support tests using template-linked policies #329
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Cargo Build & Test | |
| on: | |
| pull_request: | |
| env: | |
| CARGO_TERM_COLOR: always | |
| jobs: | |
| get-branch-name: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Get branch name | |
| shell: bash | |
| # The workflow is triggered by pull_request so we use `GITHUB_BASE_REF` | |
| run: echo "branch_name=${GITHUB_BASE_REF}" >> $GITHUB_OUTPUT | |
| id: get_branch_name | |
| outputs: | |
| branch_name: ${{ steps.get_branch_name.outputs.branch_name }} | |
| build_and_test_java_hello_world: | |
| name: java-hello-world | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| toolchain: | |
| - stable | |
| steps: | |
| - uses: actions/setup-java@v3 | |
| with: | |
| distribution: 'corretto' | |
| java-version: '17' | |
| - name: Checkout cedar-examples | |
| uses: actions/checkout@v3 | |
| - name: Checkout cedar-java | |
| uses: actions/checkout@v3 | |
| with: | |
| repository: cedar-policy/cedar-java | |
| ref: release/2.3.x # Java example currently only builds for 2.3.3 | |
| path: ./cedar-java-hello-world/cedar-java | |
| - name: rustup | |
| run: rustup update ${{ matrix.toolchain }} && rustup default ${{ matrix.toolchain }} | |
| - name: cargo build CedarJavaFFI | |
| working-directory: ./cedar-java-hello-world/cedar-java/CedarJavaFFI | |
| run: cargo build | |
| - name: Build cedar-java-hello-world | |
| working-directory: ./cedar-java-hello-world | |
| run: bash config.sh && ./gradlew build | |
| - name: Run cedar-java-hello-world | |
| working-directory: ./cedar-java-hello-world | |
| run: ./gradlew test | |
| run_example_use_cases: | |
| name: run_example_use_cases | |
| needs: get-branch-name | |
| uses: ./.github/workflows/run_example_use_cases_reusable.yml | |
| with: | |
| cedar_policy_ref: "refs/heads/main" # use the latest commit on main | |
| cedar_examples_ref: "${{ github.href }}" # use the current PR's commit | |
| build_rust_hello_world: | |
| name: rust_hello_world | |
| needs: get-branch-name | |
| uses: ./.github/workflows/build_rust_hello_world_reusable.yml | |
| with: | |
| cedar_policy_ref: "refs/heads/main" # use the latest commit on main | |
| cedar_examples_ref: "${{ github.href }}" # use the current PR's commit | |
| build_tiny_todo: | |
| name: tinytodo | |
| needs: get-branch-name | |
| uses: ./.github/workflows/build_tiny_todo_reusable.yml | |
| with: | |
| cedar_policy_ref: "refs/heads/main" # use the latest commit on main | |
| cedar_examples_ref: "${{ github.href }}" # use the current PR's commit | |
| build_and_run_oopsla_benchmarks: | |
| name: OOPSLA2024 benchmarks | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout cedar-examples | |
| uses: actions/checkout@v3 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Build Docker image | |
| uses: docker/build-push-action@v5 | |
| with: | |
| push: false | |
| context: oopsla2024-benchmarks | |
| file: oopsla2024-benchmarks/Dockerfile | |
| tags: cedar-benchmarks:latest | |
| load: true | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=max | |
| - name: Run benchmarks inside Docker container | |
| uses: addnab/docker-run-action@v3 | |
| with: | |
| image: cedar-benchmarks:latest | |
| # run a small run, that completes fast, but will still make sure things work properly | |
| run: cargo run --release -- bench --app gdrive,github,tiny-todo,gdrive-templates,github-templates --engine cedar,open-fga,rego,cedar-opt --num-hierarchies 3 --num-requests 3 --num-entities 1,2,3 |