chore(ci): Run Drive web E2E on a Stack PR label

Author: shepilov

.github/workflows/drive-web-e2e.yml

@@ -0,0 +1,44 @@
+name: Drive web E2E
+run-name: 'Drive web E2E for PR #${{ github.event.pull_request.number }}'
+
+on:
+  pull_request:
+    types: [labeled]
+
+permissions:
+  contents: read
+
+# An unrelated label must not cancel an E2E run already in progress.
+concurrency:
+  group: drive-web-e2e-${{ github.event.pull_request.number }}-${{ github.event.label.name }}
+  cancel-in-progress: true
+
+jobs:
+  build:
+    if: >-
+      github.event.label.name == 'e2e:web' &&
+      github.event.pull_request.head.repo.full_name == github.repository
+    runs-on: ubuntu-22.04
+    outputs:
+      image: ${{ steps.image.outputs.image }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_SECRET }}
+      - name: Build and publish the PR image
+        id: image
+        env:
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+          PR_BRANCH: ${{ github.head_ref }}
+        run: scripts/docker/production/release.sh --pr "$PR_NUMBER" "$PR_BRANCH"
+
+  web:
+    needs: build
+    uses: linagora/twake-drive/.github/workflows/e2e.yml@master
+    with:
+      drive-ref: master
+      stack-image: ${{ needs.build.outputs.image }}

docs/testing.md

@@ -25,6 +25,21 @@ Keep Go tests near their packages and reuse `tests/testutils`. Keep useful Ruby
 coverage; replace brittle waits and shared state incrementally. Retire legacy
 scalability scripts only when their coverage has an identified replacement.
 
+## Drive web E2E on demand
+
+Add `e2e:web` to a same-repository PR to build its merge commit and call Drive's
+existing four-shard web E2E workflow. Remove and re-add the label to test a newer
+commit; pushes alone do not trigger it. Fork PRs are skipped.
+
+The existing release script publishes one mutable Docker Hub tag per PR, such
+as `cozy/cozy-stack:e2e-pr5119-chore-drive-web-e2e-label`, using the existing
+Docker Hub secrets. Rebuilds overwrite it; release tags and `latest` are unchanged.
+Tags are not automatically deleted. Use **Re-run all jobs** to rebuild the
+original revision, since rerunning only web jobs pulls the current tag.
+
+The [caller](../.github/workflows/drive-web-e2e.yml) runs Drive's `master` workflow
+against Drive's `master` branch. Scribe and desktop app tests are excluded.
+
 ## Load-test lifecycle
 
 ```mermaid

scripts/docker/production/release.sh

@@ -1,9 +1,25 @@
 #!/bin/bash
-set -xe
+set -xeuo pipefail
 
-RELEASE="$(git describe --tags)"
+if [[ $# == 0 ]]; then
+  RELEASE="$(git describe --tags)"
+elif [[ $# == 3 && "$1" == --pr && "$2" =~ ^[1-9][0-9]{0,9}$ ]]; then
+  branch=$(printf '%s' "$3" | LC_ALL=C tr '[:upper:]' '[:lower:]' | LC_ALL=C sed -E 's/[^a-z0-9_.-]+/-/g; s/^[._-]+//; s/[._-]+$//')
+  RELEASE="e2e-pr$2-${branch:-branch}"
+  RELEASE="${RELEASE:0:128}"
+else
+  echo "Usage: $0 [--pr NUMBER BRANCH]" >&2
+  exit 2
+fi
 
 docker build -t "cozy/cozy-stack:${RELEASE}" -f scripts/docker/production/Dockerfile .
 docker push "cozy/cozy-stack:${RELEASE}"
-docker tag "cozy/cozy-stack:${RELEASE}" "cozy/cozy-stack:latest"
-docker push "cozy/cozy-stack:latest"
+
+if [[ $# == 0 ]]; then
+  docker tag "cozy/cozy-stack:${RELEASE}" "cozy/cozy-stack:latest"
+  docker push "cozy/cozy-stack:latest"
+fi
+
+if [[ -n "${GITHUB_OUTPUT:-}" ]]; then
+  echo "image=cozy/cozy-stack:$RELEASE" >> "$GITHUB_OUTPUT"
+fi