1d5dec22b9
* Bump to latest k8s versions in ci workflow * Drop deprecated api server metric https://github.com/kubernetes/kubernetes/pull/118959 * test: Extend time for poll for ksm replicas
132 lines
3.6 KiB
YAML
132 lines
3.6 KiB
YAML
name: ci
|
|
on:
|
|
- push
|
|
- pull_request
|
|
env:
|
|
golang-version: '1.21'
|
|
kind-version: 'v0.24.0'
|
|
jobs:
|
|
generate:
|
|
runs-on: ${{ matrix.os }}
|
|
strategy:
|
|
matrix:
|
|
os:
|
|
- macos-latest
|
|
- ubuntu-latest
|
|
name: Generate
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
persist-credentials: false
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: ${{ env.golang-version }}
|
|
- run: make --always-make generate validate && git diff --exit-code
|
|
check-docs:
|
|
runs-on: ubuntu-latest
|
|
name: Check Documentation formatting and links
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
persist-credentials: false
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: ${{ env.golang-version }}
|
|
- run: make check-docs
|
|
lint:
|
|
runs-on: ubuntu-latest
|
|
name: Jsonnet linter
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
persist-credentials: false
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: ${{ env.golang-version }}
|
|
- run: make --always-make lint
|
|
fmt:
|
|
runs-on: ubuntu-latest
|
|
name: Jsonnet formatter
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
persist-credentials: false
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: ${{ env.golang-version }}
|
|
- run: make --always-make fmt && git diff --exit-code
|
|
unit-tests:
|
|
runs-on: ubuntu-latest
|
|
name: Unit tests
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
persist-credentials: false
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: ${{ env.golang-version }}
|
|
- run: make --always-make test
|
|
security-audit:
|
|
runs-on: ubuntu-latest
|
|
name: Run security analysis on manifests
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
persist-credentials: false
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: ${{ env.golang-version }}
|
|
- run: make --always-make kubescape
|
|
e2e-tests:
|
|
name: E2E tests
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
kind-image:
|
|
- 'kindest/node:v1.30.0'
|
|
- 'kindest/node:v1.30.4'
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
persist-credentials: false
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: ${{ env.golang-version }}
|
|
- name: Start kind cluster
|
|
uses: helm/kind-action@v1.10.0
|
|
with:
|
|
version: ${{ env.kind-version }}
|
|
node_image: ${{ matrix.kind-image }}
|
|
wait: 10s # Without default CNI, control-plane doesn't get ready until Cilium is installed
|
|
config: .github/workflows/kind/config.yml
|
|
cluster_name: e2e
|
|
- name: Install kube-router for NetworkPolicy support
|
|
run: |
|
|
kubectl apply -f .github/workflows/kind/kube-router.yaml
|
|
- name: Wait for cluster to finish bootstraping
|
|
run: kubectl wait --for=condition=Ready pods --all --all-namespaces --timeout=300s
|
|
- name: Create kube-prometheus stack
|
|
run: |
|
|
kubectl create -f manifests/setup
|
|
until kubectl get servicemonitors --all-namespaces ; do date; sleep 1; echo ""; done
|
|
kubectl create -f manifests/
|
|
- name: Run tests
|
|
run: |
|
|
export KUBECONFIG="${HOME}/.kube/config"
|
|
make test-e2e
|
|
|
|
# Added to summarize the matrix and allow easy branch protection rules setup
|
|
e2e-tests-result:
|
|
name: End-to-End Test Results
|
|
if: always()
|
|
needs:
|
|
- e2e-tests
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Mark the job as a success
|
|
if: needs.e2e-tests.result == 'success'
|
|
run: exit 0
|
|
- name: Mark the job as a failure
|
|
if: needs.e2e-tests.result != 'success'
|
|
run: exit 1
|