cloud-acc-tests.yml

name: cloud acceptance tests
on:
  workflow_dispatch:
    inputs:
      tests:
        description: 'Tests to run (regex passed to -run)'
        default: '.*'
  workflow_call:
    inputs:
      tests:
        type: string
        description: 'Tests to run (regex passed to -run)'
        default: '.*'
    

# These permissions are needed to assume roles from Github's OIDC.
permissions:
  contents: read
  id-token: write

jobs:
  cloud:
    concurrency: cloud-api
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
        with: 
          go-version-file: go.mod
      - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
      - name: Get Secrets
        uses: grafana/shared-workflows/actions/get-vault-secrets@main
        with:
          repo_secrets: |
            GRAFANA_CLOUD_ACCESS_POLICY_TOKEN=cloud-tests:api-key
            GRAFANA_CLOUD_ORG=cloud-tests:org
      - run: make testacc-cloud-api
        env:
          TESTARGS: -run='${{ github.event.inputs.tests }}'