Update offline installation workflows and scripts #32
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Offline installation test | ||
|
Check failure on line 1 in .github/workflows/offline-installation.yml
|
||
| on: | ||
| pull_request: | ||
| paths: | ||
| - 'install_functions/wazuh-offline-download.sh' | ||
| - 'install_functions/wazuh-offline-installation.sh' | ||
| workflow_dispatch: | ||
| inputs: | ||
| WAZUH_INSTALLATION_ASSISTANT_REFERENCE: | ||
| description: "Branch or tag of the wazuh-installation-assistant repository." | ||
| required: true | ||
| default: 4.10.2 | ||
| AUTOMATION_REFERENCE: | ||
| description: 'Branch or tag of the wazuh-automation repository' | ||
| required: true | ||
| default: '4.10.2' | ||
| PKG_REPOSITORY: | ||
| description: 'Repository environment' | ||
| required: true | ||
| default: 'pre-release' | ||
| type: choice | ||
| options: | ||
| - staging | ||
| - pre-release | ||
| SYSTEMS: | ||
| description: "Operating Systems (list of comma-separated quoted strings enclosed in square brackets)." | ||
| required: true | ||
| default: '["Ubuntu_22", "CentOS_8"]' | ||
| type: string | ||
| VERBOSITY: | ||
| description: 'Verbosity level on playbooks execution' | ||
| required: true | ||
| default: '-v' | ||
| type: choice | ||
| options: | ||
| - -v | ||
| - -vv | ||
| - -vvv | ||
| - -vvvv | ||
| env: | ||
| WAZUH_INSTALLATION_ASSISTANT_REFERENCE: ${{ github.event_name == 'pull_request' && github.head_ref || inputs.WAZUH_INSTALLATION_ASSISTANT_REFERENCE }} | ||
| AUTOMATION_REFERENCE: ${{ github.event_name == 'pull_request' && '4.10.2' || inputs.AUTOMATION_REFERENCE }} | ||
| WAZUH_VERSION: "4.10" | ||
| PKG_REPOSITORY: ${{ github.event_name == 'pull_request' && 'pre-release' || inputs.PKG_REPOSITORY }} | ||
| AWS_ACCOUNT: "wazuh-dev" | ||
| VERBOSITY: ${{ github.event_name == 'pull_request' && '-v' || inputs.VERBOSITY }} | ||
| COMPOSITE_NAME: "linux-SUBNAME-amd64" | ||
| REGION: "us-east-1" | ||
| TMP_PATH: "/tmp/test" | ||
| REPOSITORY_URL: "${{ github.server_url }}/${{ github.repository }}.git" | ||
| ALLOCATOR_PATH: "/tmp/allocator_instance" | ||
| ANSIBLE_CALLBACK: "yaml" | ||
| jobs: | ||
| Create-allocator-instances: | ||
| runs-on: ubuntu-latest | ||
| strategy: | ||
| fail-fast: false | ||
| matrix: | ||
| system: ${{ github.event_name == 'pull_request' && fromJson('["Ubuntu_22", "CentOS_8"]') || fromJson(inputs.SYSTEMS) }} | ||
| steps: | ||
| - name: View parameters | ||
| run: echo "${{ toJson(inputs) }}" | ||
| - name: Checkout code | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| ref: ${{ env.WAZUH_INSTALLATION_ASSISTANT_REFERENCE }} | ||
| - name: Set COMPOSITE_NAME variable | ||
| run: | | ||
| case "${{ matrix.system }}" in | ||
| "CentOS_7") | ||
| SUBNAME="centos-7" | ||
| ;; | ||
| "CentOS_8") | ||
| SUBNAME="centos-8" | ||
| ;; | ||
| "AmazonLinux_2") | ||
| SUBNAME="amazon-2" | ||
| ;; | ||
| "Ubuntu_16") | ||
| SUBNAME="ubuntu-16.04" | ||
| ;; | ||
| "Ubuntu_18") | ||
| SUBNAME="ubuntu-18.04" | ||
| ;; | ||
| "Ubuntu_20") | ||
| SUBNAME="ubuntu-20.04" | ||
| ;; | ||
| "Ubuntu_22") | ||
| SUBNAME="ubuntu-22.04" | ||
| ;; | ||
| "RHEL7") | ||
| SUBNAME="redhat-7" | ||
| ;; | ||
| "RHEL8") | ||
| SUBNAME="redhat-8" | ||
| ;; | ||
| *) | ||
| echo "Invalid SYSTEM selection" >&2 | ||
| exit 1 | ||
| ;; | ||
| esac | ||
| COMPOSITE_NAME="${COMPOSITE_NAME/SUBNAME/$SUBNAME}" | ||
| echo "COMPOSITE_NAME=$COMPOSITE_NAME" >> $GITHUB_ENV | ||
| - &install_python_and_venv | ||
| name: Install python and create virtual environment | ||
| run: | | ||
| sudo apt-get update | ||
| sudo apt-get install -y python3 python3-venv | ||
| python3 -m venv testing_venv | ||
| source testing_venv/bin/activate | ||
| python3 -m pip install --upgrade pip | ||
| echo PATH=$PATH >> $GITHUB_ENV | ||
| - name: Install Ansible | ||
| run: pip install ansible-core==2.16 | ||
| - &setup_aws_credentials | ||
| name: Set up AWS credentials | ||
| uses: aws-actions/configure-aws-credentials@v4 | ||
| with: | ||
| role-to-assume: ${{ secrets.AWS_IAM_ROLE }} | ||
| aws-region: ${{ env.REGION }} | ||
| - &checkout_wazuh_automation | ||
| name: Checkout wazuh/wazuh-automation repository | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| repository: wazuh/wazuh-automation | ||
| ref: ${{ env.AUTOMATION_REFERENCE }} | ||
| token: ${{ secrets.GH_CLONE_TOKEN }} | ||
| path: wazuh-automation | ||
| - &install_and_set_allocator_requirements | ||
| name: Install and set allocator requirements | ||
| run: pip3 install -r wazuh-automation/deployability/deps/requirements.txt | ||
| - name: Allocate test instance and set SSH variables | ||
| id: allocator_instance | ||
| run: | | ||
| python3 wazuh-automation/deployability/modules/allocation/main.py --action create --provider aws --size large --composite-name ${{ env.COMPOSITE_NAME }} --working-dir $ALLOCATOR_PATH \ | ||
| --track-output $ALLOCATOR_PATH/track-${{ matrix.system }}.yml --inventory-output $ALLOCATOR_PATH/inventory.yml --instance-name gha_${{ github.run_id }}_assistant_test \ | ||
| --label-team devops --label-termination-date 1d --aws-account ${{ env.AWS_ACCOUNT }} | ||
| sed 's/: */=/g' $ALLOCATOR_PATH/inventory.yml > $ALLOCATOR_PATH/inventory_mod.yml | ||
| sed -i 's/-o StrictHostKeyChecking=no/\"-o StrictHostKeyChecking=no\"/g' $ALLOCATOR_PATH/inventory_mod.yml | ||
| source $ALLOCATOR_PATH/inventory_mod.yml | ||
| echo "[gha_instance]" > $ALLOCATOR_PATH/inventory-${{ matrix.system }} | ||
| echo "$ansible_host ansible_port=$ansible_port ansible_user=$ansible_user ansible_ssh_private_key_file=$ansible_ssh_private_key_file ansible_ssh_common_args='$ansible_ssh_common_args'" >> $ALLOCATOR_PATH/inventory-${{ matrix.system }} | ||
| - name: Upload ansible inventory | ||
| uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: inventory-${{ matrix.system }} | ||
| path: $ALLOCATOR_PATH/inventory-${{ matrix.system }} | ||
| if-no-files-found: error | ||
| - name: Upload instance track | ||
| uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: track-${{ matrix.system }} | ||
| path: $ALLOCATOR_PATH/track-${{ matrix.system }}.yml | ||
| if-no-files-found: error | ||
| Test-offline-installation: | ||
| runs-on: ubuntu-latest | ||
| needs: Create-allocator-instances | ||
| strategy: | ||
| fail-fast: false | ||
| matrix: | ||
| system: ${{ github.event_name == 'pull_request' && fromJson('["Ubuntu_22", "CentOS_8"]') || fromJson(inputs.SYSTEMS) }} | ||
| steps: | ||
| - name: Get system inventory | ||
| uses: actions/download-artifact@v4 | ||
| with: | ||
| name: inventory-${{ matrix.system }} | ||
| - *install_python_and_venv | ||
| - name: Install Ansible | ||
| run: pip install ansible-core==2.16 | ||
| - name: Execute provision playbook | ||
| run: | | ||
| INSTALL_DEPS=true | ||
| INSTALL_PYTHON=true | ||
| INSTALL_PIP_DEPS=true | ||
| ANSIBLE_STDOUT_CALLBACK=$ANSIBLE_CALLBACK ansible-playbook .github/workflows/ansible-playbooks/provision.yml \ | ||
| -i inventory-${{ matrix.system }} \ | ||
| -l all \ | ||
| -e "repository=$REPOSITORY_URL" \ | ||
| -e "reference=$WAZUH_INSTALLATION_ASSISTANT_REFERENCE" \ | ||
| -e "tmp_path=$TMP_PATH" \ | ||
| -e "install_deps=$INSTALL_DEPS" \ | ||
| -e "install_python=$INSTALL_PYTHON" \ | ||
| -e "install_pip_deps=$INSTALL_PIP_DEPS" \ | ||
| "$VERBOSITY" | ||
| - name: Execute offline installation playbook | ||
| run: | | ||
| ANSIBLE_STDOUT_CALLBACK=$ANSIBLE_CALLBACK ansible-playbook .github/workflows/ansible-playbooks/offline_installation.yml \ | ||
| -i inventory-${{ matrix.system }} \ | ||
| -l all \ | ||
| -e "tmp_path=$TMP_PATH" \ | ||
| -e "pkg_repository=$PKG_REPOSITORY" \ | ||
| -e "wazuh_version=$WAZUH_VERSION" \ | ||
| "$VERBOSITY" | ||
| Release-instances: | ||
| runs-on: ubuntu-latest | ||
| needs: | ||
| - Create-allocator-instances | ||
| - Test-offline-installation | ||
| if: ${{ needs.Create-allocator-instances.result == 'success' }} | ||
| strategy: | ||
| fail-fast: false | ||
| matrix: | ||
| system: ${{ github.event_name == 'pull_request' && fromJson('["Ubuntu_22", "CentOS_8"]') || fromJson(inputs.SYSTEMS) }} | ||
| steps: | ||
| - name: Get instance track | ||
| uses: actions/download-artifact@v4 | ||
| with: | ||
| name: track-${{ matrix.system }}.yml | ||
| - *install_python_and_venv | ||
| - *checkout_wazuh_automation | ||
| - *install_and_set_allocator_requirements | ||
| - name: Release test instance | ||
| run: python3 wazuh-automation/deployability/modules/allocation/main.py --action delete --track-output track-${{ matrix.system }}.yml --aws-profile ${{ env.AWS_ACCOUNT }} | ||
