name: IAM functional tests
permissions:
  contents: read
on: pull_request

jobs:
  build:
    name: RunIAMTests
    runs-on: ubuntu-latest
    services:
      vault:
        image: hashicorp/vault:1.21.4@sha256:6c77f568e6b6310d5bc68befb5711b9215c574de7da489e7c24332581176888b
        env:
          VAULT_ADDR: http://127.0.0.1:8200
          VAULT_DEV_LISTEN_ADDRESS: 0.0.0.0:8200
          VAULT_DEV_ROOT_TOKEN_ID: iam-ci-root
        ports:
          - 8200:8200
        options: >-
          --cap-add=IPC_LOCK
          --health-cmd "vault status"
          --health-interval 2s
          --health-timeout 2s
          --health-retries 15
    steps:

    - name: Checkout
      uses: actions/checkout@v6

    - name: Set up Go
      uses: actions/setup-go@v6
      with:
        go-version: 'stable'
      id: go

    - name: Get Dependencies
      run: |
        go mod download

    - name: Build and Run
      env:
        VAULT_ADDR: http://127.0.0.1:8200
        VAULT_TOKEN: iam-ci-root
      run: |
        make testbin
        ./runiamtests.sh

    - name: Coverage Report
      run: |
        go tool covdata percent -i=/tmp/iam.covdata,/tmp/iam.https.covdata,/tmp/iam.vault.covdata