Skip to content

[pull] master from fluent:master #979

[pull] master from fluent:master

[pull] master from fluent:master #979

name: Build and run integration tests for PR
on:
# We need write token for upload to GHCR and we are protecting with labels too.
pull_request_target:
branches:
- master
types:
- labeled
- opened
- reopened
- synchronize
jobs:
pr-integration-test-build:

Check failure on line 14 in .github/workflows/pr-integration-test.yaml

View workflow run for this annotation

GitHub Actions / Build and run integration tests for PR

Invalid workflow file

The workflow is not valid. .github/workflows/pr-integration-test.yaml (Line: 14, Col: 3): Error calling workflow 'ThomasDevoogdt/fluent-bit/.github/workflows/call-integration-image-build.yaml@66970cb352695f458fa7075ea1f0f76f7d0315b9'. The nested job 'call-integration-image-build-container' is requesting 'packages: write', but is only allowed 'packages: read'.
name: PR - integration build
# We only need to test this once as the rest are chained from it.
if: contains(github.event.pull_request.labels.*.name, 'ok-to-test')
uses: ./.github/workflows/call-integration-image-build.yaml
with:
ref: ${{ github.event.pull_request.head.sha }}
registry: ghcr.io
username: ${{ github.actor }}
image: ${{ github.repository }}/pr-${{ github.event.number }}
image-tag: ${{ github.sha }}
environment: integration
secrets:
token: ${{ secrets.GITHUB_TOKEN }}
pr-integration-test-build-complete:
name: PR - integration build complete
runs-on: ubuntu-latest
needs:
- pr-integration-test-build
steps:
- uses: actions-ecosystem/action-add-labels@v1
name: Label the PR
with:
labels: ci/integration-docker-ok
github_token: ${{ secrets.GITHUB_TOKEN }}
number: ${{ github.event.pull_request.number }}
pr-integration-test-run-integration:
name: PR - K8S integration test
needs:
- pr-integration-test-build
uses: ./.github/workflows/call-run-integration-test.yaml
with:
image_name: ghcr.io/${{ github.repository }}/pr-${{ github.event.pull_request.number }}
image_tag: ${{ github.sha }}
secrets:
opensearch_aws_access_id: ${{ secrets.OPENSEARCH_AWS_ACCESS_ID }}
opensearch_aws_secret_key: ${{ secrets.OPENSEARCH_AWS_SECRET_KEY }}
opensearch_admin_password: ${{ secrets.OPENSEARCH_ADMIN_PASSWORD }}
terraform_api_token: ${{ secrets.TF_API_TOKEN }}
gcp-service-account-key: ${{ secrets.GCP_SA_KEY }}
pr-integration-test-run-integration-post-label:
name: PR - integration test complete
runs-on: ubuntu-latest
needs:
- pr-integration-test-run-integration
steps:
- uses: actions-ecosystem/action-add-labels@v1
name: Label the PR
with:
labels: ci/integration-test-ok
github_token: ${{ secrets.GITHUB_TOKEN }}
number: ${{ github.event.pull_request.number }}
repo: fluent/fluent-bit