test-cloud-api.yml

name: Test Cloud API

on:
  # Run once a day
  schedule:
    - cron: '0 0 * * *'

  # Allow manual runs from the Actions tab
  workflow_dispatch:

  # Run on pull requests that touch the pyramid loader, its cloud
  # fixture, or the workflow itself. Kept path-filtered so a PR that
  # only edits, say, gene-pyramid code does not burn cloud API calls
  # and bill the two shared test accounts on every push.
  pull_request:
    paths:
      - 'src/ndi/pyramid/**'
      - 'tests/test_pyramid_loader_integration.py'
      - 'tests/fixtures/lightsheet_cloud_fixture.json'
      - 'tests/test_cloud_*.py'
      - '.github/workflows/test-cloud-api.yml'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  cloud-tests:
    name: Cloud API (User ${{ matrix.user }}, ${{ matrix.environment }})
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        user: [1, 2]
        environment: [prod, dev]

    steps:
      - uses: actions/checkout@v4

      - name: Set up Python 3.12
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Install with ndi_install.py
        run: |
          python -m pip install --upgrade pip
          python ndi_install.py --dev --no-validate --verbose

      - name: Run cloud API tests
        env:
          NDI_CLOUD_USERNAME: ${{ matrix.user == 1 && secrets.TEST_USER_1_USERNAME || secrets.TEST_USER_2_USERNAME }}
          NDI_CLOUD_PASSWORD: ${{ matrix.user == 1 && secrets.TEST_USER_1_PASSWORD || secrets.TEST_USER_2_PASSWORD }}
          CLOUD_API_ENVIRONMENT: ${{ matrix.environment }}
          # The MATLAB BYOL tests call DELETE /users/me/matlab-license, so
          # tests/_matlab_license_guard.py refuses to run unless this is set
          # explicitly. Neither test account has a registered license, so
          # the destructive tests run end-to-end and clean up after themselves.
          NDI_CLOUD_TEST_USER_HAS_MATLAB_LICENSE: "false"
        run: |
          # All live cloud test files, not just test_cloud_live.py -- the
          # others were previously exercised only by ci.yml, so they had no
          # coverage on days when nobody opened a PR.
          #
          # test_pyramid_loader_integration.py points at the permanent
          # lightsheet blob fixture (see tests/fixtures/lightsheet_cloud_fixture.json,
          # built by build-lightsheet-fixture.yml). It runs under the
          # same account-and-env matrix as the rest of the cloud tests.
          pytest tests/test_cloud_*.py tests/test_pyramid_loader_integration.py -v --tb=short