pr-e2e.yaml

name: E2E PR Blocking
on:
  pull_request_target:
    types: [opened, synchronize, reopened, ready_for_review]
    branches:
      - main
      - "releases/**"
    paths:
      - "**.go"
      - "**go.mod"
      - "**go.sum"
      - "<templates|test>/**/*.<yml|yaml>"
      - ".github/actions/**/*"
      - ".github/workflows/e2e-*"
      - ".github/workflows/pr-*"
      - "images/caph/**"
      - "!**/vendor/**"
      - "test/e2e/**"
env:
  IMAGE_NAME: caph-staging
  REGISTRY: ghcr.io/syself
  metadata_flavor: latest=false
  metadata_tags: type=ref,event=pr
  registry_password: ${{ secrets.GITHUB_TOKEN }}
jobs:
  manager-image:
    name: Build and push manager image
    if: github.event_name != 'pull_request_target' || !github.event.pull_request.draft
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          ref: ${{ github.event.pull_request.head.sha }}
          fetch-depth: 0

      - name: Build and push manager image
        id: manager-image
        uses: ./.github/actions/manager-image

  test-release:
    name: Test Release
    if: github.event_name != 'pull_request_target' || !github.event.pull_request.draft
    runs-on: ubuntu-latest
    steps:
      - name: checkout
        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
        with:
          ref: ${{ github.event.pull_request.head.sha }}
      - name: Test Release
        id: manager-image
        uses: ./.github/actions/test-release

  e2e-hcloud-basic:
    name: Test Hcloud Basic
    if: github.event_name != 'pull_request_target' || !github.event.pull_request.draft
    concurrency: ci-${{ github.ref }}-e2e-basic
    runs-on: ubuntu-latest
    permissions:
      # Required for hcloud TPS
      id-token: write
    needs:
      - manager-image
      - test-release
    steps:
      - name: checkout
        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
        with:
          ref: ${{ github.event.pull_request.head.sha }}
      - name: Run e2e Test
        id: e2e
        uses: ./.github/actions/e2e
        with:
          e2e_name: hcloud-basic
          e2e_make_target: test-e2e
          e2e_hcloud_token: ${{ secrets.HCLOUD_TOKEN }}

  e2e-hetzner-basic:
    name: Test Hetzner Baremetal Basic
    if: github.event_name != 'pull_request_target' || !github.event.pull_request.draft
    concurrency: ci-${{ github.ref }}-e2e-basic-hetzner
    runs-on: ubuntu-latest
    permissions:
      # Required for hcloud TPS
      id-token: write
    needs:
      - manager-image
      - test-release
    steps:
      - name: checkout
        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
        with:
          ref: ${{ github.event.pull_request.head.sha }}
      - name: Run e2e Test
        id: e2e-bm
        uses: ./.github/actions/e2e
        with:
          e2e_name: hetzner-basic
          e2e_make_target: test-e2e-baremetal
          e2e_hcloud_token: ${{ secrets.HCLOUD_TOKEN }}
          e2e_robot_user: ${{ secrets.HETZNER_ROBOT_USER }}
          e2e_robot_password: ${{ secrets.HETZNER_ROBOT_PASSWORD }}
          e2e_ssh_pub: ${{ secrets.HETZNER_SSH_PUB }}
          e2e_ssh_priv: ${{ secrets.HETZNER_SSH_PRIV }}