1 files changed, 69 insertions, 0 deletions
diff --git a/src/fluent-bit/.github/workflows/pr-integration-test.yaml b/src/fluent-bit/.github/workflows/pr-integration-test.yaml
new file mode 100644
index 000000000..2b18b1c67
--- /dev/null
+++ b/src/fluent-bit/.github/workflows/pr-integration-test.yaml
@@ -0,0 +1,69 @@
+name: Build and run integration tests for PR
+on:
+  # We need write token for upload to GHCR and we are protecting with labels too.
+  pull_request_target:
+    branches:
+      - master
+    types:
+      - labeled
+      - opened
+      - reopened
+      - synchronize
+
+jobs:
+  pr-integration-test-build:
+    name: PR - integration build
+    # We only need to test this once as the rest are chained from it.
+    if: contains(github.event.pull_request.labels.*.name, 'ok-to-test')
+    uses: ./.github/workflows/call-integration-image-build.yaml
+    with:
+      ref: ${{ github.event.pull_request.head.sha }}
+      registry: ghcr.io
+      username: ${{ github.actor }}
+      image: ${{ github.repository }}/pr-${{ github.event.number }}
+      image-tag: ${{ github.sha }}
+      environment: integration
+    secrets:
+      token: ${{ secrets.GITHUB_TOKEN }}
+
+  pr-integration-test-build-complete:
+    name: PR - integration build complete
+    runs-on: ubuntu-latest
+    needs:
+      - pr-integration-test-build
+    steps:
+      - uses: actions-ecosystem/action-add-labels@v1
+        name: Label the PR
+        with:
+          labels: ci/integration-docker-ok
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          number: ${{ github.event.pull_request.number }}
+
+  pr-integration-test-run-integration:
+    name: PR - K8S integration test
+    needs:
+      - pr-integration-test-build
+    uses: ./.github/workflows/call-run-integration-test.yaml
+    with:
+      image_name: ghcr.io/${{ github.repository }}/pr-${{ github.event.pull_request.number }}
+      image_tag: ${{ github.sha }}
+    secrets:
+      opensearch_aws_access_id: ${{ secrets.OPENSEARCH_AWS_ACCESS_ID }}
+      opensearch_aws_secret_key: ${{ secrets.OPENSEARCH_AWS_SECRET_KEY }}
+      opensearch_admin_password: ${{ secrets.OPENSEARCH_ADMIN_PASSWORD }}
+      terraform_api_token: ${{ secrets.TF_API_TOKEN }}
+      gcp-service-account-key: ${{ secrets.GCP_SA_KEY }}
+
+  pr-integration-test-run-integration-post-label:
+    name: PR - integration test complete
+    runs-on: ubuntu-latest
+    needs:
+      - pr-integration-test-run-integration
+    steps:
+      - uses: actions-ecosystem/action-add-labels@v1
+        name: Label the PR
+        with:
+          labels: ci/integration-test-ok
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          number: ${{ github.event.pull_request.number }}
+          repo: fluent/fluent-bit