Ilia Denisov
c6c5f3c8dd
The Gitea host serves https://gitea.iliadenisov.ru with a cert signed by host-Caddy's internal CA, which the runner-image's CA bundle does not trust. actions/checkout@v4 fails on `git fetch` as a result, so every workflow on gitea.lan has been failing — visible only now that we made gitea.lan the primary CI target. Sets GIT_SSL_NO_VERIFY=true on every workflow as a quick fix. Safe in practice because both endpoints sit on the same LAN. The long-term fix is to bake the Caddy root CA into the runner image and drop this env. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
72 lines
1.9 KiB
YAML
72 lines
1.9 KiB
YAML
name: integration
|
||
|
||
# Full integration suite (testcontainers-driven, ~5–10 minutes). Heavy
|
||
# enough that we do not run it on every push to a feature branch — only
|
||
# when there is an open PR aimed at `development`/`main`, or after a
|
||
# merge into `development`. The unit jobs (`go-unit.yaml`,
|
||
# `ui-test.yaml`) keep guarding fast feedback on every push.
|
||
|
||
on:
|
||
pull_request:
|
||
branches:
|
||
- development
|
||
- main
|
||
paths:
|
||
- 'backend/**'
|
||
- 'gateway/**'
|
||
- 'game/**'
|
||
- 'pkg/**'
|
||
- 'ui/core/**'
|
||
- 'integration/**'
|
||
- 'go.work'
|
||
- 'go.work.sum'
|
||
- '.gitea/workflows/integration.yaml'
|
||
- '!**/*.md'
|
||
push:
|
||
branches:
|
||
- development
|
||
paths:
|
||
- 'backend/**'
|
||
- 'gateway/**'
|
||
- 'game/**'
|
||
- 'pkg/**'
|
||
- 'ui/core/**'
|
||
- 'integration/**'
|
||
- 'go.work'
|
||
- 'go.work.sum'
|
||
- '.gitea/workflows/integration.yaml'
|
||
- '!**/*.md'
|
||
|
||
env:
|
||
# See go-unit.yaml for the rationale; this disables TLS verify for
|
||
# actions/checkout against the LAN Gitea host signed by host-Caddy's
|
||
# internal CA.
|
||
GIT_SSL_NO_VERIFY: "true"
|
||
|
||
jobs:
|
||
integration:
|
||
runs-on: ubuntu-latest
|
||
defaults:
|
||
run:
|
||
shell: bash
|
||
steps:
|
||
- name: Checkout
|
||
uses: actions/checkout@v4
|
||
with:
|
||
submodules: recursive
|
||
|
||
- name: Set up Go
|
||
uses: actions/setup-go@v5
|
||
with:
|
||
go-version-file: go.work
|
||
cache: true
|
||
|
||
- name: Run integration suite
|
||
# `make integration` precleans leftover docker-compose state and
|
||
# then runs every test under integration/ serially (-p=1
|
||
# -parallel=1, 15-minute per-test timeout). Testcontainers
|
||
# reaches the host's docker daemon via the socket Gitea exposes
|
||
# to the runner; the workflow inherits the same access the
|
||
# runner has.
|
||
run: make -C integration integration
|