Global - Integration - AAD.yml

name: Global - Integration - AAD
on: [push]

jobs:
  Integration-Global-AAD:
    # The type of runner that the job will run on
    runs-on: windows-latest

    # Only when run from the main repo
    if: github.repository == 'microsoft/Microsoft365DSC'

    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v3
      - name: Install Microsoft365DSC
        shell: powershell
        run: |
          winrm quickconfig -force
          $source = "./Modules/Microsoft365DSC/"
          $destination = "C:\Program Files\WindowsPowerShell\Modules"
          Copy-Item -Path $source -Recurse -Destination $destination -Container -Force
          Update-M365DSCDependencies
      - name: Configure Environment
        shell: powershell
        run: |
          Set-ExecutionPolicy Unrestricted -Force
          Get-ChildItem "C:\Program Files\WindowsPowerShell\Modules" -Recurse | Unblock-File
          Set-M365DSCTelemetryOption -Enabled $false
          Set-Item -Path WSMan:\localhost\MaxEnvelopeSizekb -Value 99999
      - name: Generate {Create} Integration Tests from Examples
        shell: powershell
        run: |
          Import-Module './Tests/Integration/M365DSCTestEngine.psm1'
          New-M365DSCIntegrationTest -Workload AAD -Step '1-Create'
      - name: Commit {Create} Integration Tests
        shell: powershell
        run: |
          git config --local user.email "nicharl@microsoft.com"
          git config --local user.name "NikCharlebois"
          git add D:/a/Microsoft365DSC/Microsoft365DSC/Tests/Integration/*
          git pull
          git commit -m "Updated {Create} AAD Integration Tests"
          git push
          $SHA = git rev-parse HEAD
          echo "commitid=$SHA" >> $env:GITHUB_OUTPUT
      - name: Run {Create} Integration Tests
        shell: powershell
        env:
          INTEGRATION_USERNAME: ${{ secrets.INTEGRATION_USERNAME }}
          INTEGRATION_PASSWORD: ${{ secrets.INTEGRATION_PASSWORD }}
        run: |
          $CredPassword = ConvertTo-SecureString $env:INTEGRATION_PASSWORD -AsPlainText -Force
          $Credential = New-Object System.Management.Automation.PSCredential ($env:INTEGRATION_USERNAME, $CredPassword)
          try
          {
            & .\Tests\Integration\Microsoft365DSC\M365DSCIntegration.AAD.Create.Tests.ps1 -Credential $Credential
          }
          catch
          {
            throw $_
          }

          try
          {
            $Result = Test-DSCConfiguration -Detailed -Verbose
          }
          catch
          {
            throw $_
          }

          if ($Result.InDesiredState -eq $false)
          {
            Write-Host -Message "Resources below are not in the Desired State:"
            foreach ($Resource in $Result.ResourcesNotInDesiredState)
            {
                Write-Host $Resource.InstanceName
            }

            throw "Could not validate that the Tenant is in the Desired State"
          }
          else
          {
            Write-Host "All resources in the Tenant are in the Desired State"
          }