constellation/.github/workflows/e2e-test-release.yml

name: e2e test release
# This workflow is not integrated with e2e-test-weekly since we want different tests to run during weekly and release testing.
# To integrate both tests we would need to pass executed tests as arguments.
# Defining the executed tests is currently the main point of the e2e-test-weekly workflow.
# e2e-test-release runs the same tests as e2e-test-weekly except:
# - any tests on the last release
# - loadbalancer tests for AWS. Test test is currently broken and should not block a release. AB#2780.
#
# The workflow is triggered by the completion of the release workflow.
# The workflow only executes, after being triggered, if the triggering workflow completed successfully.
# e2e-test-release uses the same branch as the triggering workflow and not the commit of the triggering workflow. This is because the release workflow produces further commits.
# e2e-test-release depends on the fact that actions/constellation_create does not overwrite the default osImage, if no osImage is supplied.

on:
  workflow_dispatch:
  workflow_run:
    workflows: ["Release"]
    types: [completed]

env:
  ARM_CLIENT_ID: ${{ secrets.AZURE_E2E_CLIENT_ID }}
  ARM_CLIENT_SECRET: ${{ secrets.AZURE_E2E_CLIENT_SECRET }}
  ARM_SUBSCRIPTION_ID: ${{ secrets.AZURE_E2E_SUBSCRIPTION_ID }}
  ARM_TENANT_ID: ${{ secrets.AZURE_E2E_TENANT_ID }}

jobs:
  on-failure-quit:
    runs-on: ubuntu-22.04
    if: github.event.workflow_run.conclusion == 'failure'
    steps:
      - run: |
          echo 'Release workflow failed, exiting..'
          exit 1

  e2e-tests:
    strategy:
      fail-fast: false
      max-parallel: 9
      matrix:
        include:
          #
          # Tests on ubuntu runner
          #

          # sonobuoy full test on all k8s versions
          - test: "sonobuoy full"
            provider: "gcp"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"
          - test: "sonobuoy full"
            provider: "azure"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"
          - test: "sonobuoy full"
            provider: "aws"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"

          - test: "sonobuoy full"
            provider: "gcp"
            kubernetes-version: "v1.25"
            runner: "ubuntu-22.04"
          - test: "sonobuoy full"
            provider: "azure"
            kubernetes-version: "v1.25"
            runner: "ubuntu-22.04"
          - test: "sonobuoy full"
            provider: "aws"
            kubernetes-version: "v1.25"
            runner: "ubuntu-22.04"

          - test: "sonobuoy full"
            provider: "gcp"
            kubernetes-version: "v1.24"
            runner: "ubuntu-22.04"
          - test: "sonobuoy full"
            provider: "azure"
            kubernetes-version: "v1.24"
            runner: "ubuntu-22.04"
          - test: "sonobuoy full"
            provider: "aws"
            kubernetes-version: "v1.24"
            runner: "ubuntu-22.04"

          # verify test on latest k8s version
          - test: "verify"
            provider: "gcp"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"
          - test: "verify"
            provider: "azure"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"
          - test: "verify"
            provider: "aws"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"

          # recover test on latest k8s version
          - test: "recover"
            provider: "gcp"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"
          - test: "recover"
            provider: "azure"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"
          - test: "recover"
            provider: "aws"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"

          # lb test on latest k8s version
          - test: "lb"
            provider: "gcp"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"
          - test: "lb"
            provider: "azure"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"
          - test: "lb"
            provider: "aws"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"

          # autoscaling test on latest k8s version, not supported on AWS
          - test: "autoscaling"
            provider: "gcp"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"
          - test: "autoscaling"
            provider: "azure"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"

          # perf-bench test on latest k8s version, not supported on AWS
          - test: "perf-bench"
            provider: "gcp"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"
          - test: "perf-bench"
            provider: "azure"
            kubernetes-version: "v1.26"
            runner: "ubuntu-22.04"

          #
          # Tests on macOS runner
          #
          - test: "verify"
            provider: "azure"
            kubernetes-version: "v1.25"
            runner: "macos-12"
          - test: "recover"
            provider: "gcp"
            kubernetes-version: "v1.25"
            runner: "macos-12"
    runs-on: ${{ matrix.runner }}
    permissions:
      id-token: write
      checks: write
      contents: read
    steps:
      - name: Install the basics tools (macOS)
        if: runner.os == 'macOS'
        shell: bash
        run: brew install coreutils kubectl bash

      - name: Checkout
        uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3 # v3.5.0
        with:
          fetch-depth: 0
          ref: ${{ !github.event.pull_request.head.repo.fork && github.event.workflow_run.head_branch || '' }}

      - name: Setup Go environment
        uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0
        with:
          go-version: "1.20.3"

      - name: Set up gcloud CLI (macOS)
        if: matrix.provider == 'gcp' && runner.os == 'macOS'
        uses: google-github-actions/setup-gcloud@62d4898025f6041e16b1068643bfc5a696863587 # v1.1.0

      - name: Run E2E test
        id: e2e_test
        uses: ./.github/actions/e2e_test
        with:
          workerNodesCount: "2"
          controlNodesCount: "3"
          cloudProvider: ${{ matrix.provider }}
          cliVersion: ""
          kubernetesVersion: ${{ matrix.kubernetes-version }}
          keepMeasurements: "true"
          osImage: ""
          isDebugImage: "false"
          awsOpenSearchDomain: ${{ secrets.AWS_OPENSEARCH_DOMAIN }}
          awsOpenSearchUsers: ${{ secrets.AWS_OPENSEARCH_USER }}
          awsOpenSearchPwd: ${{ secrets.AWS_OPENSEARCH_PWD }}
          gcpProject: ${{ secrets.GCP_E2E_PROJECT }}
          gcpClusterCreateServiceAccount: "constellation-e2e-cluster@constellation-331613.iam.gserviceaccount.com"
          gcpIAMCreateServiceAccount: " constellation-iam-e2e@constellation-331613.iam.gserviceaccount.com"
          gcpInClusterServiceAccountKey: ${{ secrets.GCP_CLUSTER_SERVICE_ACCOUNT }}
          test: ${{ matrix.test }}
          buildBuddyApiKey: ${{ secrets.BUILDBUDDY_ORG_API_KEY }}
          azureClusterCreateCredentials: ${{ secrets.AZURE_E2E_CLUSTER_CREDENTIALS }}
          azureIAMCreateCredentials: ${{ secrets.AZURE_E2E_IAM_CREDENTIALS }}

      - name: Always terminate cluster
        if: always()
        uses: ./.github/actions/constellation_destroy
        with:
          kubeconfig: ${{ steps.e2e_test.outputs.kubeconfig }}

      - name: Always delete IAM configuration
        if: always()
        uses: ./.github/actions/constellation_iam_destroy
        with:
          cloudProvider: ${{ matrix.provider }}
          azureCredentials: ${{ secrets.AZURE_E2E_IAM_CREDENTIALS }}
          gcpServiceAccount: "constellation-iam-e2e@constellation-331613.iam.gserviceaccount.com"

  e2e-upgrade:
    strategy:
      fail-fast: false
      max-parallel: 1
      matrix:
        fromVersion: ["v2.6.0"]
        cloudProvider: ["gcp", "azure"]
    name: Run upgrade tests
    secrets: inherit
    permissions:
      id-token: write
      contents: read
    uses: ./.github/workflows/e2e-upgrade.yml
    with:
      fromVersion: ${{ matrix.fromVersion }}
      cloudProvider: ${{ matrix.cloudProvider }}
      workerNodesCount: 2
      controlNodesCount: 3