mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-10-01 01:36:09 -04:00
331 lines
11 KiB
YAML
331 lines
11 KiB
YAML
name: e2e Test Manual
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
workerNodesCount:
|
|
description: "Number of worker nodes to spawn."
|
|
default: "2"
|
|
required: true
|
|
controlNodesCount:
|
|
description: "Number of control-plane nodes to spawn."
|
|
default: "3"
|
|
required: true
|
|
cloudProvider:
|
|
description: "Which cloud provider to use."
|
|
type: choice
|
|
options:
|
|
- "gcp"
|
|
- "azure"
|
|
- "aws"
|
|
default: "azure"
|
|
required: true
|
|
runner:
|
|
description: "Architecture of the runner that executes the CLI"
|
|
type: choice
|
|
options:
|
|
- "ubuntu-22.04"
|
|
- "macos-12"
|
|
default: "ubuntu-22.04"
|
|
test:
|
|
description: "The test to run."
|
|
type: choice
|
|
options:
|
|
- "sonobuoy quick"
|
|
- "sonobuoy full"
|
|
- "autoscaling"
|
|
- "lb"
|
|
- "perf-bench"
|
|
- "verify"
|
|
- "recover"
|
|
- "nop"
|
|
- "iamcreate"
|
|
required: true
|
|
kubernetesVersion:
|
|
description: "Kubernetes version to create the cluster from."
|
|
default: "1.25"
|
|
required: true
|
|
keepMeasurements:
|
|
description: "Keep measurements embedded in the CLI."
|
|
type: boolean
|
|
default: false
|
|
required: false
|
|
osImage:
|
|
description: "Full name of OS image (CSP independent image version UID). Leave empty for latest debug image on main."
|
|
type: string
|
|
default: ""
|
|
required: false
|
|
machineType:
|
|
description: "Override VM machine type. Leave as 'default' or empty to use the default VM type for the selected cloud provider."
|
|
type: string
|
|
default: "default"
|
|
required: false
|
|
git-ref:
|
|
description: "Git ref to checkout."
|
|
type: string
|
|
default: "head"
|
|
required: false
|
|
workflow_call:
|
|
inputs:
|
|
workerNodesCount:
|
|
description: "Number of worker nodes to spawn."
|
|
type: number
|
|
required: true
|
|
controlNodesCount:
|
|
description: "Number of control-plane nodes to spawn."
|
|
type: number
|
|
required: true
|
|
cloudProvider:
|
|
description: "Which cloud provider to use."
|
|
type: string
|
|
required: true
|
|
runner:
|
|
description: "Architecture of the runner that executes the CLI"
|
|
type: string
|
|
required: true
|
|
test:
|
|
description: "The test to run."
|
|
type: string
|
|
required: true
|
|
kubernetesVersion:
|
|
description: "Kubernetes version to create the cluster from."
|
|
type: string
|
|
required: true
|
|
keepMeasurements:
|
|
description: "Keep measurements embedded in the CLI."
|
|
type: boolean
|
|
required: true
|
|
osImage:
|
|
description: "Full name of OS image (CSP independent image version UID). Leave empty for latest debug image on main."
|
|
type: string
|
|
required: true
|
|
machineType:
|
|
description: "Override VM machine type. Leave as 'default' or empty to use the default VM type for the selected cloud provider."
|
|
type: string
|
|
required: true
|
|
git-ref:
|
|
description: "Git ref to checkout."
|
|
type: string
|
|
required: true
|
|
|
|
env:
|
|
ARM_CLIENT_ID: ${{ secrets.AZURE_E2E_CLIENT_ID }}
|
|
ARM_CLIENT_SECRET: ${{ secrets.AZURE_E2E_CLIENT_SECRET }}
|
|
ARM_SUBSCRIPTION_ID: ${{ secrets.AZURE_E2E_SUBSCRIPTION_ID }}
|
|
ARM_TENANT_ID: ${{ secrets.AZURE_E2E_TENANT_ID }}
|
|
|
|
jobs:
|
|
find-latest-image:
|
|
name: Select image
|
|
runs-on: ubuntu-22.04
|
|
permissions:
|
|
id-token: write
|
|
contents: read
|
|
outputs:
|
|
image: ${{ steps.find-latest-image.outputs.output }}${{ steps.check-input.outputs.image }}
|
|
isDebugImage: ${{ steps.isDebugImage.outputs.isDebugImage }}
|
|
steps:
|
|
- name: Check input
|
|
id: check-input
|
|
shell: bash
|
|
run: |
|
|
if [[ -z "${{ inputs.osImage }}" ]]; then
|
|
echo "Using latest debug image from main."
|
|
else
|
|
echo "Using image '${{ inputs.osImage }}'."
|
|
echo "image=${{ inputs.osImage }}" >> "$GITHUB_OUTPUT"
|
|
exit 0
|
|
fi
|
|
|
|
- name: Checkout head
|
|
if: inputs.git-ref == 'head'
|
|
uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
|
|
with:
|
|
ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
|
|
|
|
- name: Checkout ref
|
|
if: inputs.git-ref != 'head'
|
|
uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
|
|
with:
|
|
ref: ${{ inputs.git-ref }}
|
|
|
|
- name: Login to AWS
|
|
uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838 # v1.7.0
|
|
with:
|
|
role-to-assume: arn:aws:iam::795746500882:role/GithubConstellationVersionsAPIRead
|
|
aws-region: eu-central-1
|
|
|
|
- name: Find latest image
|
|
id: find-latest-image
|
|
if: steps.check-input.outputs.image == ''
|
|
uses: ./.github/actions/versionsapi
|
|
with:
|
|
command: latest
|
|
ref: main
|
|
stream: debug
|
|
|
|
- name: Is debug image?
|
|
id: isDebugImage
|
|
shell: bash
|
|
run: |
|
|
case "${{ inputs.osImage }}" in
|
|
"")
|
|
echo "isDebugImage=true" >> "$GITHUB_OUTPUT"
|
|
echo "Image is debug image."
|
|
;;
|
|
*"/stream/debug/"*)
|
|
echo "isDebugImage=true" >> "$GITHUB_OUTPUT"
|
|
echo "Image is debug image."
|
|
;;
|
|
*)
|
|
echo "isDebugImage=false" >> "$GITHUB_OUTPUT"
|
|
echo "Image is not debug image."
|
|
;;
|
|
esac
|
|
|
|
build-bootstrapper:
|
|
name: "Build bootstrapper for macOS runner"
|
|
runs-on: ubuntu-22.04
|
|
if: inputs.runner == 'macos-12' && needs.find-latest-image.outputs.isDebugImage == 'true'
|
|
needs: [find-latest-image]
|
|
steps:
|
|
- name: Setup Go environment
|
|
uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
|
|
with:
|
|
go-version: "1.20.2"
|
|
|
|
- name: Checkout head
|
|
if: inputs.git-ref == 'head'
|
|
uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
|
|
with:
|
|
ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
|
|
|
|
- name: Checkout ref
|
|
if: inputs.git-ref != 'head'
|
|
uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
|
|
with:
|
|
ref: ${{ inputs.git-ref }}
|
|
|
|
- name: Build bootstrapper
|
|
uses: ./.github/actions/build_bootstrapper
|
|
|
|
- name: Build upgrade-agent
|
|
uses: ./.github/actions/build_upgrade_agent
|
|
with:
|
|
outputPath: ${{ github.workspace }}/build/upgrade-agent
|
|
|
|
- name: Upload bootstrapper to cache
|
|
uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3.2.6
|
|
with:
|
|
key: bootstrapper-${{ github.sha }}
|
|
path: "build/bootstrapper"
|
|
|
|
- name: Upload upgrade-agent to cache
|
|
uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3.2.6
|
|
with:
|
|
key: upgrade-agent-${{ github.sha }}
|
|
path: "build/upgrade-agent"
|
|
|
|
e2e-test-manual:
|
|
runs-on: ${{ inputs.runner }}
|
|
permissions:
|
|
id-token: write
|
|
contents: read
|
|
needs: [find-latest-image, build-bootstrapper]
|
|
if: |
|
|
always() &&
|
|
!cancelled() &&
|
|
(
|
|
needs.build-bootstrapper.result == 'success' ||
|
|
needs.build-bootstrapper.result == 'skipped'
|
|
)
|
|
steps:
|
|
- name: Install the basics tools (macOS)
|
|
if: runner.os == 'macOS'
|
|
shell: bash
|
|
run: brew install coreutils kubectl bash
|
|
|
|
- name: Checkout head
|
|
if: inputs.git-ref == 'head'
|
|
uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
|
|
with:
|
|
ref: ${{ !github.event.pull_request.head.repo.fork && github.head_ref || '' }}
|
|
|
|
- name: Checkout ref
|
|
if: inputs.git-ref != 'head'
|
|
uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
|
|
with:
|
|
ref: ${{ inputs.git-ref }}
|
|
|
|
- name: Setup Go environment
|
|
uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
|
|
with:
|
|
go-version: "1.20.2"
|
|
|
|
- name: Set up gcloud CLI (macOS)
|
|
if: inputs.cloudProvider == 'gcp' && runner.os == 'macOS'
|
|
uses: google-github-actions/setup-gcloud@62d4898025f6041e16b1068643bfc5a696863587 # v1.1.0
|
|
|
|
- name: Login to Azure
|
|
if: inputs.cloudProvider == 'azure'
|
|
uses: ./.github/actions/login_azure
|
|
with:
|
|
azure_credentials: ${{ secrets.AZURE_E2E_CREDENTIALS }}
|
|
|
|
- name: Create Azure resource group
|
|
id: az_resource_group_gen
|
|
if: inputs.cloudProvider == 'azure'
|
|
shell: bash
|
|
run: |
|
|
uuid=$(uuidgen)
|
|
name=e2e-test-${uuid%%-*}
|
|
az group create --location westus --name "$name" --tags e2e
|
|
echo "res_group_name=$name" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Run manual E2E test
|
|
id: e2e_test
|
|
uses: ./.github/actions/e2e_test
|
|
with:
|
|
workerNodesCount: ${{ inputs.workerNodesCount }}
|
|
controlNodesCount: ${{ inputs.controlNodesCount }}
|
|
cloudProvider: ${{ inputs.cloudProvider }}
|
|
machineType: ${{ inputs.machineType }}
|
|
gcpProject: ${{ secrets.GCP_E2E_PROJECT }}
|
|
gcp_service_account: "constellation-e2e@constellation-331613.iam.gserviceaccount.com"
|
|
gcpClusterServiceAccountKey: ${{ secrets.GCP_CLUSTER_SERVICE_ACCOUNT }}
|
|
test: ${{ inputs.test }}
|
|
kubernetesVersion: ${{ inputs.kubernetesVersion }}
|
|
keepMeasurements: ${{ inputs.keepMeasurements }}
|
|
awsOpenSearchDomain: ${{ secrets.AWS_OPENSEARCH_DOMAIN }}
|
|
awsOpenSearchUsers: ${{ secrets.AWS_OPENSEARCH_USER }}
|
|
awsOpenSearchPwd: ${{ secrets.AWS_OPENSEARCH_PWD }}
|
|
azureSubscription: ${{ secrets.AZURE_E2E_SUBSCRIPTION_ID }}
|
|
azureTenant: ${{ secrets.AZURE_E2E_TENANT_ID }}
|
|
azureClientID: ${{ secrets.AZURE_E2E_CLIENT_ID }}
|
|
azureClientSecret: ${{ secrets.AZURE_E2E_CLIENT_SECRET }}
|
|
azureUserAssignedIdentity: ${{ secrets.AZURE_E2E_USER_ASSIGNED_IDENTITY }}
|
|
azureResourceGroup: ${{ steps.az_resource_group_gen.outputs.res_group_name }}
|
|
osImage: ${{ needs.find-latest-image.outputs.image }}
|
|
isDebugImage: ${{ needs.find-latest-image.outputs.isDebugImage }}
|
|
|
|
- name: Always terminate cluster
|
|
if: always()
|
|
uses: ./.github/actions/constellation_destroy
|
|
with:
|
|
kubeconfig: ${{ steps.e2e_test.outputs.kubeconfig }}
|
|
|
|
- name: Always delete IAM configuration
|
|
if: always() && inputs.test == 'iamcreate' && inputs.cloudProvider != 'azure' # skip for Azure, as the SP / MI does not have the required permissions
|
|
uses: ./.github/actions/constellation_iam_destroy
|
|
|
|
- name: Always destroy Azure resource group
|
|
if: always() && inputs.cloudProvider == 'azure'
|
|
shell: bash
|
|
run: |
|
|
az group delete \
|
|
--name ${{ steps.az_resource_group_gen.outputs.res_group_name }} \
|
|
--force-deletion-types Microsoft.Compute/virtualMachineScaleSets \
|
|
--force-deletion-types Microsoft.Compute/virtualMachines \
|
|
--no-wait \
|
|
--yes
|