fix(tls): use fixed-length cert CommonNames #750
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: test-CI-on-PR-command | |
| concurrency: | |
| group: ci-${{ github.run_id }} | |
| cancel-in-progress: true | |
| on: | |
| issue_comment: | |
| types: | |
| - created | |
| jobs: | |
| check-before-test: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| pull-requests: write | |
| if: github.repository_owner == 'cryostatio' && github.event.issue.pull_request && startsWith(github.event.comment.body, '/build_test') | |
| steps: | |
| - name: Fail if needs-triage label applied | |
| if: ${{ contains(github.event.issue.labels.*.name, 'needs-triage') }} | |
| run: exit 1 | |
| - name: Show warning if permission is denied | |
| if: | | |
| !(github.event.comment.author_association == 'MEMBER' || github.event.comment.author_association == 'OWNER') | |
| && (!contains(github.event.issue.labels.*.name, 'safe-to-test') || github.event.issue.user.name != github.event.comment.user.name) | |
| uses: thollander/actions-comment-pull-request@v2 | |
| with: | |
| message: |- | |
| You do not have permission to run the /build_test command. Please ask @cryostatio/reviewers | |
| to resolve the issue. | |
| - name: Fail if command permission is denied | |
| if: | | |
| !(github.event.comment.author_association == 'MEMBER' || github.event.comment.author_association == 'OWNER') | |
| && (!contains(github.event.issue.labels.*.name, 'safe-to-test') || github.event.issue.user.name != github.event.comment.user.name) | |
| run: exit 1 | |
| - name: React to comment | |
| uses: actions/github-script@v6 | |
| with: | |
| script: | | |
| const {owner, repo} = context.issue | |
| github.rest.reactions.createForIssueComment({ | |
| owner, | |
| repo, | |
| comment_id: context.payload.comment.id, | |
| content: "+1", | |
| }); | |
| checkout-branch: | |
| runs-on: ubuntu-latest | |
| needs: [check-before-test] | |
| permissions: | |
| pull-requests: read | |
| outputs: | |
| PR_head_ref: ${{ fromJSON(steps.comment-branch.outputs.result).ref }} | |
| PR_num: ${{ fromJSON(steps.comment-branch.outputs.result).num }} | |
| PR_repo: ${{ fromJSON(steps.comment-branch.outputs.result).repo }} | |
| PR_head_sha: ${{ fromJSON(steps.comment-branch.outputs.result).head_sha }} | |
| steps: | |
| - uses: actions/github-script@v6 | |
| id: comment-branch | |
| with: | |
| script: | | |
| const result = await github.rest.pulls.get ({ | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| pull_number: context.issue.number | |
| }) | |
| return { repo: result.data.head.repo.full_name, num: result.data.number, ref: result.data.head.ref, head_sha: result.data.head.sha } | |
| get-test-image-tag: | |
| runs-on: ubuntu-latest | |
| needs: [checkout-branch] | |
| env: | |
| num: ${{ needs.checkout-branch.outputs.PR_num }} | |
| outputs: | |
| tag: ${{ steps.compute-tag.outputs.tag }} | |
| steps: | |
| - name: Compute test image tag | |
| id: compute-tag | |
| run: | | |
| prefix="ci" | |
| if [ -n "${{ env.num }}" ]; then | |
| prefix="pr-${{ env.num }}" | |
| fi | |
| echo "tag=${prefix}-$GITHUB_SHA" >> $GITHUB_OUTPUT | |
| run-test-jobs: | |
| uses: ./.github/workflows/test-ci-reusable.yml | |
| needs: [get-test-image-tag, checkout-branch] | |
| permissions: | |
| statuses: write | |
| packages: write | |
| with: | |
| repository: ${{ needs.checkout-branch.outputs.PR_repo }} | |
| ref: ${{ needs.checkout-branch.outputs.PR_head_ref }} | |
| tag: ${{ needs.get-test-image-tag.outputs.tag }} | |
| sha: ${{ needs.checkout-branch.outputs.PR_head_sha }} | |
| successful-test: | |
| runs-on: ubuntu-latest | |
| needs: [run-test-jobs] | |
| permissions: | |
| pull-requests: write | |
| steps: | |
| - name: Leave Actions Run Comment | |
| uses: actions/github-script@v6 | |
| with: | |
| script: | | |
| const runURL = `https://github.com/${context.repo.owner}/${context.repo.repo}/actions/runs/${{ github.run_id }}`; | |
| const commentBody = `\`/build_test\` completed successfully ✅. \n[View Actions Run](${runURL}).`; | |
| github.rest.issues.createComment({ | |
| issue_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: commentBody | |
| }); | |
| cancelled-test: | |
| if: (always() && contains(needs.*.result, 'failure')) | |
| runs-on: ubuntu-latest | |
| needs: [run-test-jobs] | |
| permissions: | |
| pull-requests: write | |
| steps: | |
| - name: Leave Actions Run Comment | |
| uses: actions/github-script@v6 | |
| with: | |
| script: | | |
| const runURL = `https://github.com/${context.repo.owner}/${context.repo.repo}/actions/runs/${{ github.run_id }}`; | |
| const commentBody = `\`/build_test\` : At least one test failed ❌. \n[View Actions Run](${runURL}).`; | |
| github.rest.issues.createComment({ | |
| issue_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: commentBody | |
| }); |