vision.yaml

# Copyright 2023 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

name: vision
on:
  push:
    branches:
    - main
    paths:
    - 'vision/**'
    - '.github/workflows/vision.yaml'
  pull_request:
    types:
    - opened
    - reopened
    - synchronize
    - labeled
    paths:
    - 'vision/**'
    - '.github/workflows/vision.yaml'
  schedule:
  - cron: '0 0 * * 0'
jobs:
  test:
    permissions:
      contents: 'read'
      id-token: 'write'
    if: github.event.action != 'labeled' || github.event.label.name == 'actions:force-run'
    runs-on: ubuntu-latest
    timeout-minutes: 120
    defaults:
      run:
        working-directory: 'vision'
    steps:
    - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
      with:
        ref: ${{github.event.pull_request.head.sha}}
    - uses: 'google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa' # v2.1.3
      with:
        workload_identity_provider: 'projects/1046198160504/locations/global/workloadIdentityPools/github-actions-pool/providers/github-actions-provider'
        service_account: 'kokoro-system-test@long-door-651.iam.gserviceaccount.com'
        create_credentials_file: 'true'
        access_token_lifetime: 600s
    - id: secrets
      uses: 'google-github-actions/get-secretmanager-secrets@95a0b09b8348ef3d02c68c6ba5662a037e78d713' # v2
      with:
        secrets: |-
          vision:nodejs-docs-samples-tests/nodejs-docs-samples-vision
    - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
      with:
        node-version: 16
    - name: Get npm cache directory
      id: npm-cache-dir
      shell: bash
      run: echo "dir=$(npm config get cache)" >> ${GITHUB_OUTPUT}
    - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
      id: npm-cache
      with:
        path: ${{ steps.npm-cache-dir.outputs.dir }}
        key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
        restore-keys: "${{ runner.os }}-node-   \n"
    - name: install repo dependencies
      run: npm install
      working-directory: .
    - name: install directory dependencies
      run: npm install
    - run: npm run build --if-present
    - name: set env vars for scheduled run
      if: github.event.action == 'schedule'
      run: |
        echo "MOCHA_REPORTER_SUITENAME=vision" >> $GITHUB_ENV
        echo "MOCHA_REPORTER_OUTPUT=${{github.run_id}}_sponge_log.xml" >> $GITHUB_ENV
        echo "MOCHA_REPORTER=xunit" >> $GITHUB_ENV
    - run: npm test
      env:
        REDIS_HOST: ${{ steps.secrets.outputs.vision.REDIS_HOST }}
    - name: upload test results for FlakyBot workflow
      if: github.event.action == 'schedule' && always()
      uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4
      env:
        MOCHA_REPORTER_OUTPUT: "${{github.run_id}}_sponge_log.xml"
      with:
        name: test-results
        path: vision/${{ env.MOCHA_REPORTER_OUTPUT }}
        retention-days: 1
  flakybot:
    permissions:
      contents: 'read'
      id-token: 'write'
    if: github.event_name == 'schedule' && always() # always() submits logs even if tests fail
    uses: ./.github/workflows/flakybot.yaml
    needs: [test]