114 lines
4.1 KiB
YAML
114 lines
4.1 KiB
YAML
name: fileserver-pr
|
|
|
|
# Every claim in docs/fileserver/support-matrix.md that says "Stable" is backed by a job here.
|
|
# A support level with no job behind it is a marketing claim, not an engineering one, and
|
|
# DocumentationCoverageTest fails the build when the two drift apart.
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
pull_request:
|
|
paths:
|
|
- 'src/application-core/src/**/fileserver/**'
|
|
- 'src/adapter/inbound/web/src/**/fileserver/**'
|
|
- 'src/adapter/outbound/fileserver/**'
|
|
- 'src/adapter/outbound/persistence-jpa/src/**/fileserver/**'
|
|
- 'src/app-bootstrap/src/**/fileserver/**'
|
|
- 'docs/fileserver/**'
|
|
# The capability is not only its Java files. A change to the bound settings, the shipped
|
|
# environment, the registry that documents it, or the container that has to give it a
|
|
# writable volume changes how it behaves at runtime just as surely — and those were the
|
|
# exact files that could previously ship unverified.
|
|
- 'src/app-bootstrap/src/main/resources/application.yml'
|
|
- 'src/.env'
|
|
- 'docs/registries/env-keys.yaml'
|
|
- 'src/Dockerfile'
|
|
- 'docker-compose.yml'
|
|
- 'infra/fileserver/nginx/**'
|
|
- 'infra/fileserver/kubernetes/**'
|
|
- 'infra/fileserver/nfs/**'
|
|
- '.github/workflows/fileserver-pr.yml'
|
|
# Every Gradle job here installs its toolchain through this composite action, so a change to
|
|
# it changes what this gate runs.
|
|
- '.github/actions/setup-gradle-java/action.yml'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
fileserver-unit-and-architecture:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 30
|
|
steps:
|
|
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # actions/checkout@v4.2.2
|
|
- uses: ./.github/actions/setup-gradle-java
|
|
- name: Run the fileserver application and architecture suites
|
|
working-directory: src
|
|
run: >-
|
|
./gradlew
|
|
:application-core:test
|
|
:app-bootstrap:test --tests 'dev.caskeleton.bootstrap.architecture.*' --tests '*Fileserver*'
|
|
|
|
--stacktrace
|
|
|
|
fileserver-local-ext4-contract:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 30
|
|
steps:
|
|
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # actions/checkout@v4.2.2
|
|
- uses: ./.github/actions/setup-gradle-java
|
|
- name: Certify the local content store against the shared contract
|
|
working-directory: src
|
|
run: >-
|
|
./gradlew
|
|
:adapter:outbound:fileserver:test
|
|
|
|
--stacktrace
|
|
|
|
fileserver-http-contract:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 30
|
|
steps:
|
|
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # actions/checkout@v4.2.2
|
|
- uses: ./.github/actions/setup-gradle-java
|
|
- name: Run the servlet and reactive transport contracts
|
|
working-directory: src
|
|
run: >-
|
|
./gradlew
|
|
:adapter:inbound:web:test
|
|
|
|
--stacktrace
|
|
|
|
fileserver-security-suite:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 20
|
|
steps:
|
|
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # actions/checkout@v4.2.2
|
|
- uses: ./.github/actions/setup-gradle-java
|
|
- name: Run the path, filename, range, and problem-detail hardening suite
|
|
working-directory: src
|
|
run: >-
|
|
./gradlew
|
|
:adapter:inbound:web:test --tests '*FileserverHardeningContractTest'
|
|
:adapter:outbound:fileserver:test --tests '*PhysicalPathResolverTest'
|
|
|
|
--stacktrace
|
|
|
|
fileserver-bounded-memory:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 20
|
|
steps:
|
|
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # actions/checkout@v4.2.2
|
|
- uses: ./.github/actions/setup-gradle-java
|
|
- name: Prove transfer cost does not scale with file size
|
|
working-directory: src
|
|
run: >-
|
|
./gradlew
|
|
:adapter:outbound:fileserver:test --tests '*LargeFileBoundedMemoryTest'
|
|
:adapter:inbound:web:test --tests '*DataBufferReleaseTest'
|
|
|
|
--stacktrace
|