Buildkite pipeline for acceptance tests

.buildkite/acceptance.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+set -euo pipefail
+
+echo "--- Download dependencies"
+make vendor
+
+echo "--- Run acceptance tests"
+EC_API_KEY=$TERRAFORM_PROVIDER_API_KEY_SECRET make testacc

.buildkite/hooks/pre-command

@@ -0,0 +1,15 @@
+#!/bin/bash
+
+set -euo pipefail
+
+#Mimic Jenkins behavior during the migration
+export BUILD_ID=$BUILDKITE_BUILD_ID
+
+VAULT_PATH=secret/ci/elastic-terraform-provider-ec/terraform-provider-secrets
+
+# Secrets must be redacted
+# https://buildkite.com/docs/pipelines/managing-log-output#redacted-environment-variables
+
+if [[ "$BUILDKITE_PIPELINE_SLUG" == "terraform-provider-ec" ]]; then
+  export TERRAFORM_PROVIDER_API_KEY_SECRET=$(scripts/retry.sh 5 vault kv get -field apikey ${VAULT_PATH})
+fi

.buildkite/hooks/pre-exit

@@ -0,0 +1,9 @@
+#!/bin/bash
+
+set -euo pipefail
+
+if  [[ "$BUILDKITE_STEP_KEY" == "acceptance-tests" ]]; then
+  echo "--- Sweeps any deployments older than 1h."
+  EC_API_KEY=$TERRAFORM_PROVIDER_API_KEY_SECRET SWEEPARGS=-sweep-run=ec_deployments make sweep
+  rm -rf reports bin
+fi

.buildkite/pipeline.yml

@@ -1,3 +1,7 @@
 steps:
-  - label: ":wave: Greetings"
-    command: "echo 'My first pipeline!'"
+  - label: ":test_tube: Acceptance tests"
+    command: .buildkite/acceptance.sh
+    agents:
+      image: "docker.io/library/golang:1.21"
+      cpu: "8"
+      memory: "4G"

catalog-info.yaml

@@ -3,8 +3,8 @@
 apiVersion: backstage.io/v1alpha1
 kind: Resource
 metadata:
-  name: buildkite-pipeline-terraform-provider-ec
-  description: Buildkite Pipeline for terraform-provider-ec
+  name: buildkite-pipeline-terraform-provider-ec-acceptance
+  description: Buildkite Pipeline for terraform-provider-ec acceptance tests
   links:
     - title: Pipeline
       url: https://buildkite.com/elastic/terraform-provider-ec
@@ -17,7 +17,18 @@ spec:
     apiVersion: buildkite.elastic.dev/v1
     kind: Pipeline
     metadata:
-      name: terraform-provider-ec
+      name: terraform-provider-ec-acceptance
     spec:
       repository: elastic/terraform-provider-ec
       pipeline_file: ".buildkite/pipeline.yml"
+      teams:
+        control-plane-stateful:
+          access_level: MANAGE_BUILD_AND_READ
+        cloud-applications-es:
+          access_level: MANAGE_BUILD_AND_READ
+        cloud-applications-solutions:
+          access_level: MANAGE_BUILD_AND_READ
+        platform-writers:
+          access_level: BUILD_AND_READ
+        everyone:
+          access_level: READ_ONLY