11a2fdbdab
* [StepSecurity] Apply security best practices * Keep needed check in precommit --------- Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> Signed-off-by: Sanket Sudake <sanketsudake@gmail.com> Co-authored-by: StepSecurity Bot <bot@stepsecurity.io>
130 lines
3.8 KiB
YAML
130 lines
3.8 KiB
YAML
name: Fission CI upgrade
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
paths:
|
|
- "**.go"
|
|
- "charts/**"
|
|
- "test/**"
|
|
- go.mod
|
|
- go.sum
|
|
pull_request:
|
|
branches:
|
|
- main
|
|
paths:
|
|
- "**.go"
|
|
- "charts/**"
|
|
- "test/**"
|
|
- go.mod
|
|
- go.sum
|
|
workflow_dispatch:
|
|
|
|
env:
|
|
HELM_VERSION: v3.13.0
|
|
KIND_VERSION: v0.23.0
|
|
KIND_CLUSTER_NAME: kind
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
upgrade-test:
|
|
runs-on: ${{ matrix.os }}
|
|
if: ${{ !contains(github.event.pull_request.labels.*.name, 'skip-ci') }}
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
kindversion: ["v1.25.16"]
|
|
os: [ubuntu-latest]
|
|
steps:
|
|
- name: Harden Runner
|
|
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
|
|
with:
|
|
egress-policy: audit
|
|
|
|
- name: Checkout action sources
|
|
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
|
|
|
|
- name: Setup go
|
|
uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
|
|
with:
|
|
go-version-file: "go.mod"
|
|
cache: true
|
|
|
|
- name: Setup Helm
|
|
uses: Azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
|
|
with:
|
|
version: ${{ env.HELM_VERSION }}
|
|
|
|
- name: Setup Kind Cluster
|
|
uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde # v1.10.0
|
|
with:
|
|
node_image: kindest/node:${{ matrix.kindversion }}
|
|
version: ${{ env.KIND_VERSION }}
|
|
cluster_name: ${{ env.KIND_CLUSTER_NAME }}
|
|
|
|
- name: Install GoReleaser
|
|
uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6.0.0
|
|
with:
|
|
install-only: true
|
|
version: "~> v2"
|
|
|
|
- name: Setup kubectl & fetch node information
|
|
run: |
|
|
kubectl cluster-info --context kind-${{ env.KIND_CLUSTER_NAME }}
|
|
kubectl get nodes
|
|
kubectl get storageclasses.storage.k8s.io
|
|
kubectl config use-context kind-${{ env.KIND_CLUSTER_NAME }}
|
|
kubectl config set-context --current --namespace=default
|
|
kubectl config view
|
|
|
|
- name: Dump system info
|
|
run: |
|
|
source ./test/upgrade_test/fission_objects.sh dump_system_info
|
|
|
|
- name: Install and configure previous stable fission
|
|
run: |
|
|
source ./test/upgrade_test/fission_objects.sh install_stable_release \
|
|
&& create_fission_objects \
|
|
&& test_fission_objects
|
|
|
|
- name: Upgrade fission to latest
|
|
run: |
|
|
source ./test/upgrade_test/fission_objects.sh build_docker_images \
|
|
&& kind_image_load \
|
|
&& install_current_release \
|
|
&& install_fission_cli
|
|
|
|
- name: Test previously created fission objects with new release
|
|
timeout-minutes: 10
|
|
run: |
|
|
source ./test/upgrade_test/fission_objects.sh test_fission_objects
|
|
|
|
- name: Collect Fission Dump
|
|
if: ${{ always() }}
|
|
run: |
|
|
command -v fission && fission support dump
|
|
|
|
- name: Kind export logs
|
|
if: ${{ always() }}
|
|
run: |
|
|
kind export logs --name ${{ env.KIND_CLUSTER_NAME }} kind-logs
|
|
|
|
- name: Archive fission dump
|
|
if: ${{ failure() || cancelled() }}
|
|
uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
|
|
with:
|
|
name: fission-dump-${{ github.run_id }}-${{ matrix.kindversion }}
|
|
path: fission-dump/*.zip
|
|
retention-days: 5
|
|
|
|
- name: Archive kind logs
|
|
if: ${{ always() }}
|
|
uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
|
|
with:
|
|
name: kind-logs-${{ github.run_id }}-${{ matrix.kindversion }}
|
|
path: kind-logs/*
|
|
retention-days: 5
|