-
Notifications
You must be signed in to change notification settings - Fork 12
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'main' into dependabot/go_modules/k8s.io/apimachinery-0.…
…29.2
- Loading branch information
Showing
6 changed files
with
125 additions
and
14 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,111 @@ | ||
| name: Migration Tests | ||
|
|
||
| permissions: {} | ||
|
|
||
| on: | ||
| workflow_dispatch: {} | ||
| pull_request: | ||
| branches: | ||
| - "main" | ||
|
|
||
| concurrency: | ||
| group: ${{ github.workflow }}-${{ github.ref }} | ||
| cancel-in-progress: true | ||
|
|
||
| jobs: | ||
| required: | ||
| strategy: | ||
| fail-fast: false | ||
| matrix: | ||
| k8s-version: | ||
| - name: v1.26 | ||
| version: v1.26.13 | ||
| - name: v1.27 | ||
| version: v1.27.10 | ||
| - name: v1.28 | ||
| version: v1.28.6 | ||
| - name: v1.29 | ||
| version: v1.29.1 | ||
| tests: | ||
| - ^reports$ | ||
| runs-on: ubuntu-latest | ||
| name: ${{ matrix.k8s-version.name }} - ${{ matrix.tests }} | ||
| steps: | ||
| - name: Checkout | ||
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | ||
| - name: Checkout kyverno/kyverno | ||
| uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 | ||
| with: | ||
| repository: kyverno/kyverno | ||
| path: kyverno | ||
| - name: Setup Go | ||
| uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 | ||
| with: | ||
| go-version: ~1.21.1 | ||
| - name: Install helm | ||
| id: helm | ||
| uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3.5 | ||
| with: | ||
| token: ${{ secrets.GITHUB_TOKEN }} | ||
| - name: Install Tools | ||
| run: | | ||
| set -e | ||
| curl -LO "https://dl.k8s.io/release/${{ matrix.k8s-version.version }}/bin/linux/amd64/kubectl" | ||
| sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl | ||
| - name: Install kind | ||
| shell: bash | ||
| run: | | ||
| set -e | ||
| # For AMD64 / x86_64 | ||
| [ $(uname -m) = x86_64 ] && curl -Lo ./kind https://kind.sigs.k8s.io/dl/v0.20.0/kind-linux-amd64 | ||
| # For ARM64 | ||
| [ $(uname -m) = aarch64 ] && curl -Lo ./kind https://kind.sigs.k8s.io/dl/v0.20.0/kind-linux-arm64 | ||
| chmod +x ./kind | ||
| sudo mv ./kind /usr/local/bin/kind | ||
| - name: Create kind cluster | ||
| run: | | ||
| set -e | ||
| kind create cluster --image kindest/node:${{ matrix.k8s-version.version }} --config ./.github/kind.yml | ||
| - name: Install latest kyverno | ||
| run: | | ||
| set -e | ||
| kubectl create -f https://github.com/kyverno/kyverno/raw/main/config/install-latest-testing.yaml | ||
| - name: Wait for kyverno ready | ||
| run: | | ||
| set -e | ||
| kubectl wait --namespace kyverno --for=condition=ready pod --selector '!job-name' --timeout=60s | ||
| - name: API Service status before migation | ||
| run: | | ||
| set -e | ||
| kubectl get apiservices v1alpha2.wgpolicyk8s.io v1.reports.kyverno.io | ||
| - name: Install report server | ||
| run: | | ||
| set -e | ||
| kubectl create ns reports-server | ||
| kubectl apply -f ./config/install.yaml | ||
| - name: Wait for report server ready | ||
| run: | | ||
| set -e | ||
| kubectl wait --namespace reports-server --for=condition=ready pod --selector '!job-name' --timeout=120s | ||
| kubectl wait --for condition="available" apiservices v1alpha2.wgpolicyk8s.io v1.reports.kyverno.io --timeout=120s | ||
| - name: Wait for kyverno to pick up the change | ||
| run: | | ||
| set -e | ||
| sleep 600 | ||
| - name: API Service status post migration | ||
| run: | | ||
| set -e | ||
| kubectl get apiservices v1alpha2.wgpolicyk8s.io v1.reports.kyverno.io | ||
| - name: Install Chainsaw | ||
| uses: kyverno/action-install-chainsaw@07b6c986572f2abaf6647c85d37cbecfddc4a6ab # v0.1.3 | ||
| with: | ||
| release: v0.0.9 | ||
| - name: Test with Chainsaw | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
| run: | | ||
| set -e | ||
| cd ./kyverno/test/conformance/chainsaw && chainsaw test --config ./../../../../.chainsaw.yaml --include-test-regex '^chainsaw$/${{ matrix.tests }}' --no-color=false | ||
| - name: Debug failure | ||
| if: failure() | ||
| uses: ./.github/actions/failure-logs |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters