STS enabled by default #1724
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Tenant Tests On Kind | |
on: | |
pull_request: | |
branches: [ master ] | |
concurrency: | |
group: ${{ github.workflow }}-${{ github.head_ref }} | |
cancel-in-progress: true | |
jobs: | |
shellcheck: | |
timeout-minutes: 30 | |
name: Shellcheck | |
runs-on: ubuntu-latest | |
strategy: | |
matrix: | |
go-version: [ 1.21.x ] | |
steps: | |
- uses: actions/checkout@v3 | |
- uses: actions/setup-go@v4 | |
with: | |
go-version: ${{ matrix.go-version }} | |
- name: Run ShellCheck | |
uses: ludeeus/action-shellcheck@master | |
env: | |
SHELLCHECK_OPTS: -e SC2046 -e SC1091 -e SC2086 -e SC2090 -e SC2089 -e SC2006 -e SC2206 | |
- name: Run nancy vulnerability report | |
run: | | |
nancy_version=$(curl --retry 10 -Ls -o /dev/null -w "%{url_effective}" https://github.com/sonatype-nexus-community/nancy/releases/latest | sed "s/https:\/\/github.com\/sonatype-nexus-community\/nancy\/releases\/tag\///") | |
curl -L -o nancy https://github.com/sonatype-nexus-community/nancy/releases/download/${nancy_version}/nancy-${nancy_version}-linux-amd64 && chmod +x nancy | |
go list -deps -json ./... | jq -s 'unique_by(.Module.Path)|.[]|select(has("Module"))|.Module' | ./nancy sleuth | |
lint: | |
timeout-minutes: 30 | |
runs-on: ${{ matrix.os }} | |
strategy: | |
matrix: | |
go-version: [ 1.21.x ] | |
os: [ ubuntu-latest ] | |
steps: | |
- uses: actions/checkout@v3 | |
- uses: actions/setup-go@v4 | |
with: | |
go-version: ${{ matrix.go-version }} | |
- name: Lint | |
run: | | |
make lint | |
govet: | |
timeout-minutes: 30 | |
runs-on: ${{ matrix.os }} | |
strategy: | |
matrix: | |
go-version: [ 1.21.x ] | |
os: [ ubuntu-latest ] | |
steps: | |
- uses: actions/checkout@v3 | |
- uses: actions/setup-go@v4 | |
with: | |
go-version: ${{ matrix.go-version }} | |
- name: govet | |
run: | | |
make govet | |
vulnerable-dependencies-checks: | |
timeout-minutes: 30 | |
name: "Check for vulnerable dependencies" | |
runs-on: ubuntu-latest | |
strategy: | |
matrix: | |
go-version: [ 1.21.x ] | |
steps: | |
- name: Check out code | |
uses: actions/checkout@v3 | |
- uses: actions/setup-go@v4 | |
with: | |
go-version: ${{ matrix.go-version }} | |
cache: true | |
check-latest: true | |
- name: Get govulncheck | |
run: go install golang.org/x/vuln/cmd/govulncheck@latest | |
shell: bash | |
- name: Run govulncheck | |
run: govulncheck ./... | |
shell: bash | |
gotest: | |
timeout-minutes: 30 | |
runs-on: ${{ matrix.os }} | |
needs: | |
- lint | |
- vulnerable-dependencies-checks | |
- govet | |
strategy: | |
matrix: | |
go-version: [ 1.21.x ] | |
os: [ ubuntu-latest ] | |
steps: | |
- uses: actions/checkout@v3 | |
- uses: actions/setup-go@v4 | |
with: | |
go-version: ${{ matrix.go-version }} | |
- name: Go Test | |
run: | | |
make gotest | |
operator: | |
timeout-minutes: 30 | |
runs-on: ${{ matrix.os }} | |
needs: | |
- lint | |
- vulnerable-dependencies-checks | |
- govet | |
- shellcheck | |
strategy: | |
matrix: | |
go-version: [ 1.21.x ] | |
os: [ ubuntu-latest ] | |
steps: | |
- uses: actions/checkout@v3 | |
- uses: actions/setup-go@v4 | |
with: | |
go-version: ${{ matrix.go-version }} | |
- uses: actions/cache@v3 | |
name: Operator Binary Cache | |
with: | |
path: | | |
./minio-operator | |
key: ${{ runner.os }}-binary-${{ github.run_id }} | |
- name: Operator Binary | |
run: | | |
make operator | |
test-tenant: | |
timeout-minutes: 30 | |
runs-on: ${{ matrix.os }} | |
needs: | |
- operator | |
strategy: | |
matrix: | |
go-version: [ 1.21.x ] | |
os: [ ubuntu-latest ] | |
steps: | |
- uses: actions/checkout@v3 | |
- uses: actions/setup-go@v4 | |
with: | |
go-version: ${{ matrix.go-version }} | |
- uses: actions/cache@v3 | |
name: Operator Binary Cache | |
with: | |
path: | | |
./minio-operator | |
key: ${{ runner.os }}-binary-${{ github.run_id }} | |
- name: Deploy Tenant | |
run: | | |
"${GITHUB_WORKSPACE}/testing/deploy-tenant.sh" | |
test-tenant-upgrade: | |
timeout-minutes: 30 | |
runs-on: ${{ matrix.os }} | |
needs: | |
- operator | |
strategy: | |
matrix: | |
go-version: [ 1.21.x ] | |
os: [ ubuntu-latest ] | |
steps: | |
- uses: actions/checkout@v3 | |
- uses: actions/setup-go@v4 | |
with: | |
go-version: ${{ matrix.go-version }} | |
- uses: actions/cache@v3 | |
name: Operator Binary Cache | |
with: | |
path: | | |
./minio-operator | |
key: ${{ runner.os }}-binary-${{ github.run_id }} | |
- name: Tenant upgrade test on Kind | |
run: | | |
"${GITHUB_WORKSPACE}/testing/deploy-tenant-upgrade.sh" | |
test-kes: | |
timeout-minutes: 30 | |
runs-on: ${{ matrix.os }} | |
needs: | |
- operator | |
strategy: | |
matrix: | |
go-version: [ 1.21.x ] | |
os: [ ubuntu-latest ] | |
steps: | |
- uses: actions/checkout@v3 | |
- uses: actions/setup-go@v4 | |
with: | |
go-version: ${{ matrix.go-version }} | |
- uses: actions/cache@v3 | |
name: Operator Binary Cache | |
with: | |
path: | | |
./minio-operator | |
key: ${{ runner.os }}-binary-${{ github.run_id }} | |
- name: Tenant KES | |
run: | | |
"${GITHUB_WORKSPACE}/testing/console-tenant+kes.sh" | |
test-cert-manager: | |
timeout-minutes: 30 | |
runs-on: ${{ matrix.os }} | |
needs: | |
- operator | |
strategy: | |
matrix: | |
go-version: [ 1.21.x ] | |
os: [ ubuntu-latest ] | |
steps: | |
- uses: actions/checkout@v3 | |
- uses: actions/setup-go@v4 | |
with: | |
go-version: ${{ matrix.go-version }} | |
- uses: actions/cache@v3 | |
name: Operator Binary Cache | |
with: | |
path: | | |
./minio-operator | |
key: ${{ runner.os }}-binary-${{ github.run_id }} | |
- name: Deploy Tenant with cert-manager | |
run: | | |
"${GITHUB_WORKSPACE}/testing/deploy-cert-manager-tenant.sh" | |
test-policy-binding: | |
timeout-minutes: 30 | |
runs-on: ${{ matrix.os }} | |
needs: | |
- operator | |
strategy: | |
matrix: | |
go-version: [ 1.21.x ] | |
os: [ ubuntu-latest ] | |
steps: | |
- name: Free Disk Space (Ubuntu) | |
uses: jlumbroso/free-disk-space@main | |
with: | |
tool-cache: false | |
android: true | |
dotnet: true | |
haskell: true | |
large-packages: true | |
docker-images: true | |
swap-storage: true | |
- uses: actions/checkout@v3 | |
- uses: actions/setup-go@v4 | |
with: | |
go-version: ${{ matrix.go-version }} | |
- uses: actions/cache@v3 | |
name: Operator Binary Cache | |
with: | |
path: | | |
./minio-operator | |
key: ${{ runner.os }}-binary-${{ github.run_id }} | |
- name: Test PolicyBinding CRD and sts call on kind | |
run: | | |
"${GITHUB_WORKSPACE}/testing/test-policy-binding.sh" | |
helm: | |
timeout-minutes: 30 | |
# The type of runner that the job will run on | |
runs-on: ${{ matrix.os }} | |
needs: | |
- operator | |
strategy: | |
matrix: | |
go-version: [ 1.21.x ] | |
os: [ ubuntu-latest ] | |
# Steps represent a sequence of tasks that will be executed as part of the job | |
steps: | |
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it | |
- uses: actions/checkout@v3 | |
- uses: actions/setup-go@v4 | |
with: | |
go-version: ${{ matrix.go-version }} | |
- uses: actions/cache@v3 | |
name: Operator Binary Cache | |
with: | |
path: | | |
./minio-operator | |
key: ${{ runner.os }}-binary-${{ github.run_id }} | |
# Runs a set of commands using the runners shell | |
- name: Deploy a MinIO Tenant on Kind | |
run: | | |
curl -sLO "https://dl.k8s.io/release/v1.23.1/bin/linux/amd64/kubectl" -o kubectl | |
chmod +x kubectl | |
mv kubectl /usr/local/bin | |
"${GITHUB_WORKSPACE}/testing/check-helm.sh" | |
helm-floor: | |
timeout-minutes: 30 | |
# The type of runner that the job will run on | |
runs-on: ${{ matrix.os }} | |
needs: | |
- operator | |
strategy: | |
matrix: | |
go-version: [ 1.21.x ] | |
os: [ ubuntu-latest ] | |
# Steps represent a sequence of tasks that will be executed as part of the job | |
steps: | |
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it | |
- uses: actions/checkout@v3 | |
- uses: actions/setup-go@v4 | |
with: | |
go-version: ${{ matrix.go-version }} | |
- uses: actions/cache@v3 | |
name: Operator Binary Cache | |
with: | |
path: | | |
./minio-operator | |
key: ${{ runner.os }}-binary-${{ github.run_id }} | |
# Runs a set of commands using the runners shell | |
- name: Deploy a MinIO Tenant on Kind | |
env: | |
TEST_FLOOR: true | |
run: | | |
curl -sLO "https://dl.k8s.io/release/v1.23.1/bin/linux/amd64/kubectl" -o kubectl | |
chmod +x kubectl | |
mv kubectl /usr/local/bin | |
"${GITHUB_WORKSPACE}/testing/check-helm.sh" |