From f4d46125f802044b528b293611bd44bd9677b570 Mon Sep 17 00:00:00 2001
From: Frostebite <jas.f.ukcmti@gmail.com>
Date: Sun, 7 Sep 2025 03:50:06 +0100
Subject: [PATCH] ci: add reusable cloud-runner-integrity workflow; wire into
 Integrity; disable legacy pipeline triggers

---
 .github/workflows/cloud-runner-integrity.yml | 21 ++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/.github/workflows/cloud-runner-integrity.yml b/.github/workflows/cloud-runner-integrity.yml
index 8a19d4b8..9beae513 100644
--- a/.github/workflows/cloud-runner-integrity.yml
+++ b/.github/workflows/cloud-runner-integrity.yml
@@ -67,6 +67,27 @@ jobs:
       - uses: actions/checkout@v4
         with:
           lfs: false
+      # Set up Kubernetes (k3s via k3d) only for k8s matrix entries
+      - name: Set up kubectl
+        if: ${{ matrix.provider == 'k8s' }}
+        uses: azure/setup-kubectl@v4
+        with:
+          version: 'v1.29.0'
+      - name: Install k3d
+        if: ${{ matrix.provider == 'k8s' }}
+        run: |
+          curl -s https://raw.githubusercontent.com/k3d-io/k3d/main/install.sh | bash
+          k3d version | cat
+      - name: Create k3s cluster (k3d)
+        if: ${{ matrix.provider == 'k8s' }}
+        run: |
+          k3d cluster create unity-builder --agents 1 --wait
+          kubectl config current-context | cat
+      - name: Verify cluster readiness
+        if: ${{ matrix.provider == 'k8s' }}
+        run: |
+          for i in {1..60}; do kubectl get nodes && break || sleep 5; done
+          kubectl get storageclass
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@v1
         with: