2023-02-13 07:58:34 -05:00
|
|
|
name: e2e test release
|
|
|
|
|
# This workflow is not integrated with e2e-test-weekly since we want different tests to run during weekly and release testing.
|
|
|
|
|
# To integrate both tests we would need to pass executed tests as arguments.
|
|
|
|
|
# Defining the executed tests is currently the main point of the e2e-test-weekly workflow.
|
|
|
|
|
# e2e-test-release runs the same tests as e2e-test-weekly except:
|
|
|
|
|
# - any tests on the last release
|
|
|
|
|
# - loadbalancer tests for AWS. Test test is currently broken and should not block a release. AB#2780.
|
|
|
|
|
#
|
2023-05-22 03:22:00 -04:00
|
|
|
# The workflow is triggered as the last step of the release workflow.
|
2023-02-13 07:58:34 -05:00
|
|
|
|
|
|
|
|
on:
|
|
|
|
|
workflow_dispatch:
|
2023-05-22 03:22:00 -04:00
|
|
|
inputs:
|
|
|
|
|
ref:
|
|
|
|
|
type: string
|
|
|
|
|
description: "Git ref to checkout"
|
|
|
|
|
required: false
|
2023-06-05 07:56:16 -04:00
|
|
|
targetVersion:
|
|
|
|
|
type: string
|
|
|
|
|
description: "Target version to test"
|
|
|
|
|
required: true
|
2023-08-10 06:53:40 -04:00
|
|
|
regionZone:
|
|
|
|
|
description: "Region or zone to run e2e tests in. Leave empty for default region/zone."
|
|
|
|
|
type: string
|
2023-05-22 03:22:00 -04:00
|
|
|
workflow_call:
|
|
|
|
|
inputs:
|
|
|
|
|
ref:
|
|
|
|
|
type: string
|
|
|
|
|
description: "Git ref to checkout"
|
|
|
|
|
required: true
|
2023-06-05 07:56:16 -04:00
|
|
|
targetVersion:
|
|
|
|
|
type: string
|
|
|
|
|
description: "Target version to test"
|
|
|
|
|
required: true
|
2023-02-13 07:58:34 -05:00
|
|
|
|
|
|
|
|
jobs:
|
2023-04-03 07:40:42 -04:00
|
|
|
e2e-tests:
|
2023-02-13 07:58:34 -05:00
|
|
|
strategy:
|
|
|
|
|
fail-fast: false
|
2023-04-04 04:47:26 -04:00
|
|
|
max-parallel: 9
|
2023-02-13 07:58:34 -05:00
|
|
|
matrix:
|
2023-04-14 12:43:54 -04:00
|
|
|
include:
|
|
|
|
|
#
|
|
|
|
|
# Tests on ubuntu runner
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
# sonobuoy full test on all k8s versions
|
|
|
|
|
- test: "sonobuoy full"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "gcp-sev-es"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2024-06-19 11:34:34 -04:00
|
|
|
clusterCreation: "cli"
|
2024-04-16 12:13:47 -04:00
|
|
|
- test: "sonobuoy full"
|
|
|
|
|
attestationVariant: "gcp-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-04-16 12:13:47 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "sonobuoy full"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "sonobuoy full"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-tdx"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-01-25 09:32:19 -05:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
|
|
|
|
- test: "sonobuoy full"
|
|
|
|
|
attestationVariant: "aws-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
|
|
|
|
|
- test: "sonobuoy full"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "gcp-sev-es"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.29"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2024-04-16 12:13:47 -04:00
|
|
|
- test: "sonobuoy full"
|
|
|
|
|
attestationVariant: "gcp-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.29"
|
2024-04-16 12:13:47 -04:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "sonobuoy full"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.29"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "sonobuoy full"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-tdx"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.29"
|
2024-01-25 09:32:19 -05:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
|
|
|
|
- test: "sonobuoy full"
|
|
|
|
|
attestationVariant: "aws-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.29"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
|
|
|
|
|
- test: "sonobuoy full"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "gcp-sev-es"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.28"
|
2024-01-25 09:32:19 -05:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
2024-04-16 12:13:47 -04:00
|
|
|
- test: "sonobuoy full"
|
|
|
|
|
attestationVariant: "gcp-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.28"
|
2024-04-16 12:13:47 -04:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
2024-01-25 09:32:19 -05:00
|
|
|
- test: "sonobuoy full"
|
|
|
|
|
attestationVariant: "azure-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.28"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "sonobuoy full"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-tdx"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.28"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "sonobuoy full"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "aws-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.28"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
|
|
|
|
|
# verify test on latest k8s version
|
|
|
|
|
- test: "verify"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "gcp-sev-es"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2024-04-16 12:13:47 -04:00
|
|
|
- test: "verify"
|
|
|
|
|
attestationVariant: "gcp-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-04-16 12:13:47 -04:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "verify"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "verify"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-tdx"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-01-25 09:32:19 -05:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
|
|
|
|
- test: "verify"
|
|
|
|
|
attestationVariant: "aws-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
|
|
|
|
|
# recover test on latest k8s version
|
|
|
|
|
- test: "recover"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "gcp-sev-es"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2024-04-16 12:13:47 -04:00
|
|
|
- test: "recover"
|
|
|
|
|
attestationVariant: "gcp-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-04-16 12:13:47 -04:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "recover"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "recover"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-tdx"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-01-25 09:32:19 -05:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
|
|
|
|
- test: "recover"
|
|
|
|
|
attestationVariant: "aws-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
|
|
|
|
|
# lb test on latest k8s version
|
|
|
|
|
- test: "lb"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "gcp-sev-es"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2024-04-16 12:13:47 -04:00
|
|
|
- test: "lb"
|
|
|
|
|
attestationVariant: "gcp-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-04-16 12:13:47 -04:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "lb"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-02-13 07:58:34 -05:00
|
|
|
- test: "lb"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-tdx"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-01-25 09:32:19 -05:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
|
|
|
|
- test: "lb"
|
|
|
|
|
attestationVariant: "aws-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
|
2023-08-18 05:13:24 -04:00
|
|
|
# autoscaling test on latest k8s version
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "autoscaling"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "gcp-sev-es"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2024-04-16 12:13:47 -04:00
|
|
|
- test: "autoscaling"
|
|
|
|
|
attestationVariant: "gcp-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-04-16 12:13:47 -04:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "autoscaling"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-05-19 07:57:31 -04:00
|
|
|
- test: "autoscaling"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-tdx"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-01-25 09:32:19 -05:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
|
|
|
|
- test: "autoscaling"
|
|
|
|
|
attestationVariant: "aws-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-05-19 07:57:31 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
|
2024-06-04 07:23:07 -04:00
|
|
|
# perf-bench test on latest k8s version
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "perf-bench"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "gcp-sev-es"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2024-06-04 07:23:07 -04:00
|
|
|
- test: "perf-bench"
|
|
|
|
|
attestationVariant: "gcp-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-06-04 07:23:07 -04:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "perf-bench"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "ubuntu-22.04"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2024-06-04 07:23:07 -04:00
|
|
|
- test: "perf-bench"
|
|
|
|
|
attestationVariant: "azure-tdx"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-06-04 07:23:07 -04:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
|
|
|
|
- test: "perf-bench"
|
|
|
|
|
attestationVariant: "aws-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-06-04 07:23:07 -04:00
|
|
|
runner: "ubuntu-22.04"
|
|
|
|
|
clusterCreation: "cli"
|
2023-04-14 12:43:54 -04:00
|
|
|
|
2024-02-01 09:05:07 -05:00
|
|
|
# s3proxy test on latest k8s version
|
|
|
|
|
- test: "s3proxy"
|
|
|
|
|
refStream: "ref/main/stream/debug/?"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "gcp-sev-es"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-01-25 09:32:19 -05:00
|
|
|
runner: "ubuntu-22.04"
|
2024-02-01 09:05:07 -05:00
|
|
|
clusterCreation: "cli"
|
|
|
|
|
|
|
|
|
|
# malicious join test on latest k8s version
|
|
|
|
|
- test: "malicious join"
|
|
|
|
|
refStream: "ref/main/stream/debug/?"
|
|
|
|
|
attestationVariant: "gcp-sev-es"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-02-01 09:05:07 -05:00
|
|
|
clusterCreation: "cli"
|
2024-04-16 12:13:47 -04:00
|
|
|
- test: "malicious join"
|
|
|
|
|
refStream: "ref/main/stream/debug/?"
|
|
|
|
|
attestationVariant: "gcp-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-04-16 12:13:47 -04:00
|
|
|
clusterCreation: "cli"
|
2024-02-01 09:05:07 -05:00
|
|
|
- test: "malicious join"
|
|
|
|
|
refStream: "ref/main/stream/debug/?"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-02-01 09:05:07 -05:00
|
|
|
clusterCreation: "cli"
|
|
|
|
|
- test: "malicious join"
|
|
|
|
|
refStream: "ref/main/stream/debug/?"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "azure-tdx"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2024-02-01 09:05:07 -05:00
|
|
|
clusterCreation: "cli"
|
|
|
|
|
- test: "malicious join"
|
2023-10-12 07:27:02 -04:00
|
|
|
refStream: "ref/main/stream/debug/?"
|
2024-02-01 09:05:07 -05:00
|
|
|
attestationVariant: "aws-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-10-12 07:27:02 -04:00
|
|
|
|
2023-04-14 12:43:54 -04:00
|
|
|
#
|
|
|
|
|
# Tests on macOS runner
|
|
|
|
|
#
|
2023-09-25 07:51:08 -04:00
|
|
|
# Skipping verify test on MacOS since the runner uses a different version of sed
|
|
|
|
|
# TODO(3u13r): Update verify test to work on MacOS runners
|
|
|
|
|
# - test: "verify"
|
2024-01-25 09:32:19 -05:00
|
|
|
# attestationVariant: "azure-sev-snp"
|
2024-06-19 11:34:34 -04:00
|
|
|
# kubernetes-version: "v1.30"
|
2023-09-25 07:51:08 -04:00
|
|
|
# runner: "macos-12"
|
2023-04-14 12:43:54 -04:00
|
|
|
- test: "recover"
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: "gcp-sev-es"
|
2024-06-19 11:34:34 -04:00
|
|
|
kubernetes-version: "v1.30"
|
2023-04-14 12:43:54 -04:00
|
|
|
runner: "macos-12"
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: "cli"
|
2023-02-13 07:58:34 -05:00
|
|
|
runs-on: ${{ matrix.runner }}
|
|
|
|
|
permissions:
|
|
|
|
|
id-token: write
|
|
|
|
|
checks: write
|
|
|
|
|
contents: read
|
2023-04-24 05:32:22 -04:00
|
|
|
packages: write
|
2024-04-26 06:06:01 -04:00
|
|
|
actions: write
|
2023-02-13 07:58:34 -05:00
|
|
|
steps:
|
|
|
|
|
- name: Install the basics tools (macOS)
|
|
|
|
|
if: runner.os == 'macOS'
|
|
|
|
|
shell: bash
|
|
|
|
|
run: brew install coreutils kubectl bash
|
|
|
|
|
|
|
|
|
|
- name: Checkout
|
2024-06-19 09:19:41 -04:00
|
|
|
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
|
2023-02-13 07:58:34 -05:00
|
|
|
with:
|
|
|
|
|
fetch-depth: 0
|
2023-05-22 03:22:00 -04:00
|
|
|
ref: ${{ inputs.ref || github.head_ref }}
|
2023-02-13 07:58:34 -05:00
|
|
|
|
2024-01-25 09:32:19 -05:00
|
|
|
- name: Split attestationVariant
|
|
|
|
|
id: split-attestationVariant
|
|
|
|
|
shell: bash
|
|
|
|
|
run: |
|
|
|
|
|
attestationVariant="${{ matrix.attestationVariant }}"
|
|
|
|
|
cloudProvider="${attestationVariant%%-*}"
|
|
|
|
|
|
|
|
|
|
echo "cloudProvider=${cloudProvider}" | tee -a "$GITHUB_OUTPUT"
|
|
|
|
|
|
2023-02-13 07:58:34 -05:00
|
|
|
- name: Set up gcloud CLI (macOS)
|
2024-01-25 09:32:19 -05:00
|
|
|
if: steps.split-attestationVariant.outputs.provider == 'gcp' && runner.os == 'macOS'
|
2024-02-21 09:29:06 -05:00
|
|
|
uses: google-github-actions/setup-gcloud@98ddc00a17442e89a24bbf282954a3b65ce6d200 # v2.1.0
|
2023-02-13 07:58:34 -05:00
|
|
|
|
|
|
|
|
- name: Run E2E test
|
|
|
|
|
id: e2e_test
|
|
|
|
|
uses: ./.github/actions/e2e_test
|
|
|
|
|
with:
|
|
|
|
|
workerNodesCount: "2"
|
|
|
|
|
controlNodesCount: "3"
|
2024-01-25 09:32:19 -05:00
|
|
|
cloudProvider: ${{ steps.split-attestationVariant.outputs.cloudProvider }}
|
|
|
|
|
attestationVariant: ${{ matrix.attestationVariant }}
|
2023-02-13 07:58:34 -05:00
|
|
|
cliVersion: ""
|
|
|
|
|
kubernetesVersion: ${{ matrix.kubernetes-version }}
|
|
|
|
|
osImage: ""
|
|
|
|
|
isDebugImage: "false"
|
2023-08-10 06:53:40 -04:00
|
|
|
regionZone: ${{ inputs.regionZone }}
|
2023-02-13 07:58:34 -05:00
|
|
|
awsOpenSearchDomain: ${{ secrets.AWS_OPENSEARCH_DOMAIN }}
|
|
|
|
|
awsOpenSearchUsers: ${{ secrets.AWS_OPENSEARCH_USER }}
|
|
|
|
|
awsOpenSearchPwd: ${{ secrets.AWS_OPENSEARCH_PWD }}
|
2023-11-28 04:54:58 -05:00
|
|
|
gcpProject: constellation-e2e
|
2023-11-27 07:04:41 -05:00
|
|
|
gcpClusterCreateServiceAccount: "infrastructure-e2e@constellation-e2e.iam.gserviceaccount.com"
|
|
|
|
|
gcpIAMCreateServiceAccount: "iam-e2e@constellation-e2e.iam.gserviceaccount.com"
|
2023-02-13 07:58:34 -05:00
|
|
|
test: ${{ matrix.test }}
|
2024-09-17 06:30:22 -04:00
|
|
|
azureSubscriptionID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
|
2023-04-12 07:24:13 -04:00
|
|
|
azureClusterCreateCredentials: ${{ secrets.AZURE_E2E_CLUSTER_CREDENTIALS }}
|
|
|
|
|
azureIAMCreateCredentials: ${{ secrets.AZURE_E2E_IAM_CREDENTIALS }}
|
2023-04-04 04:16:04 -04:00
|
|
|
registry: ghcr.io
|
2023-08-09 12:58:46 -04:00
|
|
|
cosignPassword: ${{ secrets.COSIGN_PASSWORD }}
|
|
|
|
|
cosignPrivateKey: ${{ secrets.COSIGN_PRIVATE_KEY }}
|
2023-04-04 04:16:04 -04:00
|
|
|
githubToken: ${{ secrets.GITHUB_TOKEN }}
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: ${{ matrix.clusterCreation }}
|
2023-10-12 07:27:02 -04:00
|
|
|
s3AccessKey: ${{ secrets.AWS_ACCESS_KEY_ID_S3PROXY }}
|
|
|
|
|
s3SecretKey: ${{ secrets.AWS_SECRET_ACCESS_KEY_S3PROXY }}
|
2023-12-21 13:28:18 -05:00
|
|
|
encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
|
2023-08-09 12:58:46 -04:00
|
|
|
|
2023-02-13 07:58:34 -05:00
|
|
|
- name: Always terminate cluster
|
|
|
|
|
if: always()
|
|
|
|
|
uses: ./.github/actions/constellation_destroy
|
|
|
|
|
with:
|
|
|
|
|
kubeconfig: ${{ steps.e2e_test.outputs.kubeconfig }}
|
2023-12-15 04:37:29 -05:00
|
|
|
clusterCreation: ${{ matrix.clusterCreation }}
|
2024-01-25 09:32:19 -05:00
|
|
|
cloudProvider: ${{ steps.split-attestationVariant.outputs.cloudProvider }}
|
2023-11-14 07:25:52 -05:00
|
|
|
azureClusterDeleteCredentials: ${{ secrets.AZURE_E2E_CLUSTER_CREDENTIALS }}
|
2023-11-28 04:54:58 -05:00
|
|
|
gcpClusterDeleteServiceAccount: "infrastructure-e2e@constellation-e2e.iam.gserviceaccount.com"
|
2023-02-13 07:58:34 -05:00
|
|
|
|
|
|
|
|
- name: Always delete IAM configuration
|
2023-04-12 07:24:13 -04:00
|
|
|
if: always()
|
2023-02-13 07:58:34 -05:00
|
|
|
uses: ./.github/actions/constellation_iam_destroy
|
2023-04-12 07:24:13 -04:00
|
|
|
with:
|
2024-01-25 09:32:19 -05:00
|
|
|
cloudProvider: ${{ steps.split-attestationVariant.outputs.cloudProvider }}
|
2023-04-12 07:24:13 -04:00
|
|
|
azureCredentials: ${{ secrets.AZURE_E2E_IAM_CREDENTIALS }}
|
2023-11-27 07:04:41 -05:00
|
|
|
gcpServiceAccount: "iam-e2e@constellation-e2e.iam.gserviceaccount.com"
|
2023-02-13 07:58:34 -05:00
|
|
|
|
2024-04-26 06:06:01 -04:00
|
|
|
- name: Update tfstate
|
|
|
|
|
if: always()
|
|
|
|
|
env:
|
|
|
|
|
GH_TOKEN: ${{ github.token }}
|
|
|
|
|
uses: ./.github/actions/update_tfstate
|
|
|
|
|
with:
|
2024-05-10 05:14:45 -04:00
|
|
|
name: terraform-state-${{ steps.e2e_test.outputs.namePrefix }}
|
2024-04-26 06:06:01 -04:00
|
|
|
runID: ${{ github.run_id }}
|
|
|
|
|
encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
|
|
|
|
|
|
2023-02-13 07:58:34 -05:00
|
|
|
e2e-upgrade:
|
|
|
|
|
strategy:
|
2023-04-04 04:47:26 -04:00
|
|
|
fail-fast: false
|
|
|
|
|
max-parallel: 1
|
|
|
|
|
matrix:
|
2024-07-04 05:17:55 -04:00
|
|
|
fromVersion: ["v2.17.0"]
|
2024-07-22 07:29:27 -04:00
|
|
|
attestationVariant: ["gcp-sev-snp", "azure-sev-snp", "azure-tdx", "aws-sev-snp"]
|
2023-02-13 07:58:34 -05:00
|
|
|
name: Run upgrade tests
|
|
|
|
|
secrets: inherit
|
|
|
|
|
permissions:
|
|
|
|
|
id-token: write
|
|
|
|
|
contents: read
|
2023-05-03 05:40:09 -04:00
|
|
|
checks: write
|
|
|
|
|
packages: write
|
2024-04-26 06:06:01 -04:00
|
|
|
actions: write
|
2023-02-13 07:58:34 -05:00
|
|
|
uses: ./.github/workflows/e2e-upgrade.yml
|
|
|
|
|
with:
|
|
|
|
|
fromVersion: ${{ matrix.fromVersion }}
|
2023-06-05 07:56:16 -04:00
|
|
|
toImage: ${{ inputs.targetVersion }}
|
2024-01-25 09:32:19 -05:00
|
|
|
attestationVariant: ${{ matrix.attestationVariant }}
|
2023-08-10 06:53:40 -04:00
|
|
|
nodeCount: '3:2'
|
2023-05-22 03:22:00 -04:00
|
|
|
gitRef: ${{ inputs.ref || github.head_ref }}
|
