Add kernel_deployment data source

.github/workflows/acceptance.yml

@@ -11,22 +11,76 @@ concurrency:
   cancel-in-progress: false
 
 jobs:
-  browser-pool:
-    name: Browser pool acceptance
+  durable-resource:
+    name: ${{ matrix.name }} acceptance
     runs-on: ubuntu-latest
-    # Keep the job timeout above the go test -timeout below: the job budget
-    # also covers checkout/toolchain setup, and if it fires first it kills the
-    # test process before t.Cleanup can delete the pools it created.
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - name: Browser pool
+            package: ./internal/resources/browserpool
+            project_id_required: true
+          - name: Browser pool data source
+            package: ./internal/datasources/browserpool
+            project_id_required: true
+          - name: Project
+            package: ./internal/resources/project
+            project_id_required: false
+          - name: Project data source
+            package: ./internal/datasources/project
+            project_id_required: true
+          - name: Extension
+            package: ./internal/resources/extension
+            project_id_required: true
+          - name: Extension data source
+            package: ./internal/datasources/extension
+            project_id_required: true
+          - name: Profile data source
+            package: ./internal/datasources/profile
+            project_id_required: true
+          - name: Proxy data source
+            package: ./internal/datasources/proxy
+            project_id_required: true
+          - name: App data source
+            package: ./internal/datasources/app
+            project_id_required: true
+            app_fixture_required: true
+          - name: Deployment data source
+            package: ./internal/datasources/deployment
+            project_id_required: true
+            app_fixture_required: true
+    # Keep the job timeout above the go test timeout so Go can report the test
+    # timeout before the runner stops the job. Either hard timeout can bypass
+    # t.Cleanup, so release operators still inspect for leaked test resources.
     timeout-minutes: 40
     env:
       TF_ACC: "1"
       KERNEL_ACC: "1"
-      KERNEL_API_KEY: ${{ secrets.KERNEL_API_KEY }}
-      KERNEL_PROJECT_ID: ${{ secrets.KERNEL_PROJECT_ID }}
-      KERNEL_ALT_PROJECT_ID: ${{ secrets.KERNEL_ALT_PROJECT_ID }}
-      KERNEL_BASE_URL: ${{ secrets.KERNEL_BASE_URL }}
 
     steps:
+      - name: Check API key secret
+        env:
+          KERNEL_API_KEY: ${{ secrets.KERNEL_API_KEY }}
+        run: |
+          : "${KERNEL_API_KEY:?Set the KERNEL_API_KEY repository secret before running acceptance tests.}"
+
+      - name: Check project secret
+        if: matrix.project_id_required
+        env:
+          KERNEL_PROJECT_ID: ${{ secrets.KERNEL_PROJECT_ID }}
+        run: |
+          : "${KERNEL_PROJECT_ID:?Set the KERNEL_PROJECT_ID repository secret before running project-scoped acceptance tests.}"
+
+      - name: Check app fixture variables
+        if: matrix.app_fixture_required
+        env:
+          KERNEL_ACC_APP_NAME: ${{ vars.KERNEL_ACC_APP_NAME }}
+          KERNEL_ACC_APP_VERSION: ${{ vars.KERNEL_ACC_APP_VERSION }}
+        run: |
+          : "${KERNEL_ACC_APP_NAME:?Set the KERNEL_ACC_APP_NAME repository variable to the release-owned running app fixture.}"
+          : "${KERNEL_ACC_APP_VERSION:?Set the KERNEL_ACC_APP_VERSION repository variable to the release-owned running app fixture.}"
+
       - name: Checkout
         uses: actions/checkout@v6
 
@@ -42,10 +96,12 @@ jobs:
           terraform_version: "1.15.5"
           terraform_wrapper: false
 
-      - name: Check required secrets
-        run: |
-          : "${KERNEL_API_KEY:?Set the KERNEL_API_KEY repository secret before running acceptance tests.}"
-          : "${KERNEL_PROJECT_ID:?Set the KERNEL_PROJECT_ID repository secret before running acceptance tests.}"
-
-      - name: Run browser pool acceptance tests
-        run: go test -count=1 -timeout=30m -v ./internal/resources/browserpool -run TestAcc
+      - name: Run acceptance tests
+        env:
+          KERNEL_API_KEY: ${{ secrets.KERNEL_API_KEY }}
+          KERNEL_BASE_URL: ${{ secrets.KERNEL_BASE_URL }}
+          KERNEL_PROJECT_ID: ${{ matrix.project_id_required && secrets.KERNEL_PROJECT_ID || '' }}
+          KERNEL_ALT_PROJECT_ID: ${{ matrix.project_id_required && secrets.KERNEL_ALT_PROJECT_ID || '' }}
+          KERNEL_ACC_APP_NAME: ${{ matrix.app_fixture_required && vars.KERNEL_ACC_APP_NAME || '' }}
+          KERNEL_ACC_APP_VERSION: ${{ matrix.app_fixture_required && vars.KERNEL_ACC_APP_VERSION || '' }}
+        run: go test -count=1 -timeout=30m -v ${{ matrix.package }} -run TestAcc

.github/workflows/ci.yml

@@ -54,5 +54,17 @@ jobs:
       - name: Vet
         run: go vet ./...
 
+      - name: Set up GoReleaser
+        uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7.2.2
+        with:
+          distribution: goreleaser
+          version: v2.17.0
+          install-only: true
+
+      - name: Check release configuration
+        run: |
+          goreleaser check
+          jq -e '.version == 1 and .metadata.protocol_versions == ["6.0"]' terraform-registry-manifest.json
+
       - name: Check generated docs
         run: bash scripts/check-docs.sh