From 1d2d9044df168f004a87be06bfb98de4527a7325 Mon Sep 17 00:00:00 2001
From: Frostebite <jas.f.ukcmti@gmail.com>
Date: Sun, 7 Sep 2025 03:44:06 +0100
Subject: [PATCH] ci: add reusable cloud-runner-integrity workflow; wire into
 Integrity; disable legacy pipeline triggers

---
 .github/workflows/cloud-runner-integrity.yml | 44 ++++++++++++++------
 1 file changed, 31 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/cloud-runner-integrity.yml b/.github/workflows/cloud-runner-integrity.yml
index af95adc2..8a19d4b8 100644
--- a/.github/workflows/cloud-runner-integrity.yml
+++ b/.github/workflows/cloud-runner-integrity.yml
@@ -34,17 +34,35 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        test:
-          - 'cloud-runner-end2end-locking'
-          - 'cloud-runner-end2end-caching'
-          - 'cloud-runner-end2end-retaining'
-          - 'cloud-runner-caching'
-          - 'cloud-runner-environment'
-          - 'cloud-runner-image'
-          - 'cloud-runner-hooks'
-          - 'cloud-runner-local-persistence'
-          - 'cloud-runner-locking-core'
-          - 'cloud-runner-locking-get-locked'
+        include:
+          # Local Docker runs (fast path without cluster)
+          - test: 'cloud-runner-end2end-locking'
+            provider: local-docker
+          - test: 'cloud-runner-end2end-caching'
+            provider: local-docker
+          - test: 'cloud-runner-end2end-retaining'
+            provider: local-docker
+          - test: 'cloud-runner-caching'
+            provider: local-docker
+          - test: 'cloud-runner-environment'
+            provider: local-docker
+          - test: 'cloud-runner-image'
+            provider: local-docker
+          - test: 'cloud-runner-hooks'
+            provider: local-docker
+          - test: 'cloud-runner-local-persistence'
+            provider: local-docker
+          - test: 'cloud-runner-locking-core'
+            provider: local-docker
+          - test: 'cloud-runner-locking-get-locked'
+            provider: local-docker
+          # K8s runs (k3s)
+          - test: 'cloud-runner-end2end-caching'
+            provider: k8s
+          - test: 'cloud-runner-end2end-retaining'
+            provider: k8s
+          - test: 'cloud-runner-hooks'
+            provider: k8s
     steps:
       - uses: actions/checkout@v4
         with:
@@ -70,8 +88,8 @@ jobs:
           TARGET_PLATFORM: StandaloneWindows64
           cloudRunnerTests: true
           versioning: None
-          KUBE_STORAGE_CLASS: local-path
-          PROVIDER_STRATEGY: local-docker
+          KUBE_STORAGE_CLASS: ${{ matrix.provider == 'k8s' && 'local-path' || '' }}
+          PROVIDER_STRATEGY: ${{ matrix.provider }}
           AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
           AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
           GIT_PRIVATE_TOKEN: ${{ secrets.GIT_PRIVATE_TOKEN }}