From bda718ffc033220eb68469ef99e1aab2b0914eb3 Mon Sep 17 00:00:00 2001
From: Jan Calanog <jan.calanog@elastic.co>
Date: Mon, 29 Jan 2024 21:32:04 +0100
Subject: [PATCH] Add PR review comment command (#1960)

* Add PR review comment command

* Add to README.md

* Update .github/workflows/README.md

Co-authored-by: Victor Martinez <victormartinezrubio@gmail.com>

* Update .github/workflows/test.yml

---------

Co-authored-by: Victor Martinez <victormartinezrubio@gmail.com>
---
 .github/workflows/README.md          |  1 +
 .github/workflows/matrix-command.yml | 49 ++++++++++++++++++++++++++++
 .github/workflows/test.yml           | 23 ++++++++++---
 3 files changed, 69 insertions(+), 4 deletions(-)
 create mode 100644 .github/workflows/matrix-command.yml

diff --git a/.github/workflows/README.md b/.github/workflows/README.md
index 3cdfe70f0..c224d62b8 100644
--- a/.github/workflows/README.md
+++ b/.github/workflows/README.md
@@ -39,6 +39,7 @@ Once a PR has been opened then there are two different ways you can trigger buil
 
 1. Commit based
 1. UI based, any Elasticians can force a build through the GitHub UI
+1. PR review comment-based, any Elastic employees can force a full matrix test run through a PR review comment with the following syntax: `/test matrix`.
 
 #### Branches
 
diff --git a/.github/workflows/matrix-command.yml b/.github/workflows/matrix-command.yml
new file mode 100644
index 000000000..f2c32658f
--- /dev/null
+++ b/.github/workflows/matrix-command.yml
@@ -0,0 +1,49 @@
+name: matrix-command
+
+on:
+  pull_request_review:
+    types:
+      - submitted
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+permissions:
+  contents: read
+
+jobs:
+  command-validation:
+    if: startsWith(github.event.review.body, '/test matrix')
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      pull-requests: write
+    steps:
+      - name: Is comment allowed?
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const actorPermission = (await github.rest.repos.getCollaboratorPermissionLevel({
+              ...context.repo,
+              username: context.actor
+            })).data.permission
+            const isPermitted = ['write', 'admin'].includes(actorPermission)
+            if (!isPermitted) {
+              const errorMessage = 'Only users with write permission to the repository can run GitHub commands'
+              await github.rest.issues.createComment({
+                ...context.repo,
+                issue_number: context.issue.number,
+                body: errorMessage,
+              })
+              core.setFailed(errorMessage)
+              return
+            }
+
+  test:
+    needs:
+      - command-validation
+    uses: ./.github/workflows/test.yml
+    with:
+      full-matrix: true
+      ref: ${{ github.event.pull_request.head.sha }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 7fab3fb26..b57b8a023 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,7 +1,16 @@
 name: test # The name must be the same as in test-docs.yml
 
 on:
-  workflow_call: ~
+  workflow_call:
+    inputs:
+      full-matrix:
+        description: "Run the full matrix"
+        required: true
+        type: boolean
+      ref:
+        description: "The git ref of elastic/apm-agent-python to run test workflow from."
+        required: false
+        type: string
   pull_request:
     paths-ignore:
       - "**/*.md"
@@ -32,7 +41,9 @@ jobs:
       data: ${{ steps.split.outputs.data }}
       chunks: ${{ steps.split.outputs.chunks }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
       - id: generate
         uses: elastic/apm-pipeline-library/.github/actions/version-framework@current
         with:
@@ -113,7 +124,9 @@ jobs:
       FRAMEWORK: ${{ matrix.framework }}
       ASYNCIO: ${{ matrix.asyncio }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
       - uses: actions/setup-python@v4
         with:
           python-version: ${{ matrix.version }}
@@ -168,7 +181,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ inputs.ref || github.ref }}
 
       - uses: actions/setup-python@v4
         with: