integ-tests-with-security.yml

name: Security Plugin IT

on:
  pull_request:
  push:
    branches-ignore:
      - 'dependabot/**'
    paths:
      - 'integ-test/**'
      - '.github/workflows/integ-tests-with-security.yml'

jobs:
  Get-CI-Image-Tag:
    uses: opensearch-project/opensearch-build/.github/workflows/get-ci-image-tag.yml@main
    with:
      product: opensearch

  security-it-linux:
    needs: Get-CI-Image-Tag
    strategy:
      fail-fast: false
      matrix:
        java: [ 11, 17, 21 ]
    env:
      ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true
    runs-on: ubuntu-latest
    container:
      # using the same image which is used by opensearch-build team to build the OpenSearch Distribution
      # this image tag is subject to change as more dependencies and updates will arrive over time
      image: ${{ needs.Get-CI-Image-Tag.outputs.ci-image-version-linux }}
      # need to switch to root so that github actions can install runner binary on container without permission issues.
      options: --user root

    steps:
      - name: Run start commands
        run: ${{ needs.Get-CI-Image-Tag.outputs.ci-image-start-command }}

      - uses: actions/checkout@v4

      - name: Set up JDK ${{ matrix.java }}
        uses: actions/setup-java@v3
        with:
          distribution: 'temurin'
          java-version: ${{ matrix.java }}

      - name: Build with Gradle
        run: |
          chown -R 1000:1000 `pwd`
          su `id -un 1000` -c "./gradlew integTestWithSecurity"

      - name: Upload test reports
        if: ${{ always() }}
        uses: actions/upload-artifact@v3
        continue-on-error: true
        with:
          name: test-reports-${{ matrix.os }}-${{ matrix.java }}
          path: |
            integ-test/build/reports/**
            integ-test/build/testclusters/*/logs/*
            integ-test/build/testclusters/*/config/*

  security-it-windows-macos:
    strategy:
      fail-fast: false
      matrix:
        os: [ windows-latest, macos-13 ]
        java: [ 11, 17, 21 ]

    runs-on: ${{ matrix.os }}

    steps:
      - uses: actions/checkout@v4

      - name: Set up JDK ${{ matrix.java }}
        uses: actions/setup-java@v3
        with:
          distribution: 'temurin'
          java-version: ${{ matrix.java }}

      - name: Build with Gradle
        run: ./gradlew integTestWithSecurity

      - name: Upload test reports
        if: ${{ always() }}
        uses: actions/upload-artifact@v3
        continue-on-error: true
        with:
          name: test-reports-${{ matrix.os }}-${{ matrix.java }}
          path: |
            integ-test/build/reports/**
            integ-test/build/testclusters/*/logs/*
            integ-test/build/testclusters/*/config/*