ci.yaml

name: CI

permissions:
  contents: read
  pull-requests: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

on:
  workflow_dispatch: {}
  pull_request:
  push:
    branches: [main]

jobs:
  setup:
    name: mise setup
    runs-on: ubuntu-latest
    outputs:
      adk-server: ${{ github.event_name == 'workflow_dispatch' || steps.filter.outputs.adk-server == 'true' }}
      adk-cli: ${{ github.event_name == 'workflow_dispatch' || steps.filter.outputs.adk-cli == 'true' }}
      adk-py: ${{ github.event_name == 'workflow_dispatch' || steps.filter.outputs.adk-py == 'true' }}
      helm: ${{ github.event_name == 'workflow_dispatch' || steps.filter.outputs.helm == 'true' }}
      examples: ${{ github.event_name == 'workflow_dispatch' || steps.filter.outputs.examples == 'true' }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - uses: ./.github/actions/setup
        with:
          save_cache: "true"
      - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d
        id: filter
        with:
          filters: |
            adk-server: 'apps/adk-server/**'
            adk-cli: 'apps/adk-cli/**'
            adk-py: 'apps/adk-py/**'
            helm: 'helm/**'
            examples: 'examples/**'
            microshift-vm: 'apps/microshift-vm/**'

  check:
    name: mise check
    needs: setup
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - uses: ./.github/actions/setup
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - run: mise run check

  test:
    name: mise test
    needs: setup
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - uses: ./.github/actions/setup
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - run: mise run test

  microshift-vm-build:
    name: mise microshift-vm:build
    needs: setup
    timeout-minutes: 10
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - name: Set arch
        run: echo "ARCH=$(uname -m | sed -e 's/arm64/aarch64/;s/amd64/x86_64/')" >> $GITHUB_ENV
      - id: cache-check
        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae
        with:
          path: apps/microshift-vm/dist/${{ env.ARCH }}
          key: microshift-vm-dist-v1-${{ runner.os }}-${{ env.ARCH }}-${{ hashFiles('apps/microshift-vm/**') }}
          lookup-only: true
      - if: steps.cache-check.outputs.cache-hit != 'true'
        uses: ./.github/actions/setup
        with:
          install_vm_deps: "build"
          save_cache: "true"
      - if: steps.cache-check.outputs.cache-hit != 'true'
        run: mise run microshift-vm:build

  adk-server-test-integration:
    name: mise adk-server:test:integration
    needs: [setup, microshift-vm-build]
    # Skip on fork PRs: secrets and vars (LLM_API_BASE, OPENAI_MODEL, etc.)
    # are not exposed to pull_request events from forks, so this job would
    # crash with `ValueError: '' is not a valid ModelProviderType` in
    # conftest.py before any test could run.
    if: >-
      always() &&
      needs.microshift-vm-build.result != 'failure' &&
      (github.event_name != 'pull_request' ||
      github.event.pull_request.head.repo.full_name == github.repository) &&
      (needs.setup.outputs.adk-server == 'true' ||
      needs.setup.outputs.adk-cli == 'true')
    timeout-minutes: 45
    runs-on: ubuntu-latest
    env:
      KAGENTI_ADK_HOME: ${{ github.workspace }}/.kagenti/adk
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - uses: ./.github/actions/setup
        with:
          maximize_space: "true"
          install_vm_deps: "run"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - run: mkdir -p "$KAGENTI_ADK_HOME"
      - name: Configure telepresence timeouts
        run: |
          mkdir -p "$HOME/.config/telepresence"
          printf '%s\n' \
            'timeouts:' \
            '  agentInstall: 5m' \
            '  intercept: 2m' \
            '  helm: 2m' \
            '  trafficManagerConnect: 2m' \
            > "$HOME/.config/telepresence/config.yml"
      - run: mise run adk-server:test:integration
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          LLM_API_BASE: "${{ secrets.OPENAI_API_BASE }}"
          LLM_MODEL: "${{ vars.OPENAI_MODEL }}"
          LLM_API_KEY: "${{ secrets.OPENAI_API_KEY }}"

  adk-server-test-e2e:
    name: mise adk-server:test:e2e
    needs: [setup, microshift-vm-build]
    # Skip on fork PRs: same secrets-and-vars limitation as
    # adk-server-test-integration above. Without LLM_MODEL the conftest
    # crashes; without OIDC_PROVIDER_* the adk-ui Deployment never goes
    # ready and the job times out at 25 minutes.
    if: >-
      always() &&
      needs.microshift-vm-build.result != 'failure' &&
      (github.event_name != 'pull_request' ||
      github.event.pull_request.head.repo.full_name == github.repository) &&
      (needs.setup.outputs.adk-server == 'true' ||
      needs.setup.outputs.adk-cli == 'true' ||
      needs.setup.outputs.adk-py == 'true' ||
      needs.setup.outputs.helm == 'true')
    timeout-minutes: 45
    runs-on: ubuntu-latest
    env:
      KAGENTI_ADK_HOME: ${{ github.workspace }}/.kagenti/adk
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - uses: ./.github/actions/setup
        with:
          maximize_space: "true"
          install_vm_deps: "run"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - run: mkdir -p "$KAGENTI_ADK_HOME"
      - run: mise run adk-server:test:e2e
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          LLM_API_BASE: "${{ secrets.OPENAI_API_BASE }}"
          LLM_MODEL: "${{ vars.OPENAI_MODEL }}"
          EMBEDDING_MODEL: "${{ vars.OPENAI_EMBEDDING_MODEL }}"
          LLM_API_KEY: "${{ secrets.OPENAI_API_KEY }}"

  adk-server-test-e2e-examples:
    name: mise adk-server:test:e2e-examples
    needs: [setup, microshift-vm-build]
    if: >-
      always() &&
      needs.microshift-vm-build.result != 'failure' &&
      (needs.setup.outputs.adk-server == 'true' ||
      needs.setup.outputs.adk-py == 'true' ||
      needs.setup.outputs.examples == 'true' ||
      needs.setup.outputs.helm == 'true') &&
      (github.event_name != 'pull_request' ||
      contains(github.event.pull_request.labels.*.name, 'e2e-examples'))
    timeout-minutes: 45
    runs-on: ubuntu-latest
    env:
      KAGENTI_ADK_HOME: ${{ github.workspace }}/.kagenti/adk
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - uses: ./.github/actions/setup
        with:
          maximize_space: "true"
          install_vm_deps: "run"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - run: mkdir -p "$KAGENTI_ADK_HOME"
      - run: mise run adk-server:test:e2e-examples
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          LLM_API_BASE: "${{ secrets.OPENAI_API_BASE }}"
          LLM_MODEL: "${{ vars.OPENAI_MODEL }}"
          EMBEDDING_MODEL: "${{ vars.OPENAI_EMBEDDING_MODEL }}"
          LLM_API_KEY: "${{ secrets.OPENAI_API_KEY }}"

  adk-py-test-all:
    name: "mise adk-py:test-all --python=${{ matrix.python }}"
    needs: setup
    if: needs.setup.outputs.adk-py == 'true'
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        python:
          - "3.11"
          - "3.14"
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - uses: ./.github/actions/setup
        with:
          install_vm_deps: "run"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - run: mise run adk-py:test-all --python=${{ matrix.python }}