mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-12-12 09:24:24 -05:00
c15e4efef6
* terraform: add Azure marketplace variable Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * config: add Azure marketplace variable Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * cli: use Terraform variables from config Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * terraform: pass down marketplace variable * image: pad Azure images to 1GiB * terraform: add version attribute to marketplace image * semver: allow versions to be exported without prefix * cli: boolean var to use marketplace images * config: remove dive key * dev-docs: add instructions on how to use marketplace images * terraform: fix unit test * terraform: only fetch image for non-marketplace images * mpimage: refactor image selection Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * [remove] increase minor version for image build Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * terraform: ignore changes to source_image_reference on upgrade * operator: add support for parsing Azure marketplace images Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * upgrade: fix imagefetcher call * docs: add info about azure marketplace * image: ensure more than 1GiB in size * image: test to pad to 2GiB * version: change back to v2.14.0-pre * image: GPT-conformant image size padding * [remove] increase version * mpimage: inline prefix func Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * ci: add marketplace image e2e test Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * [remove] register workflow * ci: fix workflow name * ci: only allow azure test * cli: add marketplace image input to interface * cli: fix argument passing * version: roll back to v2.14.0 * ci: add force-flag support * Update docs/docs/overview/license.md * Update dev-docs/workflows/marketplace-images.md Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com> --------- Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com> Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
267 lines
9.7 KiB
YAML
267 lines
9.7 KiB
YAML
name: e2e test manual
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
nodeCount:
|
|
description: "Number of nodes to use in the cluster. Given in format `<control-plane nodes>:<worker nodes>`."
|
|
default: "3:2"
|
|
type: string
|
|
cloudProvider:
|
|
description: "Which cloud provider to use."
|
|
type: choice
|
|
options:
|
|
- "gcp"
|
|
- "azure"
|
|
- "aws"
|
|
default: "azure"
|
|
required: true
|
|
runner:
|
|
description: "Architecture of the runner that executes the CLI"
|
|
type: choice
|
|
options:
|
|
- "ubuntu-22.04"
|
|
- "macos-12"
|
|
default: "ubuntu-22.04"
|
|
test:
|
|
description: "The test to run."
|
|
type: choice
|
|
options:
|
|
- "sonobuoy quick"
|
|
- "sonobuoy full"
|
|
- "autoscaling"
|
|
- "lb"
|
|
- "perf-bench"
|
|
- "verify"
|
|
- "recover"
|
|
- "malicious join"
|
|
- "s3proxy"
|
|
- "nop"
|
|
required: true
|
|
kubernetesVersion:
|
|
description: "Kubernetes version to create the cluster from."
|
|
default: "1.27"
|
|
required: true
|
|
cliVersion:
|
|
description: "Version of a released CLI to download. Leave empty to build the CLI from the checked out ref."
|
|
type: string
|
|
default: ""
|
|
required: false
|
|
imageVersion:
|
|
description: "Full name of OS image (CSP independent image version UID). Leave empty for latest debug image on main."
|
|
type: string
|
|
default: ""
|
|
required: false
|
|
machineType:
|
|
description: "Override VM machine type. Leave as 'default' or empty to use the default VM type for the selected cloud provider."
|
|
type: string
|
|
default: "default"
|
|
required: false
|
|
regionZone:
|
|
description: "Region or zone to create the cluster in. Leave empty for default region/zone."
|
|
type: string
|
|
git-ref:
|
|
description: "Git ref to checkout."
|
|
type: string
|
|
default: "head"
|
|
required: false
|
|
workflow_call:
|
|
inputs:
|
|
nodeCount:
|
|
description: "Number of nodes to use in the cluster. Given in format `<control-plane nodes>:<worker nodes>`."
|
|
default: "3:2"
|
|
type: string
|
|
cloudProvider:
|
|
description: "Which cloud provider to use."
|
|
type: string
|
|
required: true
|
|
runner:
|
|
description: "Architecture of the runner that executes the CLI"
|
|
type: string
|
|
required: true
|
|
test:
|
|
description: "The test to run."
|
|
type: string
|
|
required: true
|
|
kubernetesVersion:
|
|
description: "Kubernetes version to create the cluster from."
|
|
type: string
|
|
required: true
|
|
cliVersion:
|
|
description: "Version of a released CLI to download. Leave empty to build the CLI from the checked out ref."
|
|
type: string
|
|
default: ""
|
|
required: false
|
|
imageVersion:
|
|
description: "Full name of OS image (CSP independent image version UID). Leave empty for latest debug image on main."
|
|
type: string
|
|
default: ""
|
|
required: false
|
|
machineType:
|
|
description: "Override VM machine type. Leave as 'default' or empty to use the default VM type for the selected cloud provider."
|
|
type: string
|
|
required: true
|
|
regionZone:
|
|
description: "Region or zone to create the cluster in. Leave empty for default region/zone."
|
|
type: string
|
|
git-ref:
|
|
description: "Git ref to checkout."
|
|
type: string
|
|
required: true
|
|
internalLoadBalancer:
|
|
description: "Enable internal load balancer for the cluster."
|
|
type: boolean
|
|
default: false
|
|
selfManagedInfra:
|
|
description: "Use self-managed infrastructure."
|
|
type: boolean
|
|
default: false
|
|
marketplaceImageVersion:
|
|
description: "Marketplace image version to use."
|
|
type: string
|
|
force:
|
|
description: "Use the force-flag when applying to ignore version mismatches."
|
|
type: boolean
|
|
|
|
jobs:
|
|
split-nodeCount:
|
|
name: Split nodeCount
|
|
runs-on: ubuntu-22.04
|
|
permissions:
|
|
id-token: write
|
|
contents: read
|
|
outputs:
|
|
workerNodes: ${{ steps.split-nodeCount.outputs.workerNodes }}
|
|
controlPlaneNodes: ${{ steps.split-nodeCount.outputs.controlPlaneNodes }}
|
|
steps:
|
|
- name: Split nodeCount
|
|
id: split-nodeCount
|
|
shell: bash
|
|
run: |
|
|
nodeCount="${{ inputs.nodeCount }}"
|
|
workerNodes="${nodeCount##*:}"
|
|
controlPlaneNodes="${nodeCount%%:*}"
|
|
|
|
if [[ -z "${workerNodes}" ]] || [[ -z "{controlPlaneNodes}" ]]; then
|
|
echo "Invalid nodeCount input: '${nodeCount}'."
|
|
exit 1
|
|
fi
|
|
|
|
echo "workerNodes=${workerNodes}" | tee -a "$GITHUB_OUTPUT"
|
|
echo "controlPlaneNodes=${controlPlaneNodes}" | tee -a "$GITHUB_OUTPUT"
|
|
|
|
find-latest-image:
|
|
name: Select image
|
|
runs-on: ubuntu-22.04
|
|
permissions:
|
|
id-token: write
|
|
contents: read
|
|
outputs:
|
|
image: ${{ steps.find-latest-image.outputs.image }}
|
|
isDebugImage: ${{ steps.find-latest-image.outputs.isDebugImage }}
|
|
steps:
|
|
- name: Checkout head
|
|
if: inputs.git-ref == 'head'
|
|
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
|
|
with:
|
|
ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
|
|
|
|
- name: Checkout ref
|
|
if: inputs.git-ref != 'head'
|
|
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
|
|
with:
|
|
ref: ${{ inputs.git-ref }}
|
|
|
|
- name: Get Latest Image
|
|
id: find-latest-image
|
|
uses: ./.github/actions/find_latest_image
|
|
with:
|
|
git-ref: ${{ inputs.git-ref }}
|
|
imageVersion: ${{ inputs.imageVersion }}
|
|
ref: main
|
|
stream: debug
|
|
|
|
e2e-test-manual:
|
|
runs-on: ${{ inputs.runner }}
|
|
permissions:
|
|
id-token: write
|
|
checks: write
|
|
contents: read
|
|
packages: write
|
|
needs: [find-latest-image, split-nodeCount]
|
|
if: always() && !cancelled()
|
|
steps:
|
|
- name: Install basic tools (macOS)
|
|
if: runner.os == 'macOS'
|
|
shell: bash
|
|
run: brew install coreutils kubectl bash terraform
|
|
|
|
- name: Checkout head
|
|
if: inputs.git-ref == 'head'
|
|
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
|
|
with:
|
|
ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
|
|
|
|
- name: Checkout ref
|
|
if: inputs.git-ref != 'head'
|
|
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
|
|
with:
|
|
ref: ${{ inputs.git-ref }}
|
|
|
|
- name: Set up gcloud CLI (macOS)
|
|
if: inputs.cloudProvider == 'gcp' && runner.os == 'macOS'
|
|
uses: google-github-actions/setup-gcloud@e30db14379863a8c79331b04a9969f4c1e225e0b # v1.1.1
|
|
|
|
- name: Run manual E2E test
|
|
id: e2e_test
|
|
uses: ./.github/actions/e2e_test
|
|
with:
|
|
workerNodesCount: ${{ needs.split-nodeCount.outputs.workerNodes }}
|
|
controlNodesCount: ${{ needs.split-nodeCount.outputs.controlPlaneNodes }}
|
|
cloudProvider: ${{ inputs.cloudProvider }}
|
|
machineType: ${{ inputs.machineType }}
|
|
regionZone: ${{ inputs.regionZone }}
|
|
gcpProject: constellation-e2e
|
|
gcpClusterCreateServiceAccount: "infrastructure-e2e@constellation-e2e.iam.gserviceaccount.com"
|
|
gcpIAMCreateServiceAccount: "iam-e2e@constellation-e2e.iam.gserviceaccount.com"
|
|
test: ${{ inputs.test }}
|
|
kubernetesVersion: ${{ inputs.kubernetesVersion }}
|
|
awsOpenSearchDomain: ${{ secrets.AWS_OPENSEARCH_DOMAIN }}
|
|
awsOpenSearchUsers: ${{ secrets.AWS_OPENSEARCH_USER }}
|
|
awsOpenSearchPwd: ${{ secrets.AWS_OPENSEARCH_PWD }}
|
|
osImage: ${{ needs.find-latest-image.outputs.image }}
|
|
cliVersion: ${{ inputs.cliVersion }}
|
|
isDebugImage: ${{ needs.find-latest-image.outputs.isDebugImage }}
|
|
buildBuddyApiKey: ${{ secrets.BUILDBUDDY_ORG_API_KEY }}
|
|
azureClusterCreateCredentials: ${{ secrets.AZURE_E2E_CLUSTER_CREDENTIALS }}
|
|
azureIAMCreateCredentials: ${{ secrets.AZURE_E2E_IAM_CREDENTIALS }}
|
|
registry: ghcr.io
|
|
githubToken: ${{ secrets.GITHUB_TOKEN }}
|
|
cosignPassword: ${{ secrets.COSIGN_PASSWORD }}
|
|
cosignPrivateKey: ${{ secrets.COSIGN_PRIVATE_KEY }}
|
|
fetchMeasurements: ${{ contains(needs.find-latest-image.outputs.image, '/stream/stable/') }}
|
|
internalLoadBalancer: ${{ inputs.internalLoadBalancer }}
|
|
selfManagedInfra: ${{ inputs.selfManagedInfra }}
|
|
s3AccessKey: ${{ secrets.AWS_ACCESS_KEY_ID_S3PROXY }}
|
|
s3SecretKey: ${{ secrets.AWS_SECRET_ACCESS_KEY_S3PROXY }}
|
|
marketplaceImageVersion: ${{ inputs.marketplaceImageVersion }}
|
|
force: ${{ inputs.force }}
|
|
|
|
- name: Always terminate cluster
|
|
if: always()
|
|
uses: ./.github/actions/constellation_destroy
|
|
with:
|
|
kubeconfig: ${{ steps.e2e_test.outputs.kubeconfig }}
|
|
selfManagedInfra: ${{ inputs.selfManagedInfra }}
|
|
cloudProvider: ${{ inputs.cloudProvider }}
|
|
azureClusterDeleteCredentials: ${{ secrets.AZURE_E2E_CLUSTER_CREDENTIALS }}
|
|
gcpClusterDeleteServiceAccount: "infrastructure-e2e@constellation-e2e.iam.gserviceaccount.com"
|
|
|
|
- name: Always delete IAM configuration
|
|
if: always()
|
|
uses: ./.github/actions/constellation_iam_destroy
|
|
with:
|
|
cloudProvider: ${{ inputs.cloudProvider }}
|
|
azureCredentials: ${{ secrets.AZURE_E2E_IAM_CREDENTIALS }}
|
|
gcpServiceAccount: "iam-e2e@constellation-e2e.iam.gserviceaccount.com"
|