Skip to content

[Exporter] Added support for databricks_budget_policy resource #2962

[Exporter] Added support for databricks_budget_policy resource

[Exporter] Added support for databricks_budget_policy resource #2962

name: Integration Tests
on:
pull_request:
types: [opened, synchronize]
merge_group:
jobs:
check-token:
name: Check secrets access
runs-on:
group: databricks-deco-testing-runner-group
labels: ubuntu-latest-deco
environment: "test-trigger-is"
outputs:
has_token: ${{ steps.set-token-status.outputs.has_token }}
steps:
- name: Check if required secrets are set
id: set-token-status
run: |
if [ -z "${{ secrets.DECO_WORKFLOW_TRIGGER_APP_ID }}" ] || [ -z "${{ secrets.DECO_TEST_APPROVAL_APP_ID }}" ]; then
echo "Required secrets are missing. User has no access to secrets."
echo "::set-output name=has_token::false"
else
echo "All required secrets are set. User has access to secrets."
echo "::set-output name=has_token::true"
fi
trigger-tests:
name: Trigger Tests
runs-on:
group: databricks-deco-testing-runner-group
labels: ubuntu-latest-deco
needs: check-token
if: github.event_name == 'pull_request' && needs.check-token.outputs.has_token == 'true'
environment: "test-trigger-is"
steps:
- uses: actions/checkout@v3
- name: Generate GitHub App Token for Check Updates
id: generate-check-token
uses: actions/create-github-app-token@v1
with:
app-id: ${{ secrets.DECO_TEST_APPROVAL_APP_ID }}
private-key: ${{ secrets.DECO_TEST_APPROVAL_PRIVATE_KEY }}
owner: databricks
- name: Create Check Run
id: create-check
env:
GH_TOKEN: ${{ steps.generate-check-token.outputs.token }}
run: |
response=$(gh api -X POST \
/repos/${{ github.repository }}/check-runs \
-f name="Integration Tests" \
-f head_sha="${{ github.event.pull_request.head.sha }}" \
-f status="queued" \
-f output[title]="Integration Tests" \
-f output[summary]="Tests queued and will be triggered shortly...")
check_run_id=$(echo "$response" | jq -r .id)
echo "check_run_id=$check_run_id" >> $GITHUB_OUTPUT
- name: Generate GitHub App Token for Workflow Trigger
id: generate-token
uses: actions/create-github-app-token@v1
with:
app-id: ${{ secrets.DECO_WORKFLOW_TRIGGER_APP_ID }}
private-key: ${{ secrets.DECO_WORKFLOW_TRIGGER_PRIVATE_KEY }}
owner: ${{ secrets.ORG_NAME }}
repositories: ${{secrets.REPO_NAME}}
- name: Trigger Workflow in Another Repo
env:
GH_TOKEN: ${{ steps.generate-token.outputs.token }}
run: |
gh workflow run terraform-isolated-pr.yml -R ${{ secrets.ORG_NAME }}/${{secrets.REPO_NAME}} \
--ref main \
-f pull_request_number=${{ github.event.pull_request.number }} \
-f commit_sha=${{ github.event.pull_request.head.sha }} \
-f check_run_id=${{ steps.create-check.outputs.check_run_id }}
# Statuses and checks apply to specific commits (by hash).
# Enforcement of required checks is done both at the PR level and the merge queue level.
# In case of multiple commits in a single PR, the hash of the squashed commit
# will not match the one for the latest (approved) commit in the PR.
# We auto approve the check for the merge queue for two reasons:
# * Queue times out due to duration of tests.
# * Avoid running integration tests twice, since it was already run at the tip of the branch before squashing.
auto-approve:
if: github.event_name == 'merge_group'
runs-on:
group: databricks-deco-testing-runner-group
labels: ubuntu-latest-deco
permissions:
checks: write
contents: read
steps:
- name: Auto-approve Check for Merge Queue
uses: actions/github-script@v7
with:
script: |
await github.rest.checks.create({
owner: context.repo.owner,
repo: context.repo.repo,
name: 'Integration Tests',
head_sha: context.sha,
status: 'completed',
conclusion: 'success',
output: {
title: 'Integration Tests',
summary: 'Auto-approved for merge queue (tests already passed on PR)'
}
});