kustomize-controller/.github/workflows/e2e.yaml at 42990a3e8505a34916fd2d20c2ec07f1acad14d1 · fluxcd/kustomize-controller · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
name: e2e
on:
  pull_request:
  push:
    branches:
      - 'main'
      - 'release/**'
jobs:
  test:
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - name: Checkout
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
      - name: Setup Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
        with:
          go-version: 1.26.x
          cache-dependency-path: |
            **/go.sum
            **/go.mod
      - name: Enable integration tests
        # Only run integration tests for main branch
        if: github.ref == 'refs/heads/main'
        run: |
          echo 'GO_TEST_ARGS=-tags integration' >> $GITHUB_ENV
      - name: Run controller tests
        env:
          TEST_AZURE_CLIENT_ID: ${{ secrets.TEST_AZURE_CLIENT_ID }}
          TEST_AZURE_TENANT_ID: ${{ secrets.TEST_AZURE_TENANT_ID }}
          TEST_AZURE_CLIENT_SECRET: ${{ secrets.TEST_AZURE_CLIENT_SECRET }}
          TEST_AZURE_VAULT_URL: ${{ secrets.TEST_AZURE_VAULT_URL }}
          TEST_AZURE_VAULT_KEY_NAME: ${{ secrets.TEST_AZURE_VAULT_KEY_NAME }}
          TEST_AZURE_VAULT_KEY_VERSION: ${{ secrets.TEST_AZURE_VAULT_KEY_VERSION }}
        run: make test
      - name: Check if working tree is dirty
        run: make verify
  kind:
    runs-on: ubuntu-latest
    permissions:
      contents: read # for reading the repository code.
    steps:
      - name: Test suite setup
        uses: fluxcd/gha-workflows/.github/actions/setup-kubernetes@v0.11.0
        with:
          go-version: 1.26.x
      - name: Build container image
        run: |
          make docker-build IMG=test/kustomize-controller:latest \
            BUILD_PLATFORMS=linux/amd64 \
            BUILD_ARGS="--load"
      - name: Load test image
        run: kind load docker-image test/kustomize-controller:latest
      - name: Install CRDs
        run: make install
      - name: Run default status test
        run: |
          kubectl apply -f config/testdata/status-defaults
          RESULT=$(kubectl get kustomization status-defaults -o go-template={{.status}})
          EXPECTED='map[observedGeneration:-1]'
          if [ "${RESULT}" != "${EXPECTED}" ] ; then
            echo -e "${RESULT}\n\ndoes not equal\n\n${EXPECTED}"
            exit 1
          fi
          kubectl delete -f config/testdata/status-defaults
      - name: Deploy controllers
        run: |
          make dev-deploy IMG=test/kustomize-controller:latest
          kubectl -n kustomize-system rollout status deploy/source-controller --timeout=1m
          kubectl -n kustomize-system rollout status deploy/kustomize-controller --timeout=1m
      - parallel:
          - name: Run managed-fields tests
            run: |
              kubectl create ns managed-fields
              kustomize build github.com/stefanprodan/podinfo//kustomize?ref=6.3.5 > /tmp/podinfo.yaml
              kubectl -n managed-fields apply -f /tmp/podinfo.yaml
              kubectl -n managed-fields apply -f ./config/testdata/managed-fields
              kubectl -n managed-fields wait kustomization/podinfo --for=condition=ready --timeout=4m
              OUTDATA=$(kubectl -n managed-fields get deploy podinfo --show-managed-fields -oyaml)
              if echo "$OUTDATA" | grep -q "kubectl";then
                echo "kubectl client-side manager not removed"
                exit 1
              fi
              kubectl -n managed-fields apply --server-side --force-conflicts -f /tmp/podinfo.yaml
              kubectl -n managed-fields annotate --overwrite kustomization/podinfo reconcile.fluxcd.io/requestedAt="$(date +%s)"
              kubectl -n managed-fields wait kustomization/podinfo --for=condition=ready --timeout=4m
              OUTDATA=$(kubectl -n managed-fields get deploy podinfo --show-managed-fields -oyaml)
              if echo "$OUTDATA" | grep -q "kubectl";then
                echo "kubectl server-side manager not removed"
                exit 1
              fi
              kubectl delete ns managed-fields
          - name: Run overlays and dependencies tests
            run: |
              echo ">>> Run overlays tests"
              kubectl -n kustomize-system apply -k ./config/testdata/overlays
              kubectl -n kustomize-system wait kustomizations/webapp-staging --for=condition=ready --timeout=4m
              kubectl -n kustomize-system wait kustomizations/webapp-production --for=condition=ready --timeout=4m
              echo ">>> Run dependencies tests"
              kubectl -n kustomize-system apply -k ./config/testdata/dependencies
              kubectl -n kustomize-system wait kustomizations/common --for=condition=ready --timeout=4m
              kubectl -n kustomize-system wait kustomizations/backend --for=condition=ready --timeout=4m
              kubectl -n kustomize-system wait kustomizations/frontend --for=condition=ready --timeout=4m
          - name: Run impersonation and OCI tests
            run: |
              echo ">>> Run impersonation tests"
              kubectl -n impersonation apply -f ./config/testdata/impersonation
              kubectl -n impersonation wait kustomizations/podinfo --for=condition=ready --timeout=4m
              kubectl -n impersonation delete kustomizations/podinfo
              until kubectl -n impersonation get deploy/podinfo 2>&1 | grep NotFound ; do sleep 2; done
              echo ">>> Run OCI tests"
              kubectl create ns oci
              kubectl -n oci apply -f ./config/testdata/oci
              kubectl -n oci wait kustomizations/oci --for=condition=ready --timeout=4m
      - name: Logs
        if: always()
        continue-on-error: true
        run: |
          kubectl -n kustomize-system logs deploy/source-controller
          kubectl -n kustomize-system logs deploy/kustomize-controller
      - name: Debug failure
        if: failure()
        run: |
          kubectl -n kustomize-system get gitrepositories -oyaml
          kubectl -n kustomize-system get kustomizations -oyaml
          kubectl -n kustomize-system get all
          kubectl -n oci get ocirepository/oci -oyaml || true
          kubectl -n oci get kustomization/oci -oyaml || true
  sops-openbao:
    runs-on: ubuntu-latest
    permissions:
      contents: read # for reading the repository code.
    steps:
      - name: Test suite setup
        uses: fluxcd/gha-workflows/.github/actions/setup-kubernetes@v0.11.0
        with:
          go-version: 1.26.x
      - name: Setup SOPS
        uses: fluxcd/pkg/actions/sops@main
      - name: Setup Flux CLI
        uses: fluxcd/flux2/action@main
      - name: Build container image
        run: |
          make docker-build IMG=test/kustomize-controller:latest \
            BUILD_PLATFORMS=linux/amd64 \
            BUILD_ARGS="--load"
      - name: Run SOPS OpenBao/Vault multi-cluster e2e
        # Reuses the "kind" cluster the setup action created and adds a second one.
        run: hack/ci/sops-openbao-e2e.sh
        env:
          IMG: test/kustomize-controller:latest