CI: add api performance test

Do not add it to every PR or push for now, run it overnight
and if the label is set on a PR.
We don't know if the tests are flaky, and they need quite some resources.

Author: BacLuc

.github/workflows/api-performance-test.yml

@@ -0,0 +1,18 @@
+name: "Tests: API performance test"
+
+on:
+  workflow_dispatch:
+  pull_request:
+    types: [ opened, labeled, unlabeled, synchronize ]
+  schedule:
+    - cron: '51 4 * * *'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.ref_name }}
+  cancel-in-progress: false
+
+jobs:
+  api-performance-test:
+    name: 'API performance test'
+    if: contains(github.event.pull_request.labels.*.name, 'api-performance-test!') || github.event_name != 'pull_request'
+    uses: ./.github/workflows/reusable-api-performance-test.yml

.github/workflows/reusable-api-performance-test.yml

@@ -0,0 +1,68 @@
+name: '[reusable only] api performance tests'
+
+on:
+  workflow_call:
+    
+jobs:
+  api-performance-test:
+    name: 'Tests: API performance tests'
+    runs-on: ubuntu-latest
+    env:
+      TEST_DATABASE_URL: postgresql://ecamp3:ecamp3@localhost:5432/ecamp3test?serverVersion=15&charset=utf8
+
+    services:
+      postgres:
+        image: 'postgres:15-alpine'
+        env:
+          POSTGRES_DB: 'ecamp3test'
+          POSTGRES_PASSWORD: 'ecamp3'
+          POSTGRES_USER: 'ecamp3'
+        ports:
+          - '5432:5432'
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+
+    steps:
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+
+      - uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.3.2'
+          extensions: intl-73.1
+          tools: composer:2.7.0
+          coverage: pcov
+
+      - name: Get Composer Cache Directory
+        id: composer-cache
+        run: 'echo "dir=$(composer config cache-files-dir)" | tr -d "\n" >> $GITHUB_OUTPUT'
+        working-directory: api
+
+      - uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4
+        with:
+          path: ${{ steps.composer-cache.outputs.dir }}
+          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-composer-
+
+      - run: composer install --prefer-dist --no-progress --no-interaction
+        working-directory: api
+
+      - run: |
+          mkdir -p var/cache var/log
+          jwt_passphrase=${JWT_PASSPHRASE:-$(grep ''^JWT_PASSPHRASE='' .env | cut -f 2 -d ''='')}
+          echo "Generating public / private keys for JWT"
+          mkdir -p config/jwt
+          echo "$jwt_passphrase" | openssl genpkey -out config/jwt/private.pem -pass stdin -aes256 -algorithm rsa -pkeyopt rsa_keygen_bits:4096
+          echo "$jwt_passphrase" | openssl pkey -in config/jwt/private.pem -passin stdin -out config/jwt/public.pem -pubout
+          setfacl -R -m u:www-data:rX -m u:"$(whoami)":rwX config/jwt
+          setfacl -dR -m u:www-data:rX -m u:"$(whoami)":rwX config/jwt
+        working-directory: api
+
+      - run: php bin/console doctrine:migrations:migrate --no-interaction -e test
+        working-directory: api
+
+      - run: composer performance_test
+        working-directory: api