integration-tests.yml

name: integration-tests

permissions:
  id-token: write
  contents: read

on:
  push:
    branches: [main]
  pull_request:
    branches: ['*']
  schedule:
    - cron: '0 8 * * 1-5'  # Every workday (Mon-Fri) at 08:00 UTC
  workflow_dispatch:

jobs:
  load-matrix:
    runs-on: ubuntu-latest
    outputs:
      matrix: ${{ steps.set.outputs.matrix }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Load test matrix
        id: set
        run: |
          MATRIX=$(jq -c '.' .github/test-matrix.json)
          echo "matrix=${MATRIX}" >> "$GITHUB_OUTPUT"

  integration-test:
    needs: load-matrix
    runs-on: ${{ matrix.arch.runner }}
    strategy:
      fail-fast: false
      matrix: ${{ fromJson(needs.load-matrix.outputs.matrix) }}

    name: "${{ matrix.distro_config.distro }} ${{ matrix.distro_config.distro_version }} / ruby ${{ matrix.distro_config.runtime_version }} (${{ matrix.arch.label }})"

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Configure AWS credentials (OIDC)
        uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
        with:
          role-to-assume: ${{ secrets.AWS_OIDC_ROLE_ARN }}
          aws-region: ${{ secrets.AWS_REGION }}

      - name: Download RIE
        run: |
          mkdir -p .scratch
          RIE_NAME="${{ matrix.arch.rie }}"
          curl -sSL "https://github.com/aws/aws-lambda-runtime-interface-emulator/releases/latest/download/${RIE_NAME}" -o ".scratch/${RIE_NAME}"
          chmod +x ".scratch/${RIE_NAME}"
          echo "RIE_NAME=${RIE_NAME}" >> "$GITHUB_ENV"

      - name: Build Docker image
        run: |
          DOCKERFILE="test/integration/docker/Dockerfile.echo.${{ matrix.distro_config.distro }}"
          TMPFILE=".scratch/Dockerfile.tmp"
          cp "$DOCKERFILE" "$TMPFILE"
          echo "COPY .scratch/${{ env.RIE_NAME }} /usr/bin/${{ env.RIE_NAME }}" >> "$TMPFILE"
          docker build . \
            -f "$TMPFILE" \
            -t ric-test \
            --build-arg RUNTIME_VERSION=${{ matrix.distro_config.runtime_version }} \
            --build-arg DISTRO_VERSION=${{ matrix.distro_config.distro_version }}

      - name: Run integration test
        run: |
          TEST_NAME="ric-integ-test"
          docker network create "${TEST_NAME}-net"

          # Start the Lambda function container with RIE
          docker run \
            --detach \
            --name "${TEST_NAME}-app" \
            --network "${TEST_NAME}-net" \
            --entrypoint="" \
            ric-test \
            sh -c "/usr/bin/${{ env.RIE_NAME }} ${{ matrix.distro_config.executable }} app.App::Handler.process"

          # Wait for RIE to be ready
          sleep 2

          # Invoke the function
          docker run \
            --name "${TEST_NAME}-tester" \
            --env "TARGET=${TEST_NAME}-app" \
            --network "${TEST_NAME}-net" \
            --entrypoint="" \
            ric-test \
            sh -c 'curl -sS -X POST "http://${TARGET}:8080/2015-03-31/functions/function/invocations" -d "{}" --max-time 10'

          # Assert response
          ACTUAL="$(docker logs --tail 1 "${TEST_NAME}-tester" | xargs)"
          EXPECTED="success"
          echo "Response: ${ACTUAL}"
          if [ "$ACTUAL" != "$EXPECTED" ]; then
            echo "FAIL: ${{ matrix.distro_config.distro }}-${{ matrix.distro_config.distro_version }}:${{ matrix.distro_config.runtime_version }} — expected '${EXPECTED}', got '${ACTUAL}'"
            exit 1
          fi
          echo "PASS"

      - name: Dump container logs
        if: always()
        run: |
          TEST_NAME="ric-integ-test"
          echo "=== App container logs ==="
          docker logs "${TEST_NAME}-app" 2>&1 || true
          echo "=== Tester container logs ==="
          docker logs "${TEST_NAME}-tester" 2>&1 || true

      - name: Publish success metric
        if: success()
        run: |
          aws cloudwatch put-metric-data \
            --namespace "GitHubActions" \
            --metric-name "TestResult" \
            --dimensions "Distro=${{ matrix.distro_config.distro }},DistroVersion=${{ matrix.distro_config.distro_version }},RuntimeVersion=${{ matrix.distro_config.runtime_version }},Arch=${{ matrix.arch.label }}" \
            --value 1 \
            --unit Count

      - name: Cleanup
        if: always()
        run: |
          TEST_NAME="ric-integ-test"
          docker rm -f "${TEST_NAME}-app" "${TEST_NAME}-tester" 2>/dev/null || true
          docker network rm "${TEST_NAME}-net" 2>/dev/null || true