-
Notifications
You must be signed in to change notification settings - Fork 898
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
wip: include regression tests in master's CI
Signed-off-by: Jason Dellaluce <[email protected]>
- Loading branch information
1 parent
693f380
commit b4cfc3e
Showing
4 changed files
with
162 additions
and
105 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,40 @@ | ||
| # This is a reusable workflow used by master and release CI | ||
| on: | ||
| workflow_call: | ||
| outputs: | ||
| version: | ||
| description: "Falco version" | ||
| value: ${{ jobs.fetch-version.outputs.version }} | ||
|
|
||
| jobs: | ||
| # We need to use an ubuntu-latest to fetch Falco version because | ||
| # Falco version is computed by some cmake scripts that do git sorceries | ||
| # to get the current version. | ||
| # But centos7 jobs have a git version too old and actions/checkout does not | ||
| # fully clone the repo, but uses http rest api instead. | ||
| fetch-version: | ||
| runs-on: ubuntu-latest | ||
| # Map the job outputs to step outputs | ||
| outputs: | ||
| version: ${{ steps.store_version.outputs.version }} | ||
| steps: | ||
| - name: Checkout | ||
| uses: actions/checkout@v3 | ||
| with: | ||
| fetch-depth: 0 | ||
|
|
||
| - name: Install build dependencies | ||
| run: | | ||
| sudo apt update | ||
| sudo apt install -y cmake build-essential | ||
| - name: Configure project | ||
| run: | | ||
| mkdir build && cd build | ||
| cmake -DUSE_BUNDLED_DEPS=On .. | ||
| - name: Load and store Falco version output | ||
| id: store_version | ||
| run: | | ||
| FALCO_VERSION=$(cat build/userspace/falco/config_falco.h | grep 'FALCO_VERSION ' | cut -d' ' -f3 | sed -e 's/^"//' -e 's/"$//') | ||
| echo "version=${FALCO_VERSION}" >> $GITHUB_OUTPUT |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,67 @@ | ||
| # This is a reusable workflow used by master and release CI | ||
| on: | ||
| workflow_call: | ||
| inputs: | ||
| arch: | ||
| description: x86_64 or aarch64 | ||
| required: true | ||
| type: string | ||
| version: | ||
| description: The Falco version to use when testing packages | ||
| required: true | ||
| type: string | ||
|
|
||
| jobs: | ||
| test-packages: | ||
| # See https://github.com/actions/runner/issues/409#issuecomment-1158849936 | ||
| runs-on: ${{ (inputs.arch == 'aarch64' && fromJSON('[ "self-hosted", "linux", "ARM64" ]')) || 'ubuntu-latest' }} | ||
| steps: | ||
| - name: Checkout | ||
| uses: actions/checkout@v3 | ||
| with: | ||
| fetch-depth: 0 | ||
| submodules: 'true' | ||
|
|
||
| - name: Setup Go | ||
| uses: actions/setup-go@v3 | ||
| with: | ||
| go-version: '>=1.17.0' | ||
|
|
||
| - name: Download binary | ||
| uses: actions/download-artifact@v3 | ||
| with: | ||
| name: falco-${{ inputs.version }}-${{ inputs.arch }}.tar.gz | ||
|
|
||
| - name: Install Falco package | ||
| run: | | ||
| tar -xvf $(ls falco-*.tar.gz) | ||
| cd $(ls falco-*.tar.gz | sed -e 's/\.tar\.gz$//') | ||
| sudo cp -r * / | ||
| - name: Install go-junit-report | ||
| run: | | ||
| pushd submodules/falcosecurity-testing | ||
| go install github.com/jstemmer/go-junit-report/v2@latest | ||
| popd | ||
| - name: Generate regression test files | ||
| run: | | ||
| pushd submodules/falcosecurity-testing | ||
| go generate ./... | ||
| popd | ||
| - name: Run regression tests | ||
| run: | | ||
| pushd submodules/falcosecurity-testing | ||
| ./build/falco.test -test.timeout=90s -test.v >> ./report.txt 2>&1 || true | ||
| ./build/falcoctl.test -test.timeout=90s -test.v >> ./report.txt 2>&1 || true | ||
| ./build/k8saudit.test -test.timeout=90s -test.v >> ./report.txt 2>&1 || true | ||
| cat ./report.txt | go-junit-report -set-exit-code > report.xml | ||
| popd | ||
| - name: Test Summary | ||
| if: always() # run this even if previous step fails | ||
| uses: test-summary/action@v2 | ||
| with: | ||
| paths: "submodules/falcosecurity-testing/report.xml" | ||
| show: "fail" |