chore: Adding TestReadTerragruntAuthProviderCmdRunAllCallCountWithRacing

Author: yhakbar

test/fixtures/auth-provider-cmd/run-all-call-count/.gitignore

@@ -0,0 +1 @@
+*.jsonl

test/fixtures/auth-provider-cmd/run-all-call-count/auth-provider.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+
+# Records each invocation as a JSON line in calls.jsonl in this script's
+# directory. Tests read calls.jsonl to assert how many times the
+# --auth-provider-cmd was invoked and the working directory of each call.
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+LOG_FILE="${SCRIPT_DIR}/calls.jsonl"
+
+# JSON escape: replace backslash and double-quote.
+escaped_pwd="${PWD//\\/\\\\}"
+escaped_pwd="${escaped_pwd//\"/\\\"}"
+
+ts="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+
+printf '{"ts":"%s","working_dir":"%s","pid":%d}\n' "$ts" "$escaped_pwd" "$$" >>"$LOG_FILE"
+
+printf '{"envs":{"AUTH_PROVIDER_CALL_COUNT_VAR":"ok"}}\n'

test/fixtures/auth-provider-cmd/run-all-call-count/dep/main.tf

@@ -0,0 +1,7 @@
+variable "name" {
+  type = string
+}
+
+output "value" {
+  value = "from-${var.name}"
+}

test/fixtures/auth-provider-cmd/run-all-call-count/dep/terragrunt.hcl

@@ -0,0 +1,7 @@
+include {
+  path = find_in_parent_folders("root.hcl")
+}
+
+inputs = {
+  name = "dep"
+}

test/fixtures/auth-provider-cmd/run-all-call-count/dependent/main.tf

@@ -0,0 +1,7 @@
+variable "upstream" {
+  type = string
+}
+
+output "value" {
+  value = var.upstream
+}

test/fixtures/auth-provider-cmd/run-all-call-count/dependent/terragrunt.hcl

@@ -0,0 +1,11 @@
+include {
+  path = find_in_parent_folders("root.hcl")
+}
+
+dependency "dep" {
+  config_path = "../dep"
+}
+
+inputs = {
+  upstream = dependency.dep.outputs.value
+}

test/fixtures/auth-provider-cmd/run-all-call-count/root.hcl

@@ -0,0 +1,10 @@
+remote_state {
+  backend = "local"
+  generate = {
+    path      = "backend.tf"
+    if_exists = "overwrite_terragrunt"
+  }
+  config = {
+    path = "${path_relative_to_include()}/terraform.tfstate"
+  }
+}

test/integration_test.go

@@ -3307,6 +3307,66 @@ func TestReadTerragruntAuthProviderCmdEnvInLocalsRunAll(t *testing.T) {
 	assert.Equal(t, "from-auth-provider", outputs["secret"].Value)
 }
 
+func TestReadTerragruntAuthProviderCmdRunAllCallCountWithRacing(t *testing.T) {
+	t.Parallel()
+
+	helpers.CleanupTerraformFolder(t, testFixtureAuthProviderCmd)
+	tmpEnvPath := helpers.CopyEnvironment(t, testFixtureAuthProviderCmd)
+	rootPath := filepath.Join(tmpEnvPath, testFixtureAuthProviderCmd, "run-all-call-count")
+	authProviderCmd := filepath.Join(rootPath, "auth-provider.sh")
+	logPath := filepath.Join(rootPath, "calls.jsonl")
+
+	helpers.ValidateAuthProviderScript(t, rootPath, authProviderCmd)
+	require.NoError(t, os.Remove(logPath), "auth-provider.sh should have created %s", logPath)
+
+	helpers.RunTerragrunt(
+		t,
+		fmt.Sprintf(
+			"terragrunt run --all apply --non-interactive "+
+				"--working-dir %s --auth-provider-cmd %s",
+			rootPath,
+			authProviderCmd,
+		),
+	)
+
+	logBytes, err := os.ReadFile(logPath)
+	require.NoError(t, err)
+
+	type authCall struct {
+		Timestamp  string `json:"ts"`
+		WorkingDir string `json:"working_dir"`
+		PID        int    `json:"pid"`
+	}
+
+	lines := strings.Split(strings.TrimRight(string(logBytes), "\n"), "\n")
+	calls := make([]authCall, 0, len(lines))
+
+	for i, line := range lines {
+		var call authCall
+
+		require.NoErrorf(t, json.Unmarshal([]byte(line), &call), "line %d: %q", i+1, line)
+
+		calls = append(calls, call)
+	}
+
+	t.Logf("auth-provider-cmd invocations:\n%s", string(logBytes))
+
+	// Five invocations are expected, in this order:
+	//
+	//   1. Discovery relationship phase parses `dep`.
+	//   2. Discovery relationship phase parses `dependent`.
+	//   3. Runner pool task parses `dep`for apply.
+	//   4. Runner pool task parses `dependent` for apply.
+	//   5. While `dependent`'s HCL is being decoded, the `dependency.dep`
+	//      block fetches `dep`'s outputs, which requires parsing `dep` again.
+	//
+	assert.Len(t, calls, 5)
+
+	for _, call := range calls {
+		assert.NotContains(t, call.WorkingDir, ".terragrunt-cache")
+	}
+}
+
 func TestIamRolesLoadingFromDifferentModules(t *testing.T) {
 	t.Parallel()