ci.yaml

name: 🔄 CI | PR / Merge

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

jobs:
  build:
    name: Build & Validate
    strategy:
      matrix:
        distribution:
          - nrdot-collector-host
          - nrdot-collector-k8s
    uses: ./.github/workflows/ci-base.yaml
    with:
      distribution: ${{ matrix.distribution }}
      # namespace by distro to avoid issues with cleanup (distro 1 still running tests while distro 2 cleans up cluster)
      test_cluster_name: 'ci-e2etest-${{ matrix.distribution }}'
    secrets:
      docker_hub_username: ${{ secrets.OTELCOMM_DOCKER_HUB_USERNAME }}
      docker_hub_password: ${{ secrets.OTELCOMM_DOCKER_HUB_PASSWORD }}
      gpg_private_key: ${{ secrets.OHAI_GPG_PRIVATE_KEY_BASE64 }}
      gpg_passphrase: ${{ secrets.OHAI_GPG_PASSPHRASE }}
      registry: 'newrelic'

  terraform:
    uses: ./.github/workflows/terraform.yaml
    if: ${{ !github.event.act && github.event.pull_request.user.login != 'dependabot[bot]' }}
    with:
      branch: ${{ github.ref }}
      tf_work_subdir: permanent
      execute_plan: true
      # apply only after merge to main
      execute_apply: ${{ github.ref_name == 'main' && github.event_name == 'push' }}
    secrets:
      aws_access_key_id: ${{ secrets.OTELCOMM_AWS_TEST_ACC_ACCESS_KEY_ID }}
      aws_secret_access_key: ${{secrets.OTELCOMM_AWS_TEST_ACC_SECRET_ACCESS_KEY}}
      aws_account_id: ${{ secrets.OTELCOMM_AWS_TEST_ACC_ACCOUNT_ID }}