Michael Li
ef3954c561
* test(e2e): Add a docker test runner * !fixup: Self-review * !fixup: Make vault address compatible with local runs * !fixup: Remove unnecessary modification * !fixup: Remove arm64 requirement * !fixup: extend timeout
87 lines
2.8 KiB
Bash
Executable File
87 lines
2.8 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: MPL-2.0
|
|
|
|
# This script is used for setting up and executing boundary e2e tests. It sets
|
|
# up `pass` as a password store (linux) so that boundary can use it to store
|
|
# auth tokens and installs the latest vault cli before executing the desired tests.
|
|
|
|
set -eux -o pipefail
|
|
|
|
# Install dependencies
|
|
apt update
|
|
# unzip is used to unzip boundary.zip
|
|
# pass is used to store the auth token from `boundary authenticate``
|
|
# lsb-release is used for adding the hashicorp apt source
|
|
apt install unzip pass lsb-release -y
|
|
|
|
# Create a GPG key
|
|
export KEY_PW=boundary
|
|
gpg --generate-key --batch <<eoGpgConf
|
|
%echo Started!
|
|
Key-Type: default
|
|
Key-Length: default
|
|
Subkey-Type: default
|
|
Name-Real: boundary
|
|
Name-Comment: default
|
|
Name-Email: default
|
|
Expire-Date: 0
|
|
Passphrase: $KEY_PW
|
|
%commit
|
|
%echo Done.
|
|
eoGpgConf
|
|
|
|
# Enable gpg-preset-passphrase so that key passwords can be saved
|
|
echo "allow-preset-passphrase" >> ~/.gnupg/gpg-agent.conf
|
|
gpg-connect-agent reloadagent /bye &>/dev/null
|
|
|
|
# Get information about the created keys
|
|
export lines=$(gpg --list-secret-keys --with-colons --with-keygrip)
|
|
export KEY_ID=""
|
|
while read -r line
|
|
do
|
|
# Save the first key id to be used later
|
|
if [[ $line =~ "fpr"* ]]; then
|
|
if [[ $KEY_ID == "" ]]; then
|
|
KEY_ID="$(echo "$line" | sed -r 's/fpr|://g')"
|
|
fi
|
|
fi
|
|
|
|
# Cache the passphrases for the keys so passwords do not need to be entered
|
|
if [[ $line =~ "grp"* ]]; then
|
|
export KEYGRIP_ID="$(echo "$line" | sed -r 's/grp|://g')"
|
|
/usr/lib/gnupg/gpg-preset-passphrase --preset -P $KEY_PW $KEYGRIP_ID
|
|
fi
|
|
done <<< $lines
|
|
|
|
# Trust the key
|
|
touch /tmp/test.txt
|
|
gpg -a --encrypt -r $KEY_ID --trust-model always --batch --yes /tmp/test.txt
|
|
echo "trusted-key $KEY_ID" >> ~/.gnupg/gpg.conf
|
|
|
|
# Initialize the password store
|
|
pass init $KEY_ID &>/dev/null
|
|
|
|
# Install the vault cli
|
|
wget -O- https://apt.releases.hashicorp.com/gpg | gpg --batch --yes --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
|
|
export lines=$(gpg --no-default-keyring --keyring /usr/share/keyrings/hashicorp-archive-keyring.gpg --fingerprint --with-colons)
|
|
while read -r line
|
|
do
|
|
if [[ $line =~ "fpr"* ]]; then
|
|
if [[ "$(echo $line | sed -r 's/fpr|://g')" != "798AEC654E5C15428C8E42EEAA16FCBCA621E701" ]]; then
|
|
echo "HashiCorp key fingerprint does not match expected"
|
|
exit 1
|
|
else
|
|
break
|
|
fi
|
|
fi
|
|
done <<< $lines
|
|
echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | tee /etc/apt/sources.list.d/hashicorp.list
|
|
apt update
|
|
apt install vault
|
|
|
|
# Run Tests
|
|
unzip /boundary.zip -d /usr/local/bin/
|
|
cd /src/boundary
|
|
go test -v -count=1 $TEST_PACKAGE -timeout $TEST_TIMEOUT | tee /testlogs/test-e2e-${TEST_PACKAGE##*/}.log
|