postgres/.github/workflows/cli-smoke-test.yml at develop · KBVE/postgres · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
name: CLI Smoke Test

on:
  pull_request:
    types: [opened, reopened, synchronize]
  push:
    branches:
      - develop
      - release/*
  workflow_dispatch:

permissions:
  id-token: write
  contents: read

jobs:
  check-changes:
    name: Check Docker Image Changes
    runs-on: blacksmith-2vcpu-ubuntu-2404
    outputs:
      should_run: ${{ steps.check.outputs.should_run }}
      input_hash: ${{ steps.check.outputs.input_hash }}
      base_hash: ${{ steps.check.outputs.base_hash }}
    steps:
      - name: Checkout Repo
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Install nix
        uses: ./.github/actions/nix-install-ephemeral
        with:
          push-to-cache: 'false'
        env:
          DEV_AWS_ROLE: ${{ secrets.DEV_AWS_ROLE }}
          NIX_SIGN_SECRET_KEY: ${{ secrets.NIX_SIGN_SECRET_KEY }}

      - name: Check Docker image changes
        id: check
        uses: ./.github/actions/check-docker-image-changes
        with:
          event_name: ${{ github.event_name }}
          base_ref: ${{ github.base_ref }}

  cli-smoke-test:
    name: CLI Smoke Test (PG ${{ matrix.pg_version }})
    needs: check-changes
    if: needs.check-changes.outputs.should_run == 'true'
    runs-on: large-linux-arm
    timeout-minutes: 60
    strategy:
      fail-fast: false
      matrix:
        pg_version: ['15', '17']
    steps:
      - name: Checkout Repo
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Install nix
        uses: ./.github/actions/nix-install-ephemeral
        with:
          push-to-cache: 'false'
        env:
          DEV_AWS_ROLE: ${{ secrets.DEV_AWS_ROLE }}
          NIX_SIGN_SECRET_KEY: ${{ secrets.NIX_SIGN_SECRET_KEY }}

      - name: Create Docker context
        run: docker context create builders

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
        with:
          endpoint: builders

      - name: Build Docker image
        run: |
          DOCKERFILE="Dockerfile-${{ matrix.pg_version }}"
          echo "Building $DOCKERFILE..."
          # Tag with ECR prefix since CLI uses public.ecr.aws/supabase/postgres as base
          docker build -f "$DOCKERFILE" -t "public.ecr.aws/supabase/postgres:${{ matrix.pg_version }}" .

      - name: Run CLI smoke test
        run: |
          echo "Running CLI smoke test for PostgreSQL ${{ matrix.pg_version }}..."
          nix run --accept-flake-config .#cli-smoke-test -- --no-build ${{ matrix.pg_version }}
        timeout-minutes: 10

      - name: Show logs on failure
        if: failure()
        run: |
          echo "=== Supabase Status ==="
          nix run --accept-flake-config .#supabase-cli -- status || true

          echo "=== Docker containers ==="
          docker ps -a

          echo "=== Database container logs ==="
          docker logs supabase_db_postgres 2>&1 | tail -100 || true

      - name: Cleanup
        if: always()
        run: |
          nix run --accept-flake-config .#supabase-cli -- stop --no-backup || true

  skip-notification:
    name: CLI Smoke Test (Skipped)
    needs: check-changes
    if: needs.check-changes.outputs.should_run == 'false'
    runs-on: ubuntu-latest
    steps:
      - name: Report skipped
        run: |
          echo "CLI smoke test skipped - Docker image inputs unchanged"
          echo "Input hash: ${{ needs.check-changes.outputs.input_hash }}"