122 lines
4.9 KiB
YAML
122 lines
4.9 KiB
YAML
name: test-cli-ui
|
|
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
artifact-name:
|
|
type: string
|
|
required: true
|
|
|
|
permissions:
|
|
contents: read
|
|
actions: read
|
|
|
|
jobs:
|
|
bats:
|
|
runs-on: ${{ fromJSON(vars.RUNNER) }}
|
|
name: CLI tests
|
|
steps:
|
|
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
|
|
- name: Import GPG key for Boundary pass keystore
|
|
id: import_gpg
|
|
uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6.3.0
|
|
with:
|
|
gpg_private_key: ${{ secrets.ENOS_GPG_PRIVATE_KEY }}
|
|
passphrase: ${{ secrets.ENOS_GPG_PASSPHRASE }}
|
|
- name: Trust the pass keystore GPG key
|
|
id: trust_gpg
|
|
run: |
|
|
gpg -a --encrypt -r ${{ secrets.ENOS_GPG_UID }} --trust-model always
|
|
echo "trusted-key ${{ secrets.ENOS_GPG_UID }}" >> ~/.gnupg/gpg.conf
|
|
cat ~/.gnupg/gpg.conf
|
|
- name: Set up Bats CLI UI tests dependency cache
|
|
id: dep-cache
|
|
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
|
|
with:
|
|
path: /tmp/bats-cli-ui-deps
|
|
key: enos-bats-cli-ui-deps-jq-1.6-password-store-1.7.4-vault-1.12.2
|
|
- name: Set up Node for Bats install
|
|
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
|
|
with:
|
|
node-version: 16
|
|
- name: Install Bats via NPM
|
|
# Use npm so this workflow is portable on multiple runner distros
|
|
run: npm install --location=global bats
|
|
- name: Download jq for Bats CLI UI tests
|
|
if: steps.dep-cache.outputs.cache-hit != 'true'
|
|
# NOTE: if you update the jq version make sure to update the dep cache key
|
|
run: |
|
|
mkdir -p /tmp/bats-cli-ui-deps
|
|
wget https://github.com/stedolan/jq/releases/download/jq-1.6/jq-linux64 -O /tmp/bats-cli-ui-deps/jq-bin
|
|
- name: Install jq for Bats CLI UI tests
|
|
run: |
|
|
chmod +x /tmp/bats-cli-ui-deps/jq-bin
|
|
sudo cp /tmp/bats-cli-ui-deps/jq-bin /usr/local/bin/jq
|
|
- name: Download and unzip pass for Boundary keyring
|
|
if: steps.dep-cache.outputs.cache-hit != 'true'
|
|
# NOTE: if you update the password store version make sure to update the dep cache key
|
|
run: |
|
|
mkdir -p /tmp/bats-cli-ui-deps/pass
|
|
wget https://github.com/zx2c4/password-store/archive/refs/tags/1.7.4.tar.gz -O /tmp/bats-cli-ui-deps/pass/pass.tar.gz
|
|
cd /tmp/bats-cli-ui-deps/pass
|
|
tar -xvf pass.tar.gz
|
|
- name: Install pass for Boundary keyring
|
|
run: |
|
|
cd /tmp/bats-cli-ui-deps/pass/password-store-1.7.4
|
|
sudo make install
|
|
pass init ${{ secrets.ENOS_GPG_UID }}
|
|
- name: Download Vault AMD64 binary for integration testing
|
|
if: steps.dep-cache.outputs.cache-hit != 'true'
|
|
run: |
|
|
wget https://releases.hashicorp.com/vault/1.12.2/vault_1.12.2_linux_amd64.zip -O /tmp/bats-cli-ui-deps/vault.zip
|
|
- name: Install Vault
|
|
run: |
|
|
unzip /tmp/bats-cli-ui-deps/vault.zip -d /usr/local/bin
|
|
- name: Download Linux AMD64 Boundary bundle
|
|
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
|
|
with:
|
|
name: ${{ inputs.artifact-name }}
|
|
path: /tmp
|
|
- name: Unpack boundary bundle
|
|
run: |
|
|
unzip -o /tmp/${{ inputs.artifact-name }} -d /usr/local/bin
|
|
rm /tmp/${{ inputs.artifact-name }}
|
|
- name: Versions
|
|
run: |
|
|
echo "go version:"
|
|
go version
|
|
echo "bats version:"
|
|
bats --version
|
|
echo "jq version:"
|
|
jq --version
|
|
echo "gpg version:"
|
|
gpg --version
|
|
echo "pass version:"
|
|
pass --version
|
|
echo "bash version:"
|
|
bash --version
|
|
echo "boundary version:"
|
|
boundary version
|
|
echo "vault version:"
|
|
vault version
|
|
- name: Run cli bats tests
|
|
run: |
|
|
export VAULT_ADDR=http://127.0.0.1:8200
|
|
export VAULT_TOKEN=boundarytok
|
|
make -C internal/tests/cli test-vault-up
|
|
until vault status; do docker container inspect boundary-cli-tests-vault &> /dev/null || exit 255; sleep 1; done
|
|
make test-cli
|
|
- name: Cleanup
|
|
if: success() || failure()
|
|
run: |
|
|
make -C internal/tests/cli test-vault-down
|
|
- name: Send Slack message
|
|
if: ${{ failure() }}
|
|
uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # v2.1.1
|
|
with:
|
|
method: chat.postMessage
|
|
token: ${{ secrets.SLACK_BOUNDARY_TEST_BOT_TOKEN }}
|
|
payload: |
|
|
channel: ${{ secrets.SLACK_BOUNDARY_TEST_BOT_CHANNEL_ID }}
|
|
text: ":x: bats tests failed: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}\n*Branch:* ${{ github.repository }}:${{ github.head_ref || github.ref_name }}"
|