Offline installation test #44
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Offline installation test | |
| on: | |
| pull_request: | |
| paths: | |
| - 'install_functions/wazuh-offline-download.sh' | |
| - 'install_functions/wazuh-offline-installation.sh' | |
| workflow_dispatch: | |
| inputs: | |
| WAZUH_INSTALLATION_ASSISTANT_REFERENCE: | |
| description: "Branch or tag of the wazuh-installation-assistant repository." | |
| required: true | |
| default: 4.10.2 | |
| AUTOMATION_REFERENCE: | |
| description: 'Branch or tag of the wazuh-automation repository' | |
| required: true | |
| default: 'v4.10.2' | |
| PKG_REPOSITORY: | |
| description: 'Repository environment' | |
| required: true | |
| default: 'pre-release' | |
| type: choice | |
| options: | |
| - staging | |
| - pre-release | |
| SYSTEMS: | |
| description: "Operating Systems (list of comma-separated quoted strings enclosed in square brackets)." | |
| required: true | |
| default: '["Ubuntu_22", "CentOS_8"]' | |
| type: string | |
| VERBOSITY: | |
| description: 'Verbosity level on playbooks execution' | |
| required: true | |
| default: '-v' | |
| type: choice | |
| options: | |
| - -v | |
| - -vv | |
| - -vvv | |
| - -vvvv | |
| DESTROY: | |
| description: 'Destroy instances after run' | |
| required: true | |
| default: true | |
| type: boolean | |
| env: | |
| WAZUH_INSTALLATION_ASSISTANT_REFERENCE: ${{ github.event_name == 'pull_request' && github.head_ref || inputs.WAZUH_INSTALLATION_ASSISTANT_REFERENCE }} | |
| AUTOMATION_REFERENCE: ${{ inputs.AUTOMATION_REFERENCE }} | |
| WAZUH_VERSION: "4.10" | |
| PKG_REPOSITORY: ${{ github.event_name == 'pull_request' && 'pre-release' || inputs.PKG_REPOSITORY }} | |
| #AWS_ACCOUNT: "wazuh-dev" | |
| VERBOSITY: ${{ github.event_name == 'pull_request' && '-v' || inputs.VERBOSITY }} | |
| COMPOSITE_NAME: "linux-SUBNAME-amd64" | |
| REGION: "us-east-1" | |
| TMP_PATH: "/tmp/test" | |
| REPOSITORY_URL: "${{ github.server_url }}/${{ github.repository }}.git" | |
| ALLOCATOR_PATH: "/tmp/allocator_instance" | |
| ANSIBLE_CALLBACK: "yaml" | |
| permissions: | |
| id-token: write # This is required for requesting the JWT | |
| contents: read # This is required for actions/checkout | |
| jobs: | |
| Create-allocator-instances: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| system: ${{ github.event_name == 'pull_request' && fromJson('["Ubuntu_22", "CentOS_8"]') || fromJson(inputs.SYSTEMS) }} | |
| steps: | |
| - name: View parameters | |
| run: echo "${{ toJson(inputs) }}" | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ env.WAZUH_INSTALLATION_ASSISTANT_REFERENCE }} | |
| - name: Set COMPOSITE_NAME variable | |
| run: | | |
| case "${{ matrix.system }}" in | |
| "CentOS_7") | |
| SUBNAME="centos-7" | |
| ;; | |
| "CentOS_8") | |
| SUBNAME="centos-8" | |
| ;; | |
| "AmazonLinux_2") | |
| SUBNAME="amazon-2" | |
| ;; | |
| "Ubuntu_16") | |
| SUBNAME="ubuntu-16.04" | |
| ;; | |
| "Ubuntu_18") | |
| SUBNAME="ubuntu-18.04" | |
| ;; | |
| "Ubuntu_20") | |
| SUBNAME="ubuntu-20.04" | |
| ;; | |
| "Ubuntu_22") | |
| SUBNAME="ubuntu-22.04" | |
| ;; | |
| "RHEL7") | |
| SUBNAME="redhat-7" | |
| ;; | |
| "RHEL8") | |
| SUBNAME="redhat-8" | |
| ;; | |
| *) | |
| echo "Invalid SYSTEM selection" >&2 | |
| exit 1 | |
| ;; | |
| esac | |
| COMPOSITE_NAME="${COMPOSITE_NAME/SUBNAME/$SUBNAME}" | |
| echo "COMPOSITE_NAME=$COMPOSITE_NAME" >> $GITHUB_ENV | |
| - name: Install python and create virtual environment | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y python3 python3-venv | |
| python3 -m venv testing_venv | |
| source testing_venv/bin/activate | |
| python3 -m pip install --upgrade pip | |
| echo PATH=$PATH >> $GITHUB_ENV | |
| - name: Install Ansible | |
| run: pip install ansible-core==2.16 | |
| - name: Set up AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v3 | |
| with: | |
| role-to-assume: ${{ secrets.AWS_IAM_ROLE }} | |
| aws-region: ${{ env.REGION }} | |
| - name: Checkout wazuh/wazuh-automation repository | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: wazuh/wazuh-automation | |
| ref: ${{ env.AUTOMATION_REFERENCE }} | |
| token: ${{ secrets.GH_CLONE_TOKEN }} | |
| path: wazuh-automation | |
| - name: Install and set allocator requirements | |
| run: pip3 install -r wazuh-automation/deployability/deps/requirements.txt | |
| - name: Allocate test instance and set SSH variables | |
| id: allocator_instance | |
| run: | | |
| python3 wazuh-automation/deployability/modules/allocation/main.py --action create --provider aws --size large --composite-name ${{ env.COMPOSITE_NAME }} --working-dir $ALLOCATOR_PATH \ | |
| --track-output $ALLOCATOR_PATH/track.yml --inventory-output $ALLOCATOR_PATH/inventory.yml --instance-name gha_${{ github.run_id }}_assistant_test \ | |
| --label-team devops --label-termination-date 1d | |
| sed 's/: */=/g' $ALLOCATOR_PATH/inventory.yml > $ALLOCATOR_PATH/inventory_mod.yml | |
| sed -i 's/-o StrictHostKeyChecking=no/\"-o StrictHostKeyChecking=no\"/g' $ALLOCATOR_PATH/inventory_mod.yml | |
| source $ALLOCATOR_PATH/inventory_mod.yml | |
| echo "[gha_instance]" > $ALLOCATOR_PATH/inventory | |
| echo "$ansible_host ansible_port=$ansible_port ansible_user=$ansible_user ansible_ssh_private_key_file=$ansible_ssh_private_key_file ansible_ssh_common_args='$ansible_ssh_common_args'" >> $ALLOCATOR_PATH/inventory | |
| - name: Execute provision playbook | |
| run: | | |
| INSTALL_DEPS=true | |
| INSTALL_PYTHON=true | |
| INSTALL_PIP_DEPS=true | |
| ANSIBLE_STDOUT_CALLBACK=$ANSIBLE_CALLBACK ansible-playbook .github/workflows/ansible-playbooks/provision.yml \ | |
| -i $ALLOCATOR_PATH/inventory \ | |
| -l all \ | |
| -e "repository=$REPOSITORY_URL" \ | |
| -e "reference=$WAZUH_INSTALLATION_ASSISTANT_REFERENCE" \ | |
| -e "tmp_path=$TMP_PATH" \ | |
| -e "install_deps=$INSTALL_DEPS" \ | |
| -e "install_python=$INSTALL_PYTHON" \ | |
| -e "install_pip_deps=$INSTALL_PIP_DEPS" \ | |
| "$VERBOSITY" | |
| - name: Execute offline installation playbook | |
| run: | | |
| ANSIBLE_STDOUT_CALLBACK=$ANSIBLE_CALLBACK ansible-playbook .github/workflows/ansible-playbooks/offline_installation.yml \ | |
| -i $ALLOCATOR_PATH/inventory \ | |
| -l all \ | |
| -e "tmp_path=$TMP_PATH" \ | |
| -e "pkg_repository=$PKG_REPOSITORY" \ | |
| -e "wazuh_version=$WAZUH_VERSION" \ | |
| "$VERBOSITY" | |
| - name: Compress Allocator VM directory | |
| id: compress_allocator_files | |
| if: always() && steps.allocator_instance.outcome == 'success' && inputs.DESTROY == false && github.event_name != 'pull_request' | |
| run: | | |
| zip -P "${{ secrets.ZIP_ARTIFACTS_PASSWORD }}" -r $ALLOCATOR_PATH.zip $ALLOCATOR_PATH | |
| - name: Upload Allocator VM directory as artifact | |
| if: always() && steps.compress_allocator_files.outcome == 'success' && inputs.DESTROY == false && github.event_name != 'pull_request' | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: allocator-instance-${{ matrix.system }} | |
| path: ${{ env.ALLOCATOR_PATH }}.zip | |
| - name: Delete allocated VM | |
| if: always() && steps.allocator_instance.outcome == 'success' && (inputs.DESTROY == true || github.event_name == 'pull_request') | |
| run: python3 wazuh-automation/deployability/modules/allocation/main.py --action delete --track-output $ALLOCATOR_PATH/track.yml |