ci: fix integration-test-deployment script (#35716)

### Reason for this change

- Previously, the script was executing the script under the cwd of the script package, when it should be at the head branch folder.
- PATH was not passed on to integration test spawn command, leading to a ENOENT error as the integration test command could not find yarn.
- Workflow trigger on label is misconfigured.

### Description of changes

- We'll use node explicitly to run the script without changing the cwd.
- PATH env variable is now passed to integration test command.
- Workflow trigger on label is fixed.

### Describe any new or updated permissions being added

No new permissions were added.

### Description of how you validated changes

Tested on my fork here: https://github.com/Abogical/aws-cdk/actions/runs/18465794651/job/52607352315?pr=15

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Author: Abogical

.github/workflows/integration-test-deployment.yml

@@ -7,6 +7,11 @@ on:
   workflow_dispatch: {}
   merge_group: {}
   pull_request_target:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - labeled
     branches:
       - main
     paths:
@@ -21,26 +26,18 @@ jobs:
   integration_test_deployment:
     runs-on: codebuild-aws-cdk-github-actions-deployment-integ-runner-${{ github.run_id }}-${{ github.run_attempt }}
     environment: deployment-integ-test # Do not change or remove this without discussing with Appsec
-    if: contains(github.event.pull_request.labels.*.name, 'pr/needs-integration-tests-deployment ')
+    if: contains(github.event.pull_request.labels.*.name, 'pr/needs-integration-tests-deployment')
     name: 'Deploy integration test snapshots (requires `pr/needs-integration-tests-deployment` label)'
 
     env:
       PR_BUILD: true
 
     steps:
-      - name: Checkout BASE
-        uses: actions/checkout@v5
-        with:
-          ref: ${{ github.event.pull_request.base.sha }}
-          fetch-depth: 0
-          path: base
-
       - name: Checkout HEAD
         uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0
-          path: head
 
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@v5
@@ -55,8 +52,7 @@ jobs:
           node-version: "lts/*"
           cache: "yarn"
           cache-dependency-path: |
-            base/yarn.lock
-            head/yarn.lock
+            yarn.lock
 
       - name: Set up Docker
         uses: docker/setup-buildx-action@v3
@@ -85,26 +81,18 @@ jobs:
         run: |
           (command -v sysctl || sudo apt-get update && sudo apt-get install -y procps) && \
           sudo sysctl -w vm.max_map_count=2251954
-
-      - name: Install dependencies for integration-test-deployment (BASE)
-        working-directory: base
-        run: yarn --cwd tools/@aws-cdk/integration-test-deployment install
-      
-      - name: Build deployment-integ (BASE)
-        working-directory: base
-        run: yarn --cwd tools/@aws-cdk/integration-test-deployment build
         
-      - name: Install dependencies for Integration Tests (HEAD)
-        working-directory: head
+      - name: Install dependencies for Integration Tests
         run: yarn install 
+      
+      - name: Build deployment-integ
+        run: yarn --cwd tools/@aws-cdk/integration-test-deployment build
 
-      - name: Build Integration Tests (HEAD)
-        working-directory: head
+      - name: Build Integration Tests
         run: npx lerna run build --scope=@aws-cdk-testing/framework-integ 
 
-      - name: Run integration tests from HEAD using integration-test-deployment script from BASE
-        run: yarn --cwd ../base/tools/@aws-cdk/integration-test-deployment/ integration-test-deployment
-        working-directory: head
+      - name: Run integration tests using integration-test-deployment script
+        run: yarn run atmosphere-integ-test
         env:
           CDK_ATMOSPHERE_ENDPOINT: ${{ vars.CDK_ATMOSPHERE_ENDPOINT }}
           CDK_ATMOSPHERE_POOL: ${{ vars.CDK_ATMOSPHERE_POOL}}

package.json

@@ -12,7 +12,8 @@
     "pack": "./pack.sh",
     "compat": "./scripts/check-api-compatibility.sh",
     "bump": "./bump.sh",
-    "build-all": "tsc -b"
+    "build-all": "tsc -b",
+    "atmosphere-integ-test": "lerna run build --scope @aws-cdk/integration-test-deployment && node tools/@aws-cdk/integration-test-deployment/bin/index.js"
   },
   "devDependencies": {
     "@nx/workspace": "^20",

tools/@aws-cdk/integration-test-deployment/lib/integration-test-runner.ts

@@ -8,6 +8,7 @@ export const deployInegTestsWithAtmosphere = async ({ endpoint, pool }: {endpoin
 
   try {
     const env = {
+      PATH: process.env.PATH, // Allows the spawn process to find the yarn binary.
       AWS_ACCESS_KEY_ID: allocation.allocation.credentials.accessKeyId,
       AWS_SECRET_ACCESS_KEY: allocation.allocation.credentials.secretAccessKey,
       AWS_SESSION_TOKEN: allocation.allocation.credentials.sessionToken,

tools/@aws-cdk/integration-test-deployment/package.json

@@ -23,6 +23,5 @@
     "ts-jest": "^29.4.1",
     "typescript": "~5.5.4"
   },
-  "main": "bin/project-sync.js",
   "license": "Apache-2.0"
 }