ci.yml

name: CI

on:
  pull_request:
  push:
    branches: main

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  LOCK_NAME: ci.yml-integration # {workflow}-{job}, maybe a default?
  S3_BUCKET: aws-s3-lock-ci

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v3
        with:
          cache: yarn
          node-version-file: '.nvmrc'
      - run: yarn install
      - run: yarn build
      - run: yarn test --passWithNoTests

  integration:
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    steps:
      - uses: actions/checkout@v4
      - uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-region: ${{ vars.AWS_REGION }}
          role-to-assume: ${{ secrets.AWS_ROLE }}

      - id: lock-1
        name: Acquire for 10s
        uses: ./
        with:
          name: ${{ env.LOCK_NAME }}
          s3-bucket: ${{ env.S3_BUCKET }}
          expires: 5s

      - id: lock-2
        name: Wait on lock-1 then acquire
        uses: ./
        with:
          name: ${{ env.LOCK_NAME }}
          s3-bucket: ${{ env.S3_BUCKET }}
          timeout: 10s

      - name: Verify locks
        run: |
          [[ -n '${{ lock-1.outputs.acquired-at }}' ]] # lock-1
          [[ -n '${{ lock-2.outputs.acquired-at }}' ]] # lock-2
          # lock-2 acquired at should be +5s

  integration-post:
    needs: integration
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    steps:
      - uses: actions/checkout@v4
      - uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-region: ${{ vars.AWS_REGION }}
          role-to-assume: ${{ secrets.AWS_ROLE }}
      - name: Assert lock was released
        uses: ./
        with:
          name: ${{ env.LOCK_NAME }}
          s3-bucket: ${{ env.S3_BUCKET }}
          timeout: 0s