integration_tests_codebuild.yml

name: Integration Tests CodeBuild

on:
  workflow_dispatch:

jobs:
  build-integration-tests-codebuild:
    name: Run Integration Tests With CodeBuild
    strategy:
      fail-fast: false
      matrix:
        python-version: [ "3.8", "3.11" ]
        environment: [ "mysql", "pg" ]

    runs-on: ubuntu-latest
    environment: ${{ matrix.environment }}_integ

    steps:
      - name: 'Clone repository'
        uses: actions/checkout@v4

      - name: 'Set up JDK 8'
        uses: actions/setup-java@v4
        with:
          distribution: 'corretto'
          java-version: 8

      - name: Install poetry
        uses: abatilo/actions-poetry@v3
        with:
          poetry-version: '1.8.2'

      - name: Install dependencies
        run: poetry install

      - name: 'Configure AWS Credentials'
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_DEFAULT_REGION }}

      - name: 'Set up Temp AWS Credentials'
        run: |
          creds=($(aws sts get-session-token \
            --duration-seconds 21600 \
            --query 'Credentials.[AccessKeyId, SecretAccessKey, SessionToken]' \
            --output text \
          | xargs));
          echo "::add-mask::${creds[0]}"
          echo "::add-mask::${creds[1]}"
          echo "::add-mask::${creds[2]}"
          echo "TEMP_AWS_ACCESS_KEY_ID=${creds[0]}" >> $GITHUB_ENV
          echo "TEMP_AWS_SECRET_ACCESS_KEY=${creds[1]}" >> $GITHUB_ENV
          echo "TEMP_AWS_SESSION_TOKEN=${creds[2]}" >> $GITHUB_ENV

      - name: 'Run Integration Tests'
        run: |
          ./gradlew --no-parallel --no-daemon test-python-${{ matrix.python-version }}-${{ matrix.environment }} --info
        env:
          RDS_CLUSTER_DOMAIN: ${{ secrets.DB_CONN_SUFFIX }}
          RDS_DB_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
          AWS_ACCESS_KEY_ID: ${{ env.TEMP_AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ env.TEMP_AWS_SECRET_ACCESS_KEY }}
          AWS_SESSION_TOKEN: ${{ env.TEMP_AWS_SESSION_TOKEN }}
          RDS_ENDPOINT: ${{ secrets.RDS_ENDPOINT }}
          AURORA_MYSQL_DB_ENGINE_VERSION: "latest"
          AURORA_PG_ENGINE_VERSION: "latest"

      - name: 'Archive results'
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: pytest-integration-report-${{ matrix.python-version }}-${{ matrix.environment }}
          path: ./tests/integration/container/reports
          retention-days: 5