go-tfe relies on acceptance tests against either the HCP Terraform and Terraform Enterprise APIs. go-tfe is tested against HCP Terraform by our CI environment, and against Terraform Enterprise prior to release or otherwise as needed.
If you are planning to run the full suite of tests or work on policy sets or registry modules, you'll need to set up repositories for them in GitHub.
Your policy set repository will need the following:
- A policy set stored in a subdirectory
policy-sets/foo
- A branch other than
main
namedpolicies
Alternatively, you can start with this example repository for policy sets by forking the repository to your GitHub account, then setting GITHUB_POLICY_SET_IDENTIFIER
to the forked repository identifier your-github-handle/test-policy-set
.
Your registry module repository will need to be a valid module. It will need the following:
- To be named
terraform-<PROVIDER>-<NAME>
- At least one valid SemVer tag in the format
x.y.z
terraform-random-module is a good example repo.
You'll need to have environment variables setup in your environment to run the tests. There are different options to facilitate setting up environment variables, using the tool envchain is one option:
-
Install envchain - refer to the envchain README for details
-
Run the script
./scripts/setup-test-envvars.sh
to setup the env vars. This script uses envchain, will use a default namespace ofgo-tfe
and will prompt you for environment variable values. To run:sh ./scripts/setup-test-envvars.sh
-
Or manually, pick a namespace for storing your environment variables, such as:
go-tfe
. Then, for each environment variable you need to set, run the following command:envchain --set YOUR_NAMESPACE_HERE ENVIRONMENT_VARIABLE_HERE
OR
Set all of the environment variables at once with the following command:
envchain --set YOUR_NAMESPACE_HERE TFE_ADDRESS TFE_TOKEN OAUTH_CLIENT_GITHUB_TOKEN GITHUB_POLICY_SET_IDENTIFIER
Tests are run against an actual backend so they require a valid backend address and token:
TFE_ADDRESS
- URL of a HCP Terraform or Terraform Enterprise instance to be used for testing, including scheme. Example:https://tfe.local
TFE_TOKEN
- A user API token for the HCP Terraform or Terraform Enterprise instance being used for testing.
Note: Alternatively, you can set TFE_HOSTNAME
which serves as a fallback for TFE_ADDRESS
. It will only be used if TFE_ADDRESS
is not set and will resolve the host to an https
scheme. Example: tfe.local
=> resolves to https://tfe.local
OAUTH_CLIENT_GITHUB_TOKEN
- GitHub personal access token. Required for running any tests that use VCS (OAuth clients, policy sets, etc).GITHUB_POLICY_SET_IDENTIFIER
- GitHub policy set repository identifier in the formatusername/repository
. Required for running policy set tests.GITHUB_REGISTRY_MODULE_IDENTIFIER
- GitHub registry module repository identifier in the formatusername/repository
. Required for running registry module tests.ENABLE_TFE
- Some tests are only applicable to Terraform Enterprise or HCP Terraforrm. By settingENABLE_TFE=1
you will enable Terraform Enterprise only tests and disable HCP Terraform only tests. In CIENABLE_TFE
is not set so if you are writing enterprise only features you should manually test withENABLE_TFE=1
against a Terraform Enterprise instance.ENABLE_BETA
- Some tests require access to beta features. By settingENABLE_BETA=1
you will enable tests that require access to beta features. IN CIENABLE_BETA
is not set so if you are writing beta only features you should manually test withENABLE_BETA=1
against a Terraform Enterprise instance with those features enabled.TFC_RUN_TASK_URL
- Run task integration tests require a URL to use when creating run tasks. To learn more about the Run Task API, read hereGITHUB_APP_INSTALLATION_ID
- Required for running any tests that use GitHub App as the VCS provider (workspace, policy sets, registry module). These tests are skipped in the automated CI pipeline because in order to use this variable, the user has to have a GitHub App Installation setup done using the HCP Terraform UI. And then the value can be fetched either from the UI or from theGET /github-app/installations
API. The test command is listed below.$ GITHUB_APP_INSTALLATION_ID=ghain-xxxx TFE_ADDRESS= https://tfe.local TFE_TOKEN=xxx GITHUB_POLICY_SET_IDENTIFIER=username/repository GITHUB_REGISTRY_MODULE_IDENTIFIER=username/repository go test -run "(GHA|GithubApp)" -v ./...
GITHUB_REGISTRY_NO_CODE_MODULE_IDENTIFIER
- Required for running tests for workspaces using no-code modules.
In order for the tests relating to queuing and capacity to pass, FRQ (fair run queuing) should be enabled with a limit of 2 concurrent runs per organization on the HCP Terraform or Terraform Enterprise instance you are using for testing.
For most situations, it's recommended to run specific tests because it takes about 20 minutes to run all of the tests.
Typically, you'll want to run specific tests. The commands below use notification configurations as an example.
$ envchain YOUR_NAMESPACE_HERE go test -run TestNotificationConfiguration -v ./...
$ TFE_TOKEN=xyz TFE_ADDRESS=https://tfe.local ENABLE_TFE=1 go test -run TestNotificationConfiguration -v ./...
$ TFE_TOKEN=xyz TFE_HOSTNAME=tfe.local ENABLE_TFE=1 go test -run TestNotificationConfiguration -v ./...
TFE_TOKEN=xyz TFE_ADDRESS=https://tfe.local TESTARGS="-run TestNotificationConfiguration" make test
It takes about 20 minutes to run all of the tests, so specify a larger timeout when you run the tests (the default timeout is 10 minutes):
$ envchain YOUR_NAMESPACE_HERE go test ./... -timeout=30m
$ TFE_TOKEN=xyz TFE_ADDRESS=https://tfe.local ENABLE_TFE=1 go test ./... -timeout=30m
$ TFE_TOKEN=xyz TFE_HOSTNAME=tfe.local ENABLE_TFE=1 go test ./... -timeout=30m
You can use the test helper newSubscriptionUpdater()
to upgrade your test organization to a Business Plan, giving the organization access to all features in HCP Terraform. This method requires TFE_TOKEN
to be a user token with administrator access in the target test environment. Furthermore, you can not have enterprise features enabled (ENABLE_TFE=1
) in order to use this method since the API call fails against Terraform Enterprise test environments.