e2e.yml

name: e2e

on:
  push:
    branches:
      - main
    paths-ignore:
      - '*.md'
      - '*.asciidoc'
      - 'docs/**'
  pull_request:
    paths-ignore:
      - '*.md'
      - '*.asciidoc'
      - 'docs/**'

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}

env:
  # (keep_serverless-staging-oblt, keep_serverless-qa-oblt or serverless-production-oblt)
  SERVERLESS_PROJECT: serverless-production-oblt
  # (staging, qa or pro)
  VAULT_SECRET_SUFFIX: pro

# NOTE: if you add a new job and it's a mandatory check then
#       update e2e-docs.yml
jobs:
  test:
    if: false()
    #if: |
    # github.event_name != 'pull_request' || 
    # (github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == false)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Setup Git
        uses: elastic/apm-pipeline-library/.github/actions/setup-git@current

      - uses: elastic/apm-pipeline-library/.github/actions/github-token@current
        with:
          url: ${{ secrets.VAULT_ADDR }}
          roleId: ${{ secrets.VAULT_ROLE_ID }}
          secretId: ${{ secrets.VAULT_SECRET_ID }}

      - uses: elastic/apm-pipeline-library/.github/actions/oblt-cli-cluster-credentials@current
        with:
          github-token: ${{ env.GITHUB_TOKEN }}
          cluster-name: ${{ env.SERVERLESS_PROJECT }}
          vault-url: ${{ secrets.VAULT_ADDR }}
          vault-role-id: ${{ secrets.VAULT_ROLE_ID }}
          vault-secret-id: ${{ secrets.VAULT_SECRET_ID }}

      - name: Get the browser email and password from Vault
        uses: hashicorp/vault-action@v3.0.0
        with:
          url: ${{ secrets.VAULT_ADDR }}
          roleId: ${{ secrets.VAULT_ROLE_ID }}
          secretId: ${{ secrets.VAULT_SECRET_ID }}
          method: approle
          secrets: |
            secret/observability-team/ci/elastic-cloud/observability-team-${{ env.VAULT_SECRET_SUFFIX }} username | E2E__BROWSEREMAIL ;
            secret/observability-team/ci/elastic-cloud/observability-team-${{ env.VAULT_SECRET_SUFFIX }} password | E2E__BROWSERPASSWORD
        
      - run: ./build.sh test --test-suite=e2e
        env: 
          E2E__ENDPOINT: "${{env.ELASTIC_APM_SERVER_URL}}"
          E2E__AUTHORIZATION: "Authentication=ApiKey ${{env.ELASTIC_APM_API_KEY}}"