oura 2.2.0

The tail of Cardano
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134

on:
  workflow_dispatch: {}

name: e2e

env:
  REGISTRY: ghcr.io
  TARGET_IMAGE: ghcr.io/txpipe/oura-e2e:${{ github.sha }}

jobs:
  build:
    # Pin to 22.04 (glibc 2.35) to match docker.yml: a binary built on 24.04
    # links GLIBC_2.39, which the debian:12-slim runtime image (glibc 2.36)
    # can't satisfy.
    runs-on: ubuntu-22.04
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      # Build the binary and image the same way docker.yml does, so e2e
      # exercises the production image (.github/image/Dockerfile) rather than a
      # separate from-source build. e2e only runs on linux/amd64, so we build
      # just that target.
      - name: Install Rust toolchain
        run: rustup show active-toolchain || rustup toolchain install

      - name: Install Protoc
        uses: arduino/setup-protoc@v3
        with:
          repo-token: ${{ secrets.GITHUB_TOKEN }}

      - uses: Swatinem/rust-cache@v2
        with:
          # Share the cache the docker.yml build populates from main so e2e
          # dispatches restore a warm cache instead of compiling cold.
          shared-key: docker-x86_64-unknown-linux-gnu

      - name: Run cargo build
        run: cargo build --target x86_64-unknown-linux-gnu --all-features --locked --release

      - name: Stage binary for image
        run: |
          mkdir -p .github/image/bin
          mv target/x86_64-unknown-linux-gnu/release/oura .github/image/bin/oura-Linux-amd64

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to GHCR
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: .github/image
          platforms: linux/amd64
          push: true
          tags: ${{ env.TARGET_IMAGE }}

  test:
    needs: ["build"]
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: read
      id-token: write # mint the GitHub OIDC token for AWS role assumption
    strategy:
      fail-fast: false
      matrix:
        include:
          - name: assert-n2n-mainnet-origin-blocks
            kind: n2n
          - name: assert-n2n-mainnet-tip-blocks
            kind: n2n
          - name: assert-n2n-preview-origin-blocks
            kind: n2n
          - name: assert-n2n-preview-tip-blocks
            kind: n2n
          - name: aws-lambda-10-blocks
            kind: aws
          - name: aws-s3-500-blocks
            kind: aws
          - name: aws-sqs-10-blocks
            kind: aws
          - name: u5c-mainnet-tip-blocks
            kind: u5c
          - name: u5c-preprod-tip-blocks
            kind: u5c
          - name: u5c-preview-tip-blocks
            kind: u5c

    steps:
      - uses: actions/checkout@v4

      - name: Login to GHCR
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Pull image
        run: docker pull "$TARGET_IMAGE"

      # --- AWS credentials (s3 / sqs / lambda sinks) ---------------------------
      # Keyless via GitHub OIDC: the runner mints an OIDC token and assumes
      # OuraE2ETest with AssumeRoleWithWebIdentity (no static secrets). Requires
      # an IAM OIDC provider for token.actions.githubusercontent.com and a trust
      # policy on OuraE2ETest allowing this repo.
      - name: Configure AWS credentials
        if: matrix.kind == 'aws'
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-region: us-west-2
          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/OuraE2ETest
          role-session-name: Github-e2e-Rollout
          role-duration-seconds: 3600

      - name: Run ${{ matrix.name }}
        env:
          TEST_NAME: ${{ matrix.name }}
          GITHUB_RUN_NUMBER: ${{ github.run_number }}
          # utxorpc (u5c) legs resolve their dmtr-api-key from these via envsubst;
          # empty/unused for the other kinds.
          DMTR_UTXORPC_KEY_MAINNET: ${{ secrets.DMTR_UTXORPC_KEY_MAINNET }}
          DMTR_UTXORPC_KEY_PREPROD: ${{ secrets.DMTR_UTXORPC_KEY_PREPROD }}
          DMTR_UTXORPC_KEY_PREVIEW: ${{ secrets.DMTR_UTXORPC_KEY_PREVIEW }}
        run: .github/e2e/scripts/run-test.sh