Skip to content

Bump sigstore/cosign-installer from 4.0.0 to 4.1.1 #1297

Bump sigstore/cosign-installer from 4.0.0 to 4.1.1

Bump sigstore/cosign-installer from 4.0.0 to 4.1.1 #1297

name: Integration Tests with Fakeserver
on:
push:
branches:
- main
pull_request:
branches:
- main
permissions:
packages: write
jobs:
test-deploy-onboard-fakeserver:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v6
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Docker meta
id: meta
uses: docker/metadata-action@v5
- name: Log in to GitHub Container Registry
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Build and push Docker image
id: build-and-push
uses: docker/build-push-action@v6
with:
context: .
push: true
platforms: linux/amd64
build-args: |
VERSION=${{ steps.meta.outputs.tags }}
tags: |
ghcr.io/${{ github.repository }}:${{ steps.meta.outputs.tags }}
- name: Install kubectl
uses: azure/setup-kubectl@v4
with:
version: "v1.24.0"
- name: Install Minikube
run: |
curl -LO https://storage.googleapis.com/minikube/releases/latest/minikube-linux-amd64
sudo install minikube-linux-amd64 /usr/local/bin/minikube
- name: Start Minikube
run: |
minikube start --driver=docker
- name: Wait for Minikube to be ready
run: |
minikube kubectl -- get nodes
- name: Set up Helm
uses: azure/setup-helm@v4.2.0
with:
version: "v3.19.0"
- name: Package Helm chart
run: |
helm package cloud-operator && kubectl create ns illumio-cloud
- name: Install Integration Test Dependencies
run: |
cd ./fakeserver && go mod tidy && go mod download
- name: Install Helm chart and Deploy Operator
env:
ONBOARDING_CLIENT_ID: "client_id_1"
ONBOARDING_CLIENT_SECRET: "client_secret_1"
TLS_SKIP_VERIFY: true
ONBOARDING_ENDPOINT: "https://192.168.49.1:50053/api/v1/k8s_cluster/onboard"
TOKEN_ENDPOINT: "https://192.168.49.1:50053/api/v1/k8s_cluster/authenticate"
run: |
helm upgrade --install illumio cloud-operator-*.tgz \
--namespace illumio-cloud \
--create-namespace \
--set image.repository=ghcr.io/${{ github.repository }} \
--set image.tag=${{ steps.meta.outputs.tags }} \
--set image.pullPolicy=Always \
--set onboardingSecret.clientId=$ONBOARDING_CLIENT_ID \
--set onboardingSecret.clientSecret=$ONBOARDING_CLIENT_SECRET \
--set env.onboardingEndpoint=$ONBOARDING_ENDPOINT \
--set env.tokenEndpoint=$TOKEN_ENDPOINT \
--set env.tlsSkipVerify=$TLS_SKIP_VERIFY \
- name: Run Integration Tests
run: |
# Run your test against the fake server
kubectl wait --for=condition=ready pod -l app=cloud-operator -n illumio-cloud --timeout=300s && go test -v ./fakeserver/...
- name: Fetch Kubernetes Pod logs
if: success() || failure()
run: |
kubectl logs -l app=cloud-operator -n illumio-cloud