Plan: Containerized Integration Tests

let pg_port = get_host_port(ports, "postgres", 5432);
writeln!(file, "CANOPY_TEST__DATABASE_URL=postgres://canopy:canopy@localhost:{pg_port}/canopy")?;

canopy-integration:
  profiles: [integration]
  build:
    context: .
    dockerfile: Dockerfile.integration
  user: app
  environment:
    CANOPY_TEST__KEYCLOAK_URL: http://keycloak:8080
    CANOPY_TEST__RULES_URL: http://canopy-rules:8001
    CANOPY_TEST__PERSONS_URL: http://canopy-persons:8002
    CANOPY_TEST__APPLICATIONS_URL: http://canopy-applications:8003
    CANOPY_TEST__ELIGIBILITY_URL: http://canopy-eligibility:8004
    CANOPY_TEST__VERIFICATION_URL: http://canopy-verification:8005
    CANOPY_TEST__ENROLLMENT_URL: http://canopy-enrollment:8006
    CANOPY_TEST__RENEWALS_URL: http://canopy-renewals:8007
    CANOPY_TEST__NOTICES_URL: http://canopy-notices:8008
    CANOPY_TEST__EXCHANGE_URL: http://canopy-exchange:8009
    CANOPY_TEST__APPEALS_URL: http://canopy-appeals:8010
    CANOPY_TEST__REPORTING_URL: http://canopy-reporting:8011
    CANOPY_TEST__SECURITY_URL: http://canopy-security:8012
    CANOPY_TEST__SNAP_URL: http://canopy-snap:8013
    CANOPY_TEST__TANF_URL: http://canopy-tanf:8014
    CANOPY_TEST__MEDICAID_URL: http://canopy-medicaid:8015
    CANOPY_TEST__CAPS_URL: http://canopy-caps:8016
    CANOPY_TEST__WIC_URL: http://canopy-wic:8017
    CANOPY_TEST__WEB_URL: http://canopy-web:8080
    CANOPY_TEST__PORTAL_URL: http://canopy-portal:8090
    CANOPY_TEST__DATABASE_URL: postgres://canopy:canopy@postgres:5432/canopy
    CANOPY_TEST__RABBITMQ_URL: amqp://canopy:canopy@rabbitmq:5672/%2f
    CANOPY_CI: ${CANOPY_CI:-}
  volumes:
    - ./test-results:/app/test-results
    - ./.keys:/app/.keys:ro
    - canopy-integration-target:/app/target
  depends_on:
    canopy-web:           { condition: service_healthy }
    canopy-rules:         { condition: service_healthy }
    canopy-persons:       { condition: service_healthy }
    canopy-applications:  { condition: service_healthy }
    canopy-eligibility:   { condition: service_healthy }
    canopy-verification:  { condition: service_healthy }
    canopy-enrollment:    { condition: service_healthy }
    canopy-renewals:      { condition: service_healthy }
    canopy-notices:       { condition: service_healthy }
    canopy-appeals:       { condition: service_healthy }
    canopy-security:      { condition: service_healthy }
    canopy-snap:          { condition: service_healthy }
    keycloak:             { condition: service_healthy }
    postgres:             { condition: service_healthy }
    rabbitmq:             { condition: service_healthy }
    garage:               { condition: service_started }
volumes:
  canopy-integration-target:

# SPDX-License-Identifier: AGPL-3.0-or-later
# Multi-stage Alpine build for the Rust integration test runner.

# -- Stage 1: build --
FROM rust:1.94-alpine AS builder
RUN apk add --no-cache musl-dev curl
# Pre-built nextest (avoids ~3-min `cargo install`).
RUN curl -LsSf https://get.nexte.st/latest/linux-musl | tar -xzf - -C /usr/local/bin
WORKDIR /app
COPY . .
# Pre-compile test binaries so first `nextest run` inside the container is
# execution-only. Cached by docker layer.
RUN cargo nextest list --workspace --test '*' --profile integration

# -- Stage 2: runtime --
FROM rust:1.94-alpine
RUN apk add --no-cache musl-dev curl
RUN curl -LsSf https://get.nexte.st/latest/linux-musl | tar -xzf - -C /usr/local/bin
RUN addgroup -S app && adduser -S -G app -s /sbin/nologin app
WORKDIR /app
COPY --from=builder --chown=app:app /app /app
USER app
ENTRYPOINT ["cargo", "nextest", "run", "--workspace", "--test", "*", "--profile", "integration"]

target/
.git/
node_modules/
test-results/
.devstack/
.ports.env

// In test::Args
#[arg(long)]
pub host: bool,

// In test::run(), integration branch:
if args.host {
    run_integration_tests_host()?;   // the existing nextest call
} else {
    run_integration_tests_container(&project)?;
}

fn run_integration_tests_container(project: &str) -> Result<()> {
    crate::docker::compose_cmd(project, &[
        "--profile", "integration",
        "--profile", "snap-only",   // transitively starts canopy-web and its deps
        "run", "--build", "--rm",
        "canopy-integration",
    ])
}

integration-tests:
  stage: test
  tags: [dhs-aws-autoscaler-docker.xlarge]
  image: $CI_REGISTRY/gadhs/standard/ci-images/rust-docker:1.94
  variables:
    CANOPY_CI: "true"
    DOCKER_HOST: tcp://docker:2375
    DOCKER_TLS_CERTDIR: ""
  services:
    - docker:dind
  script:
    - cargo xtask test --integration
  artifacts:
    when: always
    reports:
      junit: test-results/integration/results.xml
    paths:
      - test-results/integration/
    expire_in: 1 week