pr.yaml

name: test pr
on:
  pull_request_target:
    types:
      - opened
      - synchronize
      - ready_for_review
      - reopened
    branches:
      - main

concurrency: 
  group: ${{ github.head_ref }}
  cancel-in-progress: true

jobs:
  # Use a job that does nothing but has an environment as a guard to control
  # access to the rest of workflow
  # This allows us to control access to test infra for concurrenct and approval reasons
  wait_for_approval:
    runs-on: ubuntu-latest
    environment: ci-approval
    steps:
      - name: Workflow approved
        run: exit 0

  lint:
    needs: [wait_for_approval]
    uses: ./.github/workflows/lint.yaml
    with:
      ref: ${{ github.event.pull_request.head.sha }}

  mirror_container_images:
    needs: [lint]
    uses: ./.github/workflows/sync-images.yaml
    secrets: inherit
    with:
      ref: ${{ github.event.pull_request.head.sha }}

  ensure_capi_images:
    needs: [lint]
    uses: ./.github/workflows/ensure-capi-images.yaml
    secrets: inherit
    with:
      ref: ${{ github.event.pull_request.head.sha }}

  test:
    needs: [mirror_container_images, ensure_capi_images]
    uses: ./.github/workflows/test.yaml
    secrets: inherit
    with:
      # Pass the images as JSON
      images: ${{ toJSON(needs.ensure_capi_images.outputs) }}
      # We want to test the code in the PR
      ref: ${{ github.event.pull_request.head.sha }}
      # If the PR is in draft, just run a sanity check
      # If the PR is in review, run the full test suite
      tests-full: ${{ !github.event.pull_request.draft }}