mirror of
https://github.com/Telecominfraproject/wlan-testing.git
synced 2025-11-02 20:07:57 +00:00
[WIFI-7229] Integrate virtual AP in Docker Compose testing workflow (#426)
* Integrate virtual AP in Docker Compose testing workflow and switch to CLI testing Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Fix syntax error Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Fix another syntax error Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Execute command over SSH and fix CLI permissions Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Add shared AWS variables and try to escape secret Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Auto-accept new SSH host keys Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Fix SSH key permissions Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Use curl and switch to raw repository files Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Add serial to CLI calls Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Get mac address of virtual AP dynamically Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Fix step condition syntax Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Add silent option to curl Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Re-apply AP config after starting firstcontact service Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Remove duplicate quotes Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Use local AP config file and add choice to test all microservices Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org> * Wait before re-applying config modifications to avoid overwrite Signed-off-by: Johann Hoffmann <johann.hoffmann@mailbox.org>
This commit is contained in:
Johann Hoffmann
711
.github/workflows/ow_docker-compose.yml
vendored
711
.github/workflows/ow_docker-compose.yml
vendored
@@ -1,26 +1,14 @@
|
|||||||
name: 2.x testing with Docker Compose deployment
|
name: 2.x testing with Docker Compose deployment
|
||||||
|
|
||||||
env:
|
env:
|
||||||
# AWS credentials
|
|
||||||
AWS_EKS_NAME: tip-wlan-main
|
AWS_EKS_NAME: tip-wlan-main
|
||||||
AWS_DEFAULT_OUTPUT: json
|
|
||||||
AWS_DEFAULT_REGION: us-east-2
|
|
||||||
AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
|
AWS_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_ID }}
|
||||||
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_CLIENT_ID }}
|
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_CLIENT_ID }}
|
||||||
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_CLIENT_KEY }}
|
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_CLIENT_KEY }}
|
||||||
|
|
||||||
on:
|
on:
|
||||||
repository_dispatch:
|
|
||||||
types: [openwifi-sdk-pr]
|
|
||||||
workflow_dispatch:
|
workflow_dispatch:
|
||||||
inputs:
|
inputs:
|
||||||
testbeds:
|
|
||||||
default: 'basic-05'
|
|
||||||
description: 'Testbed(s) to test'
|
|
||||||
required: false
|
|
||||||
marker_expression:
|
|
||||||
default: 'sdk_restapi'
|
|
||||||
description: 'Markers expression that will be passed to the pytest command.'
|
|
||||||
required: false
|
|
||||||
owgw_version:
|
owgw_version:
|
||||||
default: 'master'
|
default: 'master'
|
||||||
description: 'OpenWIFI Gateway version to be deployed.'
|
description: 'OpenWIFI Gateway version to be deployed.'
|
||||||
@@ -48,6 +36,15 @@ on:
|
|||||||
id:
|
id:
|
||||||
description: 'run identifier'
|
description: 'run identifier'
|
||||||
required: false
|
required: false
|
||||||
|
microservice:
|
||||||
|
description: 'OpenWIFI microservice to be tested'
|
||||||
|
required: true
|
||||||
|
type: choice
|
||||||
|
options:
|
||||||
|
- owgw
|
||||||
|
- owsec
|
||||||
|
- owfms
|
||||||
|
- all
|
||||||
|
|
||||||
defaults:
|
defaults:
|
||||||
run:
|
run:
|
||||||
@@ -58,23 +55,14 @@ jobs:
|
|||||||
name: Workflow ID Provider
|
name: Workflow ID Provider
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: ${{github.event.inputs.id}}
|
- name: ${{ github.event.inputs.id }}
|
||||||
run: echo run identifier ${{ inputs.id }}
|
run: echo run identifier ${{ inputs.id }}
|
||||||
|
|
||||||
build:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
needs: id
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@v2
|
|
||||||
- name: build and push Docker image
|
|
||||||
uses: ./.github/actions/build-and-push-docker
|
|
||||||
with:
|
|
||||||
registry: tip-tip-wlan-cloud-docker-repo.jfrog.io
|
|
||||||
registry_user: wlan-testing-cicd
|
|
||||||
registry_password: ${{ secrets.DOCKER_USER_PASSWORD }}
|
|
||||||
|
|
||||||
deploy-controller:
|
deploy-controller:
|
||||||
name: Deploy OpenWIFI Cloud SDK
|
name: Deploy OpenWIFI Cloud SDK
|
||||||
|
env:
|
||||||
|
AWS_DEFAULT_OUTPUT: json
|
||||||
|
AWS_DEFAULT_REGION: us-east-2
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
needs: id
|
needs: id
|
||||||
outputs:
|
outputs:
|
||||||
@@ -82,371 +70,352 @@ jobs:
|
|||||||
sec_url: ${{ steps.sec_url.outputs.value }}
|
sec_url: ${{ steps.sec_url.outputs.value }}
|
||||||
namespace: ${{ steps.namespace.outputs.value }}
|
namespace: ${{ steps.namespace.outputs.value }}
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout wlan-testing repo
|
- name: Checkout wlan-testing repo
|
||||||
uses: actions/checkout@v2
|
uses: actions/checkout@v2
|
||||||
with:
|
with:
|
||||||
path: wlan-testing
|
path: wlan-testing
|
||||||
|
|
||||||
- name: Prepare certificates from secrets
|
- name: Prepare certificates from secrets
|
||||||
working-directory: wlan-testing/docker-compose/openwifi
|
working-directory: wlan-testing/docker-compose/openwifi
|
||||||
run: |
|
run: |
|
||||||
echo "${{ secrets.DIGICERT_CERT }}" | base64 -d > websocket-cert.pem
|
echo "${{ secrets.DIGICERT_CERT }}" | base64 -d > websocket-cert.pem
|
||||||
echo "${{ secrets.DIGICERT_KEY }}" | base64 -d > websocket-key.pem
|
echo "${{ secrets.DIGICERT_KEY }}" | base64 -d > websocket-key.pem
|
||||||
|
|
||||||
- name: Fetch kubeconfig
|
- name: Fetch kubeconfig
|
||||||
run: |
|
run: |
|
||||||
aws eks update-kubeconfig --name ${{ env.AWS_EKS_NAME }}
|
aws eks update-kubeconfig --name ${{ env.AWS_EKS_NAME }}
|
||||||
|
|
||||||
- name: Set namespace output
|
- name: Set namespace output
|
||||||
id: namespace
|
id: namespace
|
||||||
run: echo "::set-output name=value::ow-docker-compose-${{ github.run_id }}"
|
run: echo "::set-output name=value::ow-docker-compose-${{ github.run_id }}"
|
||||||
|
|
||||||
- name: Set gateway URL output
|
- name: Set gateway URL output
|
||||||
id: gateway_url
|
id: gateway_url
|
||||||
run: echo "::set-output name=value::ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build"
|
run: echo "::set-output name=value::ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build"
|
||||||
|
|
||||||
- name: Set sec service URL output
|
- name: Set sec service URL output
|
||||||
id: sec_url
|
id: sec_url
|
||||||
run: echo "::set-output name=value::ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build"
|
run: echo "::set-output name=value::ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build"
|
||||||
|
|
||||||
- name: Create Kubernetes namespace and secret
|
- name: Create Kubernetes namespace and secret
|
||||||
working-directory: wlan-testing/docker-compose/openwifi
|
working-directory: wlan-testing/docker-compose/openwifi
|
||||||
run: |
|
run: |
|
||||||
kubectl create ns ow-docker-compose-${{ github.run_id }}
|
kubectl create ns ow-docker-compose-${{ github.run_id }}
|
||||||
kubectl create secret generic tip-cicd-wildcard-certs --from-file=websocket-cert.pem=websocket-cert.pem --from-file=websocket-key.pem=websocket-key.pem -n ow-docker-compose-${{ github.run_id }}
|
kubectl create secret generic tip-cicd-wildcard-certs --from-file=websocket-cert.pem=websocket-cert.pem --from-file=websocket-key.pem=websocket-key.pem -n ow-docker-compose-${{ github.run_id }}
|
||||||
|
|
||||||
- name: Deploy OpenWIFI Cloud SDK
|
- name: Deploy OpenWIFI Cloud SDK
|
||||||
working-directory: wlan-testing/docker-compose/openwifi
|
working-directory: wlan-testing/docker-compose/openwifi
|
||||||
env:
|
env:
|
||||||
RTTY_TOKEN: ${{ secrets.RTTY_TOKEN }}
|
RTTY_TOKEN: ${{ secrets.RTTY_TOKEN }}
|
||||||
OWSEC_AUTHENTICATION_DEFAULT_USERNAME: ${{ secrets.UCENTRALGW_AUTH_USERNAME }}
|
OWSEC_AUTHENTICATION_DEFAULT_USERNAME: ${{ secrets.UCENTRALGW_AUTH_USERNAME }}
|
||||||
OWSEC_AUTHENTICATION_DEFAULT_PASSWORD: ${{ secrets.UCENTRALGW_AUTH_PASSWORD }}
|
OWSEC_AUTHENTICATION_DEFAULT_PASSWORD: ${{ secrets.UCENTRALGW_AUTH_PASSWORD }}
|
||||||
OWFMS_S3_SECRET: ${{ secrets.UCENTRALFMS_S3_SECRET }}
|
OWFMS_S3_SECRET: ${{ secrets.UCENTRALFMS_S3_SECRET }}
|
||||||
OWFMS_S3_KEY: ${{ secrets.UCENTRALFMS_S3_KEY }}
|
OWFMS_S3_KEY: ${{ secrets.UCENTRALFMS_S3_KEY }}
|
||||||
run: |
|
run: |
|
||||||
cat <<EOF | kubectl create -f - -n ow-docker-compose-${{ github.run_id }}
|
cat <<EOF | kubectl create -f - -n ow-docker-compose-${{ github.run_id }}
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: Service
|
kind: Service
|
||||||
metadata:
|
metadata:
|
||||||
name: ow-docker-compose-${{ github.run_id }}
|
name: ow-docker-compose-${{ github.run_id }}
|
||||||
annotations:
|
annotations:
|
||||||
service.beta.kubernetes.io/aws-load-balancer-type: "nlb-ip"
|
service.beta.kubernetes.io/aws-load-balancer-type: "nlb-ip"
|
||||||
service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing
|
service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing
|
||||||
external-dns.alpha.kubernetes.io/hostname: ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build
|
external-dns.alpha.kubernetes.io/hostname: ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build
|
||||||
service.beta.kubernetes.io/aws-load-balancer-backend-protocol: ssl
|
service.beta.kubernetes.io/aws-load-balancer-backend-protocol: ssl
|
||||||
service.beta.kubernetes.io/aws-load-balancer-ssl-cert: "arn:aws:acm:us-east-2:289708231103:certificate/bfa89c7a-5b64-4a8a-bcfe-ffec655b5285"
|
service.beta.kubernetes.io/aws-load-balancer-ssl-cert: "arn:aws:acm:us-east-2:289708231103:certificate/bfa89c7a-5b64-4a8a-bcfe-ffec655b5285"
|
||||||
service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "16002,16003,443,16001,16004,16005,8443,5912,5913"
|
service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "16002,16003,443,16001,16004,16005,8443,5912,5913"
|
||||||
labels:
|
labels:
|
||||||
app: ow-docker-compose-${{ github.run_id }}
|
app: ow-docker-compose-${{ github.run_id }}
|
||||||
spec:
|
spec:
|
||||||
selector:
|
selector:
|
||||||
app: ow-docker-compose-${{ github.run_id }}
|
app: ow-docker-compose-${{ github.run_id }}
|
||||||
type: LoadBalancer
|
type: LoadBalancer
|
||||||
ports:
|
ports:
|
||||||
- name: owgw-websocket
|
- name: owgw-websocket
|
||||||
port: 15002
|
port: 15002
|
||||||
targetPort: 15002
|
targetPort: 15002
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
- name: owgw-restapi
|
- name: owgw-restapi
|
||||||
port: 16002
|
port: 16002
|
||||||
targetPort: 16002
|
targetPort: 16002
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
- name: owgw-alivecheck
|
- name: owgw-alivecheck
|
||||||
port: 16102
|
port: 16102
|
||||||
targetPort: 16102
|
targetPort: 16102
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
- name: owgw-fileupload
|
- name: owgw-fileupload
|
||||||
port: 16003
|
port: 16003
|
||||||
targetPort: 16003
|
targetPort: 16003
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
- name: owgw-ui-http
|
- name: owgw-ui-http
|
||||||
port: 80
|
port: 80
|
||||||
targetPort: 80
|
targetPort: 80
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
- name: owgw-ui-https
|
- name: owgw-ui-https
|
||||||
port: 443
|
port: 443
|
||||||
targetPort: 443
|
targetPort: 443
|
||||||
- name: owsec-restapi
|
- name: owsec-restapi
|
||||||
port: 16001
|
port: 16001
|
||||||
targetPort: 16001
|
targetPort: 16001
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
- name: owsec-alivecheck
|
- name: owsec-alivecheck
|
||||||
port: 16101
|
port: 16101
|
||||||
targetPort: 16101
|
targetPort: 16101
|
||||||
- name: owfms-restapi
|
- name: owfms-restapi
|
||||||
port: 16004
|
port: 16004
|
||||||
targetPort: 16004
|
targetPort: 16004
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
- name: owfms-alivecheck
|
- name: owfms-alivecheck
|
||||||
port: 16104
|
port: 16104
|
||||||
targetPort: 16104
|
targetPort: 16104
|
||||||
- name: owprov-restapi
|
- name: owprov-restapi
|
||||||
port: 16005
|
port: 16005
|
||||||
targetPort: 16005
|
targetPort: 16005
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
- name: owprov-alivecheck
|
- name: owprov-alivecheck
|
||||||
port: 16105
|
port: 16105
|
||||||
targetPort: 16105
|
targetPort: 16105
|
||||||
- name: owprov-ui-http
|
- name: owprov-ui-http
|
||||||
port: 8080
|
port: 8080
|
||||||
targetPort: 8080
|
targetPort: 8080
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
- name: owprov-ui-https
|
- name: owprov-ui-https
|
||||||
port: 8443
|
port: 8443
|
||||||
targetPort: 8443
|
targetPort: 8443
|
||||||
- name: rttys-dev
|
- name: rttys-dev
|
||||||
port: 5912
|
port: 5912
|
||||||
targetPort: 5912
|
targetPort: 5912
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
- name: rttys-user
|
- name: rttys-user
|
||||||
port: 5913
|
port: 5913
|
||||||
targetPort: 5913
|
targetPort: 5913
|
||||||
---
|
---
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: Pod
|
kind: Pod
|
||||||
metadata:
|
metadata:
|
||||||
name: ow-docker-compose-${{ github.run_id }}
|
name: ow-docker-compose-${{ github.run_id }}
|
||||||
annotations:
|
annotations:
|
||||||
cluster-autoscaler.kubernetes.io/safe-to-evict: "false"
|
cluster-autoscaler.kubernetes.io/safe-to-evict: "false"
|
||||||
labels:
|
labels:
|
||||||
app: ow-docker-compose-${{ github.run_id }}
|
app: ow-docker-compose-${{ github.run_id }}
|
||||||
spec:
|
spec:
|
||||||
volumes:
|
volumes:
|
||||||
- name: client-certs
|
|
||||||
emptyDir: {}
|
|
||||||
- name: deploy-repo
|
|
||||||
emptyDir: {}
|
|
||||||
- name: tip-cicd-wildcard-certs
|
|
||||||
secret:
|
|
||||||
secretName: tip-cicd-wildcard-certs
|
|
||||||
containers:
|
|
||||||
- name: docker-daemon
|
|
||||||
image: docker:dind
|
|
||||||
env:
|
|
||||||
- name: DOCKER_TLS_CERTDIR
|
|
||||||
value: "/certs"
|
|
||||||
securityContext:
|
|
||||||
privileged: true
|
|
||||||
volumeMounts:
|
|
||||||
- name: client-certs
|
- name: client-certs
|
||||||
mountPath: /certs/client
|
emptyDir: {}
|
||||||
- name: deploy-repo
|
- name: deploy-repo
|
||||||
mountPath: /wlan-cloud-ucentral-deploy
|
emptyDir: {}
|
||||||
|
|
||||||
- name: docker-compose-deployment
|
|
||||||
image: docker/compose:latest
|
|
||||||
command: ["/bin/sh", "-c"]
|
|
||||||
args: ["apk add git; wget https://raw.githubusercontent.com/Telecominfraproject/wlan-testing/master/docker-compose/openwifi/deploy.sh; chmod +x deploy.sh; sh deploy.sh"]
|
|
||||||
env:
|
|
||||||
- name: DOCKER_TLS_VERIFY
|
|
||||||
value: "true"
|
|
||||||
- name: DOCKER_HOST
|
|
||||||
value: "127.0.0.1:2376"
|
|
||||||
- name: DOCKER_CERT_PATH
|
|
||||||
value: "/certs/client"
|
|
||||||
- name: OWGW_TAG
|
|
||||||
value: "${{ github.event.inputs.owgw_version || github.event.client_payload.owgw_tag }}"
|
|
||||||
- name: OWGWUI_TAG
|
|
||||||
value: "${{ github.event.inputs.owgwui_version || github.event.client_payload.owgwui_tag }}"
|
|
||||||
- name: OWSEC_TAG
|
|
||||||
value: "${{ github.event.inputs.owsec_version || github.event.client_payload.owsec_tag }}"
|
|
||||||
- name: OWFMS_TAG
|
|
||||||
value: "${{ github.event.inputs.owfms_version || github.event.client_payload.owfms_tag }}"
|
|
||||||
- name: OWPROV_TAG
|
|
||||||
value: "${{ github.event.inputs.owprov_version || github.event.client_payload.owprov_tag }}"
|
|
||||||
- name: OWPROVUI_TAG
|
|
||||||
value: "${{ github.event.inputs.owprovui_version || github.event.client_payload.owprovui_tag }}"
|
|
||||||
- name: INTERNAL_OWGW_HOSTNAME
|
|
||||||
value: "owgw.wlan.local"
|
|
||||||
- name: INTERNAL_OWSEC_HOSTNAME
|
|
||||||
value: "owsec.wlan.local"
|
|
||||||
- name: INTERNAL_OWFMS_HOSTNAME
|
|
||||||
value: "owfms.wlan.local"
|
|
||||||
- name: INTERNAL_OWPROV_HOSTNAME
|
|
||||||
value: "owprov.wlan.local"
|
|
||||||
- name: DEPLOY_VERSION
|
|
||||||
value: "main"
|
|
||||||
- name: SYSTEM_URI_UI
|
|
||||||
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build"
|
|
||||||
- name: DEFAULT_UCENTRALSEC_URL
|
|
||||||
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16001"
|
|
||||||
- name: RTTY_TOKEN
|
|
||||||
value: "$RTTY_TOKEN"
|
|
||||||
- name: OWGW_FILEUPLOADER_HOST_NAME
|
|
||||||
value: "ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build"
|
|
||||||
- name: OWGW_FILEUPLOADER_URI
|
|
||||||
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16003"
|
|
||||||
- name: OWGW_SYSTEM_URI_PRIVATE
|
|
||||||
value: "https://owgw.wlan.local:17002"
|
|
||||||
- name: OWGW_SYSTEM_URI_PUBLIC
|
|
||||||
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16002"
|
|
||||||
- name: OWGW_RTTY_SERVER
|
|
||||||
value: "ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build"
|
|
||||||
- name: OWSEC_AUTHENTICATION_DEFAULT_USERNAME
|
|
||||||
value: "$OWSEC_AUTHENTICATION_DEFAULT_USERNAME"
|
|
||||||
- name: OWSEC_AUTHENTICATION_DEFAULT_PASSWORD
|
|
||||||
value: "$OWSEC_AUTHENTICATION_DEFAULT_PASSWORD"
|
|
||||||
- name: OWSEC_SYSTEM_URI_PRIVATE
|
|
||||||
value: "https://owsec.wlan.local:17001"
|
|
||||||
- name: OWSEC_SYSTEM_URI_PUBLIC
|
|
||||||
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16001"
|
|
||||||
- name: OWFMS_SYSTEM_URI_PRIVATE
|
|
||||||
value: "https://owfms.wlan.local:17004"
|
|
||||||
- name: OWFMS_SYSTEM_URI_PUBLIC
|
|
||||||
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16004"
|
|
||||||
- name: OWFMS_S3_SECRET
|
|
||||||
value: "$OWFMS_S3_SECRET"
|
|
||||||
- name: OWFMS_S3_KEY
|
|
||||||
value: "$OWFMS_S3_KEY"
|
|
||||||
- name: OWPROV_SYSTEM_URI_PRIVATE
|
|
||||||
value: "https://owprov.wlan.local:17005"
|
|
||||||
- name: OWPROV_SYSTEM_URI_PUBLIC
|
|
||||||
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16005"
|
|
||||||
- name: WEBSOCKET_CERT
|
|
||||||
value: "/tip-cicd-wildcard-certs/websocket-cert.pem"
|
|
||||||
- name: WEBSOCKET_KEY
|
|
||||||
value: "/tip-cicd-wildcard-certs/websocket-key.pem"
|
|
||||||
volumeMounts:
|
|
||||||
- name: client-certs
|
|
||||||
mountPath: /certs/client
|
|
||||||
- name: deploy-repo
|
|
||||||
mountPath: /wlan-cloud-ucentral-deploy
|
|
||||||
- name: tip-cicd-wildcard-certs
|
- name: tip-cicd-wildcard-certs
|
||||||
readOnly: true
|
secret:
|
||||||
mountPath: "/tip-cicd-wildcard-certs"
|
secretName: tip-cicd-wildcard-certs
|
||||||
EOF
|
containers:
|
||||||
|
- name: docker-daemon
|
||||||
|
image: docker:dind
|
||||||
|
env:
|
||||||
|
- name: DOCKER_TLS_CERTDIR
|
||||||
|
value: "/certs"
|
||||||
|
securityContext:
|
||||||
|
privileged: true
|
||||||
|
volumeMounts:
|
||||||
|
- name: client-certs
|
||||||
|
mountPath: /certs/client
|
||||||
|
- name: deploy-repo
|
||||||
|
mountPath: /wlan-cloud-ucentral-deploy
|
||||||
|
|
||||||
|
- name: docker-compose-deployment
|
||||||
|
image: docker/compose:latest
|
||||||
|
command: ["/bin/sh", "-c"]
|
||||||
|
args: ["apk add git; wget https://raw.githubusercontent.com/Telecominfraproject/wlan-testing/master/docker-compose/openwifi/deploy.sh; chmod +x deploy.sh; sh deploy.sh"]
|
||||||
|
env:
|
||||||
|
- name: DOCKER_TLS_VERIFY
|
||||||
|
value: "true"
|
||||||
|
- name: DOCKER_HOST
|
||||||
|
value: "127.0.0.1:2376"
|
||||||
|
- name: DOCKER_CERT_PATH
|
||||||
|
value: "/certs/client"
|
||||||
|
- name: OWGW_TAG
|
||||||
|
value: "${{ github.event.inputs.owgw_version }}"
|
||||||
|
- name: OWGWUI_TAG
|
||||||
|
value: "${{ github.event.inputs.owgwui_version }}"
|
||||||
|
- name: OWSEC_TAG
|
||||||
|
value: "${{ github.event.inputs.owsec_version }}"
|
||||||
|
- name: OWFMS_TAG
|
||||||
|
value: "${{ github.event.inputs.owfms_version }}"
|
||||||
|
- name: OWPROV_TAG
|
||||||
|
value: "${{ github.event.inputs.owprov_version }}"
|
||||||
|
- name: OWPROVUI_TAG
|
||||||
|
value: "${{ github.event.inputs.owprovui_version }}"
|
||||||
|
- name: INTERNAL_OWGW_HOSTNAME
|
||||||
|
value: "owgw.wlan.local"
|
||||||
|
- name: INTERNAL_OWSEC_HOSTNAME
|
||||||
|
value: "owsec.wlan.local"
|
||||||
|
- name: INTERNAL_OWFMS_HOSTNAME
|
||||||
|
value: "owfms.wlan.local"
|
||||||
|
- name: INTERNAL_OWPROV_HOSTNAME
|
||||||
|
value: "owprov.wlan.local"
|
||||||
|
- name: DEPLOY_VERSION
|
||||||
|
value: "main"
|
||||||
|
- name: SYSTEM_URI_UI
|
||||||
|
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build"
|
||||||
|
- name: DEFAULT_UCENTRALSEC_URL
|
||||||
|
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16001"
|
||||||
|
- name: RTTY_TOKEN
|
||||||
|
value: "$RTTY_TOKEN"
|
||||||
|
- name: OWGW_FILEUPLOADER_HOST_NAME
|
||||||
|
value: "ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build"
|
||||||
|
- name: OWGW_FILEUPLOADER_URI
|
||||||
|
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16003"
|
||||||
|
- name: OWGW_SYSTEM_URI_PRIVATE
|
||||||
|
value: "https://owgw.wlan.local:17002"
|
||||||
|
- name: OWGW_SYSTEM_URI_PUBLIC
|
||||||
|
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16002"
|
||||||
|
- name: OWGW_RTTY_SERVER
|
||||||
|
value: "ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build"
|
||||||
|
- name: OWSEC_AUTHENTICATION_DEFAULT_USERNAME
|
||||||
|
value: "$OWSEC_AUTHENTICATION_DEFAULT_USERNAME"
|
||||||
|
- name: OWSEC_AUTHENTICATION_DEFAULT_PASSWORD
|
||||||
|
value: "$OWSEC_AUTHENTICATION_DEFAULT_PASSWORD"
|
||||||
|
- name: OWSEC_SYSTEM_URI_PRIVATE
|
||||||
|
value: "https://owsec.wlan.local:17001"
|
||||||
|
- name: OWSEC_SYSTEM_URI_PUBLIC
|
||||||
|
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16001"
|
||||||
|
- name: OWFMS_SYSTEM_URI_PRIVATE
|
||||||
|
value: "https://owfms.wlan.local:17004"
|
||||||
|
- name: OWFMS_SYSTEM_URI_PUBLIC
|
||||||
|
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16004"
|
||||||
|
- name: OWFMS_S3_SECRET
|
||||||
|
value: "$OWFMS_S3_SECRET"
|
||||||
|
- name: OWFMS_S3_KEY
|
||||||
|
value: "$OWFMS_S3_KEY"
|
||||||
|
- name: OWPROV_SYSTEM_URI_PRIVATE
|
||||||
|
value: "https://owprov.wlan.local:17005"
|
||||||
|
- name: OWPROV_SYSTEM_URI_PUBLIC
|
||||||
|
value: "https://ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16005"
|
||||||
|
- name: WEBSOCKET_CERT
|
||||||
|
value: "/tip-cicd-wildcard-certs/websocket-cert.pem"
|
||||||
|
- name: WEBSOCKET_KEY
|
||||||
|
value: "/tip-cicd-wildcard-certs/websocket-key.pem"
|
||||||
|
volumeMounts:
|
||||||
|
- name: client-certs
|
||||||
|
mountPath: /certs/client
|
||||||
|
- name: deploy-repo
|
||||||
|
mountPath: /wlan-cloud-ucentral-deploy
|
||||||
|
- name: tip-cicd-wildcard-certs
|
||||||
|
readOnly: true
|
||||||
|
mountPath: "/tip-cicd-wildcard-certs"
|
||||||
|
EOF
|
||||||
|
|
||||||
- name: Show resource state on deployment failure
|
- name: Show resource state on deployment failure
|
||||||
if: failure()
|
if: failure()
|
||||||
run: |
|
run: |
|
||||||
kubectl get pods --namespace ow-docker-compose-${{ github.run_id }}
|
kubectl get pods --namespace ow-docker-compose-${{ github.run_id }}
|
||||||
kubectl get services --namespace ow-docker-compose-${{ github.run_id }}
|
kubectl get services --namespace ow-docker-compose-${{ github.run_id }}
|
||||||
- name: Describe pods on deployment failure
|
- name: Describe pods on deployment failure
|
||||||
if: failure()
|
if: failure()
|
||||||
run: |
|
run: |
|
||||||
kubectl describe pods --namespace ow-docker-compose-${{ github.run_id }}
|
kubectl describe pods --namespace ow-docker-compose-${{ github.run_id }}
|
||||||
- name: Describe services on deployment failure
|
- name: Describe services on deployment failure
|
||||||
if: failure()
|
if: failure()
|
||||||
run: |
|
run: |
|
||||||
kubectl describe services --namespace ow-docker-compose-${{ github.run_id }}
|
kubectl describe services --namespace ow-docker-compose-${{ github.run_id }}
|
||||||
|
|
||||||
- name: Change password and check if deployment is ready using clustersysteminfo image
|
- name: Change password and check if deployment is ready using clustersysteminfo image
|
||||||
env:
|
env:
|
||||||
OWSEC: "ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16001"
|
OWSEC: "ow-docker-compose-${{ github.run_id }}.cicd.lab.wlan.tip.build:16001"
|
||||||
OWSEC_DEFAULT_USERNAME: ${{ secrets.OWSEC_DEFAULT_USERNAME }}
|
OWSEC_DEFAULT_USERNAME: ${{ secrets.OWSEC_DEFAULT_USERNAME }}
|
||||||
OWSEC_DEFAULT_PASSWORD: ${{ secrets.OWSEC_DEFAULT_PASSWORD }}
|
OWSEC_DEFAULT_PASSWORD: ${{ secrets.OWSEC_DEFAULT_PASSWORD }}
|
||||||
OWSEC_NEW_PASSWORD: ${{ secrets.OWSEC_NEW_PASSWORD }}
|
OWSEC_NEW_PASSWORD: ${{ secrets.OWSEC_NEW_PASSWORD }}
|
||||||
run: |
|
run: |
|
||||||
docker run --rm \
|
docker run --rm \
|
||||||
-e OWSEC \
|
-e OWSEC \
|
||||||
-e OWSEC_DEFAULT_USERNAME \
|
-e OWSEC_DEFAULT_USERNAME \
|
||||||
-e OWSEC_DEFAULT_PASSWORD \
|
-e OWSEC_DEFAULT_PASSWORD \
|
||||||
-e OWSEC_NEW_PASSWORD \
|
-e OWSEC_NEW_PASSWORD \
|
||||||
tip-tip-wlan-cloud-ucentral.jfrog.io/clustersysteminfo:main
|
tip-tip-wlan-cloud-ucentral.jfrog.io/clustersysteminfo:main
|
||||||
|
|
||||||
|
set-redirector-url:
|
||||||
|
name: Get virtual AP instance facts and set redirector URL
|
||||||
|
needs: deploy-controller
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
env:
|
||||||
|
AWS_DEFAULT_REGION: us-east-1
|
||||||
|
VIRTUAL_AP_SSH_KEY: ${{ secrets.VIRTUAL_AP_SSH_KEY }}
|
||||||
|
DIGICERT_API_KEY: ${{ secrets.DIGICERT_API_KEY }}
|
||||||
|
outputs:
|
||||||
|
mac_address: ${{ steps.get_virtual_ap_mac_address.outputs.value }}
|
||||||
|
steps:
|
||||||
|
- name: Checkout wlan-pki-cert-scripts repo
|
||||||
|
uses: actions/checkout@v2
|
||||||
|
with:
|
||||||
|
repository: Telecominfraproject/wlan-pki-cert-scripts
|
||||||
|
path: wlan-pki-cert-scripts
|
||||||
|
|
||||||
|
- name: Get public IP of virtual AP EC2 instance
|
||||||
|
id: get_virtual_ap_public_ip
|
||||||
|
run: |
|
||||||
|
echo ::set-output name=ip::"$(aws ec2 describe-instances --filters 'Name=tag:Name,Values=tip-wlan-main OpenWifi virtual AP (WIFI-7204)' --query 'Reservations[*].Instances[*].PublicIpAddress' --output text)"
|
||||||
|
|
||||||
|
- name: Get mac address of virtual AP EC2 instance
|
||||||
|
id: get_virtual_ap_mac_address
|
||||||
|
run: |
|
||||||
|
echo ::set-output name=value::"$(aws ec2 describe-instances --filters 'Name=tag:Name,Values=tip-wlan-main OpenWifi virtual AP (WIFI-7204)' --query 'Reservations[*].Instances[*].NetworkInterfaces[*].MacAddress' --output text | sed 's/://g')"
|
||||||
|
|
||||||
|
- name: Set redirector URL
|
||||||
|
run: |
|
||||||
|
./wlan-pki-cert-scripts/digicert-change-ap-redirector.sh 06:6f:df:5d:30:e2 ${{ needs.deploy-controller.outputs.gateway_url }}
|
||||||
|
|
||||||
|
# starting the firstcontact service applies a default config, which is why we need to re-apply our config modifications in order to add the SSH key
|
||||||
|
- name: Connect to virtual AP, start firstcontact service and re-apply AP config
|
||||||
|
run: |
|
||||||
|
echo "${{ env.VIRTUAL_AP_SSH_KEY }}" > openwifi-virtual-ap.pem
|
||||||
|
chmod 600 openwifi-virtual-ap.pem
|
||||||
|
ssh -o StrictHostKeyChecking=accept-new -i openwifi-virtual-ap.pem root@${{ steps.get_virtual_ap_public_ip.outputs.ip }} '/etc/init.d/firstcontact start; sleep 10; /usr/share/ucentral/ucentral.uc /root/config.json'
|
||||||
|
|
||||||
test:
|
test:
|
||||||
runs-on: ubuntu-latest
|
name: Test specified microservice
|
||||||
needs: [ build, deploy-controller ]
|
needs: [deploy-controller, set-redirector-url]
|
||||||
steps:
|
runs-on: ubuntu-latest
|
||||||
- uses: actions/checkout@v2
|
env:
|
||||||
- name: get EKS access credentials
|
OWSEC: "${{ needs.deploy-controller.outputs.sec_url }}:16001"
|
||||||
run: aws eks update-kubeconfig --name ${{ env.AWS_EKS_NAME }}
|
OWSEC_USERNAME: ${{ secrets.OWSEC_DEFAULT_USERNAME }}
|
||||||
|
OWSEC_PASSWORD: ${{ secrets.OWSEC_NEW_PASSWORD }}
|
||||||
|
steps:
|
||||||
|
- name: Checkout wlan-cloud-ucentralgw repo and test OWGW
|
||||||
|
if: github.event.inputs.microservice == 'owgw' || github.event.inputs.microservice == 'all'
|
||||||
|
run: |
|
||||||
|
curl -s https://raw.githubusercontent.com/Telecominfraproject/wlan-cloud-ucentralgw/master/test_scripts/curl/cli -o cli
|
||||||
|
chmod +x cli
|
||||||
|
./cli test_service ${{ needs.set-redirector-url.outputs.mac_address }}
|
||||||
|
|
||||||
- name: prepare namespace
|
- name: Checkout wlan-cloud-ucentralsec repo and test OWSec
|
||||||
id: namespace
|
if: github.event.inputs.microservice == 'owsec' || github.event.inputs.microservice == 'all'
|
||||||
run: |
|
run: |
|
||||||
NAMESPACE="testing-${{ github.run_id }}"
|
curl -s https://raw.githubusercontent.com/Telecominfraproject/wlan-cloud-ucentralsec/main/test_scripts/curl/cli -o cli
|
||||||
echo "::set-output name=name::${NAMESPACE}"
|
chmod +x cli
|
||||||
|
./cli test_service
|
||||||
|
|
||||||
- name: create configuration secret
|
- name: Checkout wlan-cloud-ucentralfms repo and test OWFms
|
||||||
run: |
|
if: github.event.inputs.microservice == 'owfms' || github.event.inputs.microservice == 'all'
|
||||||
cat << EOF > lab_info.json
|
run: |
|
||||||
${{ secrets.LAB_CONFIGURATION_JSON }}
|
curl -s https://raw.githubusercontent.com/Telecominfraproject/wlan-cloud-ucentralfms/main/test_scripts/curl/cli -o cli
|
||||||
EOF
|
chmod +x cli
|
||||||
jq '.CONFIGURATION["${{ github.event.inputs.testbeds || 'basic-05' }}"].controller.url="https://${{ needs.deploy-controller.outputs.sec_url }}:16001"' lab_info.json > lab_info.json.tmp && mv lab_info.json.tmp lab_info.json
|
./cli test_service ${{ needs.set-redirector-url.outputs.mac_address }}
|
||||||
jq '.CONFIGURATION["${{ github.event.inputs.testbeds || 'basic-05' }}"].controller.password="${{ secrets.OWSEC_NEW_PASSWORD }}"' lab_info.json > lab_info.json.tmp && mv lab_info.json.tmp lab_info.json
|
|
||||||
|
|
||||||
- name: run tests
|
|
||||||
uses: ./.github/actions/run-tests
|
|
||||||
with:
|
|
||||||
namespace: ${{ steps.namespace.outputs.name }}
|
|
||||||
testbed: "${{ github.event.inputs.testbeds || 'basic-05' }}"
|
|
||||||
marker_expression: "${{ github.event.inputs.marker_expression || 'sdk_restapi' }}"
|
|
||||||
configuration_file: "./lab_info.json"
|
|
||||||
testing_docker_image: tip-tip-wlan-cloud-docker-repo.jfrog.io/cloud-sdk-nightly:${{ github.run_id }}
|
|
||||||
allure_results_artifact_name: allure-results-docker-compose-${{ github.event.inputs.marker_expression || 'sdk_restapi' }}
|
|
||||||
|
|
||||||
report:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
needs: [ test ]
|
|
||||||
if: always()
|
|
||||||
steps:
|
|
||||||
- name: checkout testing repo
|
|
||||||
uses: actions/checkout@v2
|
|
||||||
|
|
||||||
- uses: actions/download-artifact@v2
|
|
||||||
with:
|
|
||||||
name: allure-results-docker-compose-${{ github.event.inputs.marker_expression || 'sdk_restapi' }}
|
|
||||||
path: allure-results
|
|
||||||
|
|
||||||
- name: download history of previous run
|
|
||||||
continue-on-error: true
|
|
||||||
run: |
|
|
||||||
LAST_RUN_ID=$(aws s3api head-object --bucket openwifi-allure-reports --key docker-compose-${{ github.event.inputs.marker_expression || 'sdk_restapi' }}/latest/index.html | jq -r .Metadata.latest)
|
|
||||||
aws s3 cp --recursive s3://openwifi-allure-reports/docker-compose-${{ github.event.inputs.marker_expression || 'sdk_restapi' }}/$LAST_RUN_ID/history history
|
|
||||||
|
|
||||||
- name: generate Allure report
|
|
||||||
uses: ./.github/actions/generate-allure-report
|
|
||||||
with:
|
|
||||||
results_path: ./allure-results
|
|
||||||
history_path: ./history
|
|
||||||
|
|
||||||
- name: upload Allure report as artifact
|
|
||||||
uses: actions/upload-artifact@v2
|
|
||||||
with:
|
|
||||||
name: allure-report-docker-compose-${{ github.event.inputs.marker_expression || 'sdk_restapi' }}
|
|
||||||
path: allure-report
|
|
||||||
|
|
||||||
# doing this to be able to aggregate multiple reports together later on
|
|
||||||
- name: copy results into report
|
|
||||||
run: |
|
|
||||||
cp -r allure-results allure-report/results
|
|
||||||
|
|
||||||
- name: upload to S3
|
|
||||||
if: github.ref == 'refs/heads/master'
|
|
||||||
uses: ./.github/actions/allure-report-to-s3
|
|
||||||
with:
|
|
||||||
test_type: docker-compose-${{ github.event.inputs.marker_expression || 'sdk_restapi' }}
|
|
||||||
testbed: ${{ github.event.inputs.testbeds || 'basic-05' }}
|
|
||||||
report_path: allure-report
|
|
||||||
s3_access_key_id: ${{ secrets.ALLURE_S3_ACCESS_KEY_ID }}
|
|
||||||
s3_access_key_secret: ${{ secrets.ALLURE_S3_ACCESS_KEY_SECRET }}
|
|
||||||
|
|
||||||
delete-docker-image:
|
|
||||||
needs: [ test ]
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
if: always()
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@v2
|
|
||||||
- name: cleanup Docker image
|
|
||||||
uses: ./.github/actions/cleanup-docker
|
|
||||||
with:
|
|
||||||
registry_user: wlan-testing-cicd
|
|
||||||
registry_password: ${{ secrets.DOCKER_USER_PASSWORD }}
|
|
||||||
|
|
||||||
destroy-controller:
|
destroy-controller:
|
||||||
needs: [ test ]
|
name: Destroy controller namespace
|
||||||
|
needs: [deploy-controller, test]
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
env:
|
||||||
|
AWS_DEFAULT_REGION: us-east-2
|
||||||
if: always()
|
if: always()
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout wlan-testing repo
|
- name: Checkout wlan-testing repo
|
||||||
uses: actions/checkout@v2
|
uses: actions/checkout@v2
|
||||||
with:
|
with:
|
||||||
path: wlan-testing
|
path: wlan-testing
|
||||||
|
|
||||||
- name: Fetch kubeconfig
|
- name: Fetch kubeconfig
|
||||||
run: |
|
run: |
|
||||||
aws eks update-kubeconfig --name ${{ env.AWS_EKS_NAME }}
|
aws eks update-kubeconfig --name ${{ env.AWS_EKS_NAME }}
|
||||||
|
|
||||||
- name: Delete namespace
|
- name: Delete namespace
|
||||||
run: kubectl delete ns --ignore-not-found=true "ow-docker-compose-${{ github.run_id }}"
|
run: kubectl delete ns --ignore-not-found=true ${{ needs.deploy-controller.outputs.namespace }}
|
||||||
|
|||||||
Reference in New Issue
Block a user