "33b04d361e437e0d7d715600fc24fdefba317154"
      NEXTAUTH_SECRET: "77e4c3f5a6fb652b6245a5df8a704e04ad90bc7e"
      POSTGRES_PASSWORD: "aae5bf316ef5fe87ad806c6a9240fff68bcfdaf7"
      KEYCLOAK_POSTGRES_PASSWORD: "26d7f630f1524eb210bbf496443f2038a9316e9e"
      KEYCLOAK_ADMIN_PASSWORD: "2f31e2fad93941b818449fd8d57fd019b6ce7fa5"
    steps:
      -
        name: Checkout
        uses: actions/checkout@v3
      -
        name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2
      -
        name: Build Docker Images
        uses: docker/bake-action@v3
        with:
          pull: true
          load: true
          files: |
            docker-compose.yml
            docker-compose.prod.yml
          set: |
            *.cache-from=type=gha,scope=${{github.ref}}-e2e
            *.cache-from=type=gha,scope=${{github.ref}}
            *.cache-from=type=gha,scope=refs/heads/main
            *.cache-to=type=gha,scope=${{github.ref}}-e2e,mode=max
      -
        name: Start Services
        run: docker compose -f docker-compose.yml -f docker-compose.prod.yml up --wait --no-build
      -
        name: Debug Services
        if: failure()
        run: |
          docker compose -f docker-compose.yml -f docker-compose.prod.yml ps
          docker compose -f docker-compose.yml -f docker-compose.prod.yml logs
      -
        name: Load Fixtures
        run: docker compose -f docker-compose.yml -f docker-compose.prod.yml run --rm --env APP_ENV=dev php bin/console doctrine:fixtures:load --no-interaction
      -
        name: Cache Playwright Binaries
        uses: actions/cache@v3
        with:
          path: ~/.cache/ms-playwright
          key: ${{ runner.os }}-playwright
      -
        name: Install PNPM
        uses: pnpm/action-setup@v2
        with:
          version: 8.6.2
      -
        name: Install Dependencies
        working-directory: pwa
        run: pnpm install
      -
        name: Install Playwright Browsers
        working-directory: pwa
        run: pnpm exec playwright install --with-deps
      -
        name: Run Playwright @read
        working-directory: pwa
        run: pnpm exec playwright test --grep @read
      -
        name: Run Playwright @write
        working-directory: pwa
        # use 1 worker to prevent conflict between write scenarios
        run: pnpm exec playwright test --grep @write --workers=1
      -
        uses: actions/upload-artifact@v3
        if: failure()
        with:
          name: playwright-screenshots
          path: pwa/test-results
      -
        uses: actions/upload-artifact@v3
        if: always()
        with:
          name: playwright-report
          path: pwa/playwright-report

  lint:
    name: Docker Lint
    runs-on: ubuntu-latest
    steps:
      -
        name: Checkout
        uses: actions/checkout@v3
      -
        name: Lint Dockerfiles
        uses: hadolint/hadolint-action@v3.1.0
        with:
          recursive: true