WT-334 - Build CMS Components For Advertising Pages - Part 4

.github/workflows/integration_tests.yml

@@ -9,19 +9,25 @@ on:
   workflow_dispatch:
     inputs:
       branch:
-        description: The branch of mozilla/bedrock we're testing against - main|stage|prod|run-integration-tests
+        description: The branch of mozilla/bedrock to test against - main|stage|prod|run-integration-tests
         required: true
       git_sha:
         description: The git SHA just deployed to the service we want to test
         required: true
       mozorg_service_hostname:
         description: The root URL of the Mozorg service to run tests against
         required: true
+
+permissions:
+  contents: read
+
 jobs:
   notify-of-test-run-start:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
+        with:
+          sparse-checkout: .github/actions/slack
       - name: Notify via Slack that tests are starting
         uses: ./.github/actions/slack
         with:
@@ -36,7 +42,6 @@ jobs:
   integration-tests:
     if: always()
     runs-on: ubuntu-latest
-    needs: notify-of-test-run-start
     strategy:
       matrix:
         include:
@@ -70,7 +75,7 @@ jobs:
       - name: Fetch codebase
         if: always()
         uses: actions/checkout@v5
-      - name: Sets specific env vars IF we're on testing against dev/main only
+      - name: Sets specific env vars IF testing against dev/main only
         if: ${{ github.event.inputs.branch == 'main'}}
         run: |
           echo "BOUNCER_URL=https://bouncer-bouncer.stage.mozaws.net/" >> $GITHUB_ENV
@@ -96,7 +101,6 @@ jobs:
   playwright-tests:
     if: always()
     runs-on: ubuntu-latest
-    needs: [notify-of-test-run-start]
     env:
       PLAYWRIGHT_BASE_URL: ${{ github.event.inputs.mozorg_service_hostname }}
       CI: true
@@ -123,6 +127,8 @@ jobs:
     needs: [integration-tests, playwright-tests]
     steps:
       - uses: actions/checkout@v5
+        with:
+          sparse-checkout: .github/actions/slack
       - name: Notify via Slack of test-run success
         if: ${{ needs.integration-tests.result == 'success' && needs.playwright-tests.result == 'success' }}
         uses: ./.github/actions/slack

.github/workflows/post_deploy_asset_check.yml

@@ -0,0 +1,102 @@
+name: Post-deploy asset check
+
+run-name: Asset check for ${{ inputs.branch }} @ ${{ inputs.git_sha }}
+env:
+  SLACK_CHANNEL_ID: CBX0KH5GA # #www-notify in MoCo Slack
+  SLACK_BOT_TOKEN: ${{secrets.SLACK_BOT_TOKEN_FOR_MEAO_NOTIFICATIONS_APP}}
+on:
+  workflow_dispatch:
+    inputs:
+      branch:
+        description: Branch of mozilla/bedrock that was deployed (eg. main|stage|prod)
+        required: true
+      git_sha:
+        description: Git SHA that was deployed
+        required: true
+      origin_hostname:
+        description: Fully qualified base URL for the origin server
+        required: true
+      cdn_hostname:
+        description: Fully qualified base URL for the CDN (eg. https://www.mozilla.org)
+        required: true
+
+jobs:
+  notify-of-checks-start:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          sparse-checkout: |
+            .github/actions/slack
+      - name: Notify via Slack that tests are starting
+        uses: ./.github/actions/slack
+        with:
+          channel_id: ${{ env.SLACK_CHANNEL_ID }}
+          env_name: test
+          label: "Static-assets check for [${{ inputs.git_sha }}]"
+          message: "Static-assets check started"
+          ref: ${{ inputs.branch }}
+          slack_bot_token: ${{ env.SLACK_BOT_TOKEN }}
+          status: info
+
+  asset-check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Pull release image
+        run: docker pull mozmeao/bedrock:${{ inputs.git_sha }}
+
+      - name: Verify deployed assets are available
+        env:
+          GIT_SHA: ${{ inputs.git_sha }}
+          ORIGIN_HOSTNAME: ${{ inputs.origin_hostname }}
+          CDN_HOSTNAME: ${{ inputs.cdn_hostname }}
+        run: |
+          docker run --rm \
+            mozmeao/bedrock:$GIT_SHA \
+            python manage.py check_static_assets \
+              --origin-host "$ORIGIN_HOSTNAME" \
+              --cdn-host "$CDN_HOSTNAME" \
+              --manifest-path static/staticfiles.json
+
+  notify-of-checks-completion:
+    if: always()
+    runs-on: ubuntu-latest
+    needs: [asset-check]
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          sparse-checkout: |
+            .github/actions/slack
+      - name: Notify via Slack of test-run success
+        if: ${{ needs.asset-check.result == 'success' }}
+        uses: ./.github/actions/slack
+        with:
+          channel_id: ${{ env.SLACK_CHANNEL_ID }}
+          env_name: test
+          label: "Static-assets checks for [${{ inputs.git_sha }}]"
+          message: "Static-assets check completed. Status: success"
+          ref: ${{ inputs.branch }}
+          slack_bot_token: ${{ env.SLACK_BOT_TOKEN }}
+          status: "success"
+      - name: Notify via Slack of test-run failure
+        if: ${{ needs.asset-check.result == 'failure' }}
+        uses: ./.github/actions/slack
+        with:
+          channel_id: ${{ env.SLACK_CHANNEL_ID }}
+          env_name: test
+          label: "Static-assets checks for [${{ inputs.git_sha }}]"
+          message: "Static-assets check completed. Status: failure"
+          ref: ${{ inputs.branch }}
+          slack_bot_token: ${{ env.SLACK_BOT_TOKEN }}
+          status: "failure"
+      - name: Notify via Slack of test-run cancelled
+        if: ${{ needs.asset-check.result == 'cancelled' }}
+        uses: ./.github/actions/slack
+        with:
+          env_name: test
+          label: "Static-assets checks for [${{ inputs.git_sha }}]"
+          status: "cancelled"
+          channel_id: ${{ env.SLACK_CHANNEL_ID }}
+          slack_bot_token: ${{ env.SLACK_BOT_TOKEN }}
+          ref: ${{ inputs.branch }}
+          message: "Static-assets check completed. Status: cancelled"

.github/workflows/pull_request_tests.yml → .github/workflows/unit_tests.yml

@@ -9,18 +9,18 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   test-js:
     runs-on: ubuntu-latest
     steps:
-      - name: "Install framebuffer (xvfb) and Chromium"
-        run: |
-          sudo apt-get update
-          sudo apt-get install chromium-browser xvfb
       - uses: actions/checkout@v5
       - uses: actions/setup-node@v4
         with:
           node-version: 20
+          cache: npm
       - name: "Install JS dependencies"
         run: npm ci
       - name: "Run JS tests"