community.yml

name: "community"

on:
  pull_request:
    branches: [master]
    paths-ignore:
      - "docs/**"
      - "*.md"
      - .github/workflows/docs.yml
      - .pre-commit-config.yaml
  push:
    branches: [master]
    paths-ignore:
      - "docs/**"
      - "*.md"
      - .github/workflows/docs.yml
      - .pre-commit-config.yaml

concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
  cancel-in-progress: true

jobs:
  requirements:
    name: Ensure requirements are met
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Ensure required artifacts have been cached
        uses: ./.github/actions/cache-downloads
        with:
          cache-name: community
  docker:
    name: Test ${{ matrix.role.name }} role on ${{ matrix.molecule_distro.image }}
    # -A* and -M* are not available without nexus credentials
    if: |
      ! startsWith(github.head_ref, 'next/') && ! contains(github.event.pull_request.labels.*.name, 'ci-prerelease')
    runs-on: ubuntu-latest
    needs: requirements
    strategy:
      fail-fast: false
      matrix:
        molecule_distro:
          - image: ubuntu:22.04
          - image: rockylinux/rockylinux:9.4
        role:
          - name: activemq
          - name: common
          - name: elasticsearch
          - name: identity
          - name: java
          - name: nginx
          - name: postgres
          - name: search
          - name: tomcat
          - name: transformers
    env:
      PY_COLORS: 1
      PYTHONUNBUFFERED: 1
    steps:
      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Set up Python
        uses: ./.github/actions/setup-python
        id: setup-python

      - name: Install python packages
        uses: Alfresco/alfresco-build-tools/.github/actions/pipenv@a0837df06d10de2cae8a99319e8e101a6cbe9083 # v8.4.0
        with:
          python-version: ${{ steps.setup-python.outputs.python-version }}

      - name: Install and cache ansible galaxy dependencies
        uses: ./.github/actions/galaxy
        with:
          cache-name: community

      - name: Setup workspace
        uses: ./.github/actions/setup-workspace

      - name: Cache downloads
        uses: ./.github/actions/cache-downloads
        with:
          cache-name: community

      - name: Run tests
        env:
          MOLECULE_ROLE_IMAGE: ${{ matrix.molecule_distro.image }}
        uses: nick-fields/retry@7152eba30c6575329ac0576536151aca5a72780e # v3.0.0
        with:
          timeout_minutes: 60
          max_attempts: 3
          retry_wait_seconds: 10
          command: cd roles/${{ matrix.role.name }} && pipenv run molecule test

  docker_integration:
    name: Test ${{ matrix.scenario.name }} scenario on ${{ matrix.molecule_distro.image }}
    if: github.actor != 'dependabot[bot]'
    needs: requirements
    strategy:
      fail-fast: false
      matrix:
        molecule_distro:
          - image: ubuntu:22.04
          - image: rockylinux/rockylinux:9.4
        scenario:
          - name: pki
          - name: docker_community
    uses: ./.github/workflows/docker.yml
    with:
      scenario: ${{ matrix.scenario.name }}
      os_distribution: ${{ matrix.molecule_distro.image }}
      galaxy_cache: community