shankar0123 a2746c82a6 ci: per-vendor e2e matrix job; vendor failures surface independently ...

Phase 15 of the deploy-hardening II master bundle. Per frozen
decision 0.9: each vendor's e2e tests run in their own GitHub
Actions matrix job so vendor failures surface independently in
the CI status check.

NEW deploy-vendor-e2e job (ubuntu-latest):
- Matrix: nginx, apache, haproxy, traefik, caddy, envoy, postfix,
  dovecot, ssh, javakeystore, k8s, f5-mock
- Brings up the vendor's sidecar from
  docker-compose.test.yml::profiles=[deploy-e2e]
- Runs only that vendor's TestVendorEdge_<vendor>_* tests
- fail-fast: false so one vendor failure doesn't cancel the
  others (operator sees per-vendor pass/fail discretely)
- 30-minute timeout per matrix entry
- Tears down sidecar in always() step

NEW deploy-vendor-e2e-windows job (windows-latest):
- Matrix: iis, wincertstore
- Per frozen decision 0.4: Windows containers run only on Windows
  hosts; Linux runners CANNOT run the IIS sidecar.
- Operators on Linux-only CI use //go:build integration && !no_iis
  to skip these locally; CI's separate Windows runner job
  catches them.

Both jobs needs: [go-build-and-test] so the unit-test pipeline
must pass before the per-vendor matrix runs.

Test name pattern matches frozen decision 0.6:
TestVendorEdge_<vendor>_<edge>_E2E. The case statement in the
"Run vendor-edge e2e" step maps the matrix vendor name (lower-case)
to the Go test name's CamelCase prefix (NGINX, HAProxy,
JavaKeystore, etc.).

YAML parses clean (python3 yaml.safe_load).

Phase 16 next: release prep — Active Focus update, release notes,
reddit-beat, final tag handoff.

2026-04-30 16:18:47 +00:00

..

workflows

ci: per-vendor e2e matrix job; vendor failures surface independently

2026-04-30 16:18:47 +00:00