e2e.yml

name: E2E

on:
  pull_request:
  push:
    branches:
      - main
  schedule:
    - cron: '0 5 * * 0'

jobs:
  e2e:
    if: contains(github.event.pull_request.labels.*.name, 'e2e') || github.ref == 'refs/heads/main'
    name: E2E
    runs-on: ubuntu-latest
    permissions:
      id-token: write # Required for the central-login action which we will test.
    steps:
      - uses: actions/checkout@v4

      - name: Setup infractl
        uses: stackrox/actions/infra/install-infractl@main

      - name: Create GKE infra cluster
        uses: stackrox/actions/infra/create-cluster@v1.0.15
        with:
          token: ${{ secrets.INFRA_TOKEN }}
          flavor: qa-demo
          name: central-login-${{ github.run_id }}
          lifespan: 1h
          args: main-image=quay.io/stackrox-io/main:latest
          wait: "true"
          no-slack: "true"

      - name: Setup environment from cluster artifacts
        env:
          CLUSTER_NAME: central-login-${{ github.run_id }}
          INFRA_TOKEN: ${{ secrets.INFRA_TOKEN }}
          ARTIFACTS_DIR: ${{ runner.temp }}/gke-artifacts
        run: |
          # Fetch the artifacts for the GKE cluster.
          infractl artifacts --download-dir=${ARTIFACTS_DIR} ${CLUSTER_NAME} >/dev/null
          # Set both URL and admin password.
          ROX_PASSWORD=$(cat ${ARTIFACTS_DIR}/admin-password)
          ROX_URL=$(cat ${ARTIFACTS_DIR}/url)
          echo "::add-mask::$ROX_PASSWORD"
          echo "::add-mask::$ROX_URL"
          echo "ROX_PASSWORD=$ROX_PASSWORD" >> $GITHUB_ENV
          echo "ROX_URL=$ROX_URL" >> $GITHUB_ENV

      - name: Add machine to machine configuration in Central
        run: |
          curl -u admin:${ROX_PASSWORD} \
          ${ROX_URL}/v1/auth/m2m \
          -k -d '{"config": {"type": "GITHUB_ACTIONS", "tokenExpirationDuration": "5m", "mappings":[{"key":"sub","valueExpression":"repo:stackrox/central-login.*", "role":"Analyst"}]}}'

      - name: Run central-login action
        uses: ./
        with:
          endpoint: ${{ env.ROX_URL }}
          skip-tls-verify: true

      - name: Install roxctl
        uses: stackrox/roxctl-installer-action@v1
        with:
          central-endpoint: ${{ env.ROX_URL }}
          central-token: ${{ env.ROX_API_TOKEN }}
          skip-tls-verify: true

      - name: Check the current user with roxctl
        run: |
          roxctl central whoami