client.yml

name: client

on:
  pull_request:
    paths:
      - "**/Cargo.toml"
      - "**/*.rs"
      - justfile
      - .github/workflows/client.yml

permissions:
  contents: read

env:
  CARGO_INCREMENTAL: 0
  CARGO_NET_RETRY: 10
  RUST_VERSION: 1.64.0
  RUSTUP_MAX_RETRIES: 10
  KUBERT_TEST_NS: kubert-test

jobs:
  cleanup:
    runs-on: ubuntu-latest
    permissions:
      actions: write
    steps:
      - uses: styfle/cancel-workflow-action@01ce38bf961b4e243a6342cbade0dbc8ba3f0432
        with:
          all_but_latest: true
          access_token: ${{ github.token }}

  local:
    strategy:
      matrix:
        k8s:
          - v1.21
          - v1.26
        tls:
          - openssl-tls
          - rustls-tls
    name: local (k8s ${{ matrix.k8s }}, ${{ matrix.tls }})
    timeout-minutes: 30 # building with OpenSSL can be quite slow...
    runs-on: ubuntu-latest
    env:
      KUBERT_TEST_CLUSTER_VERSION: ${{ matrix.k8s }}
    steps:
      - uses: linkerd/dev/actions/setup-tools@v42
      - uses: linkerd/dev/actions/setup-rust@v42
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
      - run: just fetch
      - run: just --set features ${{ matrix.tls }} build-examples
      - run: just --set features ${{ matrix.tls }} test-cluster-create
      - run: just --set features ${{ matrix.tls }} test-cluster-run-watch-pods --log-level=debug
      - run: just --set features ${{ matrix.tls }} test-cluster-create-ns
      - name: Run just test-cluster-run-watch-pods with impersonation
        run: |
          just --set features ${{ matrix.tls }} \
            test-cluster-run-watch-pods \
            --log-level=debug \
            --as=system:serviceaccount:${KUBERT_TEST_NS}:watch-pods \
            --kubeconfig=$HOME/.kube/config
      - run: just --set features ${{ matrix.tls }} test-lease-build
      - run: just --set features ${{ matrix.tls }} test-lease

  in-cluster:
    strategy:
      matrix:
        k8s:
          - v1.21
          - v1.26
        tls:
          - openssl-tls
          - rustls-tls
    name: in-cluster (k8s ${{ matrix.k8s }}, ${{ matrix.tls }})
    timeout-minutes: 15
    runs-on: ubuntu-latest
    env:
      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      KUBERT_TEST_CLUSTER_VERSION: ${{ matrix.k8s }}
    steps:
      - uses: linkerd/dev/actions/setup-tools@v42
      - uses: linkerd/dev/actions/setup-rust@v42
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
      - run: just --set features ${{ matrix.tls }} build-examples-image
      - run: just --set features ${{ matrix.tls }} test-cluster-create
      - run: just --set features ${{ matrix.tls }} test-cluster-import-examples
      - run: just --set features ${{ matrix.tls }} test-cluster-create-ns
      - run: just --set features ${{ matrix.tls }} test-cluster-deploy-watch-pods --log-level=debug