OPSEXP-2391 Fixup docs of acs-sso-example #1275
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Helm (Enterprise) | |
| on: | |
| pull_request: | |
| branches: | |
| - master | |
| - release/** | |
| - next/** | |
| paths: | |
| - helm/** | |
| - test/postman/helm/** | |
| - .github/workflows/helm* | |
| - .github/actions/charts-as-json/** | |
| push: | |
| branches: | |
| - master | |
| - release/** | |
| concurrency: | |
| group: helm-ent-${{ github.head_ref || github.ref_name }} | |
| cancel-in-progress: true | |
| jobs: | |
| build_vars: | |
| runs-on: ubuntu-latest | |
| if: >- | |
| github.event_name == 'push' | |
| || ( | |
| ! github.event.repository.fork | |
| && github.actor != 'dependabot[bot]' | |
| ) | |
| outputs: | |
| ver_json: ${{ steps.app_versions.outputs.json }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Get charts | |
| id: getcharts | |
| uses: ./.github/actions/charts-as-json | |
| with: | |
| charts-root: helm | |
| - name: Keep only ACS enterprise | |
| id: app_versions | |
| env: | |
| JSON: ${{ toJSON(fromJSON(steps.getcharts.outputs.all)) }} | |
| JQ_FILTER: >- | |
| [inputs | .charts[] | {name: .name, values: .values[]} | |
| | del(. | select(.values=="community_values.yaml")) | |
| | select(.name=="alfresco-content-services")] | |
| run: | | |
| echo "${JSON}" | jq -nc '${{ env.JQ_FILTER }}' | |
| VERS=$(echo "${JSON}" | jq -nc '${{ env.JQ_FILTER }}') | |
| echo "json=$VERS" >> $GITHUB_OUTPUT | |
| helm_integration: | |
| runs-on: alfrescoPub-ubuntu2204-16G-4CPU | |
| timeout-minutes: 10 | |
| needs: | |
| - build_vars | |
| name: ${{ matrix.values }} on ${{ matrix.name }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: ${{ fromJSON(needs.build_vars.outputs.ver_json) }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: azure/setup-helm@v3 | |
| with: | |
| version: "3.12.1" | |
| - name: Login to Docker Hub | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKER_USERNAME }} | |
| password: ${{ secrets.DOCKER_PASSWORD }} | |
| - name: Login to Quay.io | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: quay.io | |
| username: ${{ secrets.QUAY_USERNAME }} | |
| password: ${{ secrets.QUAY_PASSWORD }} | |
| - name: Setup cluster | |
| uses: Alfresco/alfresco-build-tools/.github/actions/[email protected] | |
| with: | |
| ingress-nginx-ref: controller-v1.8.2 | |
| - name: Set nginx ingress config | |
| run: >- | |
| kubectl -n ingress-nginx patch cm ingress-nginx-controller | |
| -p '{"data": {"allow-snippet-annotations":"true"}}' | |
| - name: Create registries auth secret | |
| run: >- | |
| kubectl create secret generic regcred | |
| --from-file=.dockerconfigjson=$HOME/.docker/config.json | |
| --type=kubernetes.io/dockerconfigjson | |
| - name: Check if cgroup v2 workaround is needed | |
| id: cgroupv2-workaround-extra-values | |
| run: | | |
| acs_version=$(echo ${{ matrix.values }} | cut -d'.' -f1,2) | |
| is_affected=$(echo "$acs_version <= 7.2" | bc -l) | |
| if [ "$is_affected" -eq 1 ]; then | |
| echo "Enabling cgroupv v2 workaround" | |
| echo "helm_install_params=--values test/cgroup-v2-workaround-values.yaml" >> "$GITHUB_OUTPUT" | |
| fi | |
| - name: Check if we want additional helm customizations | |
| id: configurable-extra-values | |
| run: | | |
| if [ "${{ matrix.values }}" = "values.yaml" ]; then | |
| echo "Enabling clustered tests" | |
| echo "helm_install_params=--set alfresco-repository.replicaCount=2 --set dtas.additionalArgs[0]='-k not test_renditions'" >> "$GITHUB_OUTPUT" | |
| fi | |
| if [ "${{ matrix.values }}" = "7.0.N_values.yaml" ]; then | |
| echo "Skipping renditions tests on ACS 7.0.N" | |
| echo "helm_install_params=--set dtas.additionalArgs[0]='-k not test_renditions'" >> "$GITHUB_OUTPUT" | |
| fi | |
| - name: Helm install | |
| run: >- | |
| helm dep up ./helm/alfresco-content-services && | |
| helm install acs ./helm/alfresco-content-services | |
| --set global.search.sharedSecret="$(openssl rand -hex 24)" | |
| --set global.known_urls=http://localhost | |
| --set global.alfrescoRegistryPullSecrets=regcred | |
| --wait --timeout 7m0s | |
| --values helm/${{ matrix.name }}/${{ matrix.values }} | |
| --values test/enterprise-integration-test-values.yaml | |
| ${{ steps.cgroupv2-workaround-extra-values.outputs.helm_install_params }} | |
| ${{ steps.configurable-extra-values.outputs.helm_install_params }} | |
| - name: Spit cluster status after install | |
| if: always() | |
| run: | | |
| helm ls --all-namespaces | |
| kubectl get all --all-namespaces | |
| kubectl describe pod | |
| - name: Run Newman tests | |
| uses: nick-fields/retry@7152eba30c6575329ac0576536151aca5a72780e # v.3.0.0 | |
| id: newman | |
| with: | |
| timeout_minutes: 1 | |
| retry_wait_seconds: 20 | |
| max_attempts: 5 | |
| command: >- | |
| docker run --network=host | |
| -v $(pwd)/test/postman:/etc/postman | |
| -t postman/newman run /etc/postman/helm/acs-test-helm-collection.json | |
| --global-var protocol=http --global-var url=localhost | |
| - name: Spit cluster status after newman tests | |
| if: always() && steps.newman.outcome != 'skipped' | |
| run: | | |
| helm ls --all-namespaces | |
| kubectl get all --all-namespaces | |
| kubectl describe pod | |
| - name: Run helm test | |
| id: helm_test | |
| run: helm test acs | |
| - name: Spit cluster status after helm test | |
| if: always() && steps.helm_test.outcome != 'skipped' | |
| run: | | |
| kubectl logs -l app.kubernetes.io/component=dtas --tail=-1 | |
| helm ls --all-namespaces | |
| kubectl get all --all-namespaces | |
| kubectl describe pod |