configure-aws-credentials/.github/workflows/tests-integ.yml

name: Run Integ tests

on:
  workflow_dispatch:

jobs:
  integ-oidc:
    permissions:
      contents: read
      id-token: write
    strategy:
      fail-fast: false
      matrix:
        os: [[self-hosted, linux-fargate], windows-latest, ubuntu-latest, macos-latest]
    name: Run OIDC integ tests
    runs-on: ${{ matrix.os }}
    timeout-minutes: 30
    steps:
      - name: "Checkout repository"
        uses: actions/checkout@v4
      - name: Integ test for OIDC
        uses: ./
        with:
          aws-region: us-west-2
          role-to-assume: ${{ secrets.SECRETS_OIDC_AWS_ROLE_TO_ASSUME }}
          role-duration-seconds: 900
          role-session-name: IntegOidcAssumeRole
          role-external-id: ${{ secrets.SECRETS_OIDC_AWS_ROLE_EXTERNAL_ID }}
  integ-oidc-env:
    permissions:
      contents: read
      id-token: write
    strategy:
      fail-fast: false
      matrix:
        os: [[self-hosted, linux-fargate], windows-latest, ubuntu-latest, macos-latest]
    name: Run OIDC integ tests with existing invalid env vars
    runs-on: ${{ matrix.os }}
    env:
      AWS_ACCESS_KEY_ID: dummyaccesskeyid
      AWS_SECRET_ACCESS_KEY: dummysecretkey
      AWS_SESSION_TOKEN: dummytoken
    timeout-minutes: 30
    steps:
      - name: "Checkout repository"
        uses: actions/checkout@v4
      - name: Integ test for OIDC
        uses: ./
        with:
          aws-region: us-west-2
          role-to-assume: ${{ secrets.SECRETS_OIDC_AWS_ROLE_TO_ASSUME }}
          role-duration-seconds: 900
          role-session-name: IntegOidcAssumeRole
          role-external-id: ${{ secrets.SECRETS_OIDC_AWS_ROLE_EXTERNAL_ID }}
  integ-access-keys:
    strategy:
      fail-fast: false
      matrix:
        os: [[self-hosted, linux-fargate], windows-latest, ubuntu-latest, macos-latest]
    name: Run access key integ tests
    runs-on: ${{ matrix.os }}
    timeout-minutes: 30
    steps:
      - name: "Checkout repository"
        uses: actions/checkout@v4
      - name: Integ test for access keys
        uses: ./
        with:
          aws-region: us-west-2
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          role-to-assume: ${{ secrets.SECRETS_AWS_ROLE_TO_ASSUME }}
          role-session-name: IntegAccessKeysAssumeRole
          role-external-id: ${{ secrets.SECRETS_AWS_ROLE_EXTERNAL_ID }}
  integ-access-keys-env:
    strategy:
      fail-fast: false
      matrix:
        os: [[self-hosted, linux-fargate], windows-latest, ubuntu-latest, macos-latest]
    name: Run access key from env integ tests
    runs-on: ${{ matrix.os }}
    timeout-minutes: 30
    steps:
      - name: "Checkout repository"
        uses: actions/checkout@v4
      - name: Integ test for access keys
        uses: ./
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
        with:
          aws-region: us-west-2
          role-to-assume: ${{ secrets.SECRETS_AWS_ROLE_TO_ASSUME }}
          role-session-name: IntegAccessKeysAssumeRole
          role-external-id: ${{ secrets.SECRETS_AWS_ROLE_EXTERNAL_ID }}
  integ-iam-user:
    strategy:
      fail-fast: false
      matrix:
        os: [[self-hosted, linux-fargate], windows-latest, ubuntu-latest, macos-latest]
    name: Run IAM User integ tests
    runs-on: ${{ matrix.os }}
    timeout-minutes: 30
    steps:
      - name: "Checkout repository"
        uses: actions/checkout@v4
      - name: Integ test for IAM user
        uses: ./
        with:
          aws-region: us-west-2
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}