Add UBI Dockerfile #24
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # | |
| # Copyright 2022 The GUAC Authors. | |
| # | |
| # Licensed under the Apache License, Version 2.0 (the "License"); | |
| # you may not use this file except in compliance with the License. | |
| # You may obtain a copy of the License at | |
| # | |
| # http://www.apache.org/licenses/LICENSE-2.0 | |
| # | |
| # Unless required by applicable law or agreed to in writing, software | |
| # distributed under the License is distributed on an "AS IS" BASIS, | |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
| # See the License for the specific language governing permissions and | |
| # limitations under the License. | |
| name: ci-trustification | |
| on: | |
| workflow_dispatch: # testing only, trigger manually to test it works | |
| push: | |
| branches: | |
| - trustification-* | |
| pull_request: | |
| branches: | |
| - trustification-* | |
| types: | |
| - opened | |
| - synchronize | |
| - reopened | |
| permissions: | |
| contents: read | |
| jobs: | |
| # test-integration: | |
| # runs-on: ubuntu-latest | |
| # name: CI for integration tests | |
| # services: | |
| # neo4j: | |
| # image: neo4j:latest # TODO(mihaimaruseac): Pin to hash | |
| # env: | |
| # NEO4J_AUTH: none | |
| # ports: | |
| # - 7687:7687 | |
| # postgres: | |
| # image: postgres:16.0@sha256:f007ec48ff3ef9b75dc473d915a3ea3713167ba015340316f6bcabfa86a7b4a6 | |
| # env: | |
| # POSTGRES_USER: guac | |
| # POSTGRES_PASSWORD: guac | |
| # options: >- | |
| # --health-cmd pg_isready | |
| # --health-interval 10s | |
| # --health-timeout 5s | |
| # --health-retries 5 | |
| # ports: | |
| # - 5432:5432 | |
| # arango: | |
| # image: arangodb:latest@sha256:085b45e8c56d5d4114e409482694d40fc8d1678c6b5d98d774bab31193034d6a | |
| # env: | |
| # ARANGO_ROOT_PASSWORD: test123 | |
| # ports: | |
| # - 8529:8529 | |
| # steps: | |
| # - name: Checkout code | |
| # uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # tag=v3 | |
| # - name: setup-go | |
| # uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # tag=v3.2.1 | |
| # with: | |
| # go-version: '1.21' | |
| # - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2 | |
| # with: | |
| # path: ~/go/pkg/mod | |
| # key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| # - name: Setup the project | |
| # run: go mod download | |
| # - name: Run integration tests | |
| # env: | |
| # ENT_TEST_DATABASE_URL: 'postgresql://guac:guac@localhost/guac?sslmode=disable' | |
| # run: make integration-test | |
| # | |
| # test-unit: | |
| # runs-on: ubuntu-latest | |
| # name: CI for unit tests | |
| # steps: | |
| # - name: Checkout code | |
| # uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # tag=v3 | |
| # - name: setup-go | |
| # uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # tag=v3.2.1 | |
| # with: | |
| # go-version: '1.21' | |
| # - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2 | |
| # with: | |
| # path: ~/go/pkg/mod | |
| # key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| # - name: Setup the project | |
| # run: go mod download | |
| # - name: Run tests | |
| # run: make test | |
| # static-analysis: | |
| # name: Static Analysis | |
| # runs-on: ubuntu-latest | |
| # steps: | |
| # - name: Checkout code | |
| # uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # tag=v3 | |
| # - name: setup-go | |
| # uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # tag=v3.2.1 | |
| # with: | |
| # go-version: '1.21' | |
| # - name: Install formatter | |
| # run: go install golang.org/x/tools/cmd/goimports@latest | |
| # - name: Check format | |
| # run: make fmt | |
| # - name: Check that all generated code is up to date | |
| # run: make generated_up_to_date | |
| # lint: | |
| # name: Lint | |
| # runs-on: ubuntu-latest | |
| # steps: | |
| # - name: Checkout code | |
| # uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # tag=v3 | |
| # - name: setup-go | |
| # uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # tag=v4.1.0 | |
| # with: | |
| # go-version: '1.21' | |
| # - name: golangci-lint | |
| # uses: golangci/golangci-lint-action@3a919529898de77ec3da873e3063ca4b10e7f5cc # tag=v3.2.0 | |
| # with: | |
| # only-new-issues: true | |
| # - name: Check markdown format | |
| # run: make format | |
| # - name: Check that all linted text is up to date | |
| # run: make generated_up_to_date | |
| build: | |
| runs-on: ubuntu-latest | |
| name: GO generate/build | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # tag=v3 | |
| - name: setup-go | |
| uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # tag=v3.2.1 | |
| with: | |
| go-version: '1.21' | |
| - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2 | |
| with: | |
| path: ~/go/pkg/mod | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| - name: Setup the project | |
| run: go mod download | |
| - name: Run generate | |
| run: go generate ./... | |
| - name: Run build | |
| run: go build ./... | |
| end-to-end: | |
| name: E2E Trustification | |
| runs-on: ubuntu-latest | |
| services: | |
| postgres: | |
| image: postgres:16.0@sha256:f007ec48ff3ef9b75dc473d915a3ea3713167ba015340316f6bcabfa86a7b4a6 | |
| env: | |
| POSTGRES_USER: guac | |
| POSTGRES_PASSWORD: guac | |
| options: >- | |
| --health-cmd pg_isready | |
| --health-interval 10s | |
| --health-timeout 5s | |
| --health-retries 5 | |
| ports: | |
| - 5432:5432 | |
| steps: | |
| - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 | |
| - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe | |
| with: | |
| go-version: '~1.21' | |
| - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 | |
| with: | |
| python-version: '3.10' | |
| - run: ./internal/testing/e2e-trustification/e2e | |
| # tilt-ci: | |
| # name: Run 'tilt ci' | |
| # runs-on: | |
| # labels: ubuntu-latest | |
| # timeout-minutes: 30 | |
| # steps: | |
| # - name: Install tools | |
| # shell: bash | |
| # run: | | |
| # sudo apt-get install -y git uuid-runtime | |
| # | |
| # # tilt -- https://raw.githubusercontent.com/tilt-dev/tilt/master/scripts/install.sh | |
| # case $(uname -m) in | |
| # aarch64) ARCH=arm64;; | |
| # armv7l) ARCH=arm;; | |
| # *) ARCH=$(uname -m);; | |
| # esac | |
| # VERSION=0.32.0 | |
| # curl -fsSL https://github.com/tilt-dev/tilt/releases/download/v$VERSION/tilt.$VERSION.linux.$ARCH.tar.gz | tar -xzvC /usr/local/bin tilt | |
| # | |
| # # helm | |
| # case $(uname -m) in | |
| # aarch64) ARCH=arm64;; | |
| # armv7l) ARCH=arm;; | |
| # x86_64) ARCH=amd64;; | |
| # *) ARCH=$(uname -m);; | |
| # esac | |
| # VERSION=3.12.0 | |
| # curl -fsSL https://get.helm.sh/helm-v$VERSION-linux-$ARCH.tar.gz | tar --strip-components=1 -xzvC /usr/local/bin linux-$ARCH/helm | |
| # | |
| # # ctlptl - https://github.com/tilt-dev/ctlptl/blob/main/INSTALL.md | |
| # CTLPTL_VERSION="0.8.19" | |
| # curl -fsSL https://github.com/tilt-dev/ctlptl/releases/download/v$CTLPTL_VERSION/ctlptl.$CTLPTL_VERSION.linux.x86_64.tar.gz | sudo tar -xzv -C /usr/local/bin ctlptl | |
| # | |
| # # kind - https://kind.sigs.k8s.io/docs/user/quick-start/#installing-from-release-binaries | |
| # # For AMD64 / x86_64 | |
| # [ $(uname -m) = x86_64 ] && curl -Lo ./kind https://kind.sigs.k8s.io/dl/v0.19.0/kind-linux-amd64 | |
| # # For ARM64 | |
| # [ $(uname -m) = aarch64 ] && curl -Lo ./kind https://kind.sigs.k8s.io/dl/v0.19.0/kind-linux-arm64 | |
| # chmod +x ./kind | |
| # sudo mv ./kind /usr/local/bin/kind | |
| # - name: Install GoReleaser | |
| # uses: goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8 # v5.0.0 | |
| # with: | |
| # install-only: true | |
| # - name: Checkout code | |
| # uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # tag=v3 | |
| # - name: setup-go | |
| # uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # tag=v3.2.1 | |
| # with: | |
| # go-version: '1.21' | |
| # - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2 | |
| # with: | |
| # path: ~/go/pkg/mod | |
| # key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | |
| # - name: Setup the project | |
| # run: go mod download | |
| # - name: Setup kind cluster | |
| # shell: bash | |
| # run: | | |
| # ctlptl create cluster kind --registry=ctlptl-registry | |
| # - name: Run 'tilt ci' | |
| # shell: bash | |
| # run: | | |
| # tilt ci | |
| # - name: Diag after failure | |
| # if: ${{ failure() }} | |
| # shell: bash | |
| # run: | | |
| # echo "K8S CLUSTER STATUS" | |
| # kubectl get all | |
| # | |
| # echo "" | |
| # | |
| # for pod in $(kubectl get pod | awk '$1 != "NAME" { print $1; }') | |
| # do | |
| # echo "" | |
| # echo "=== DIAG POD ${pod} ===" | |
| # echo "" | |
| # kubectl describe "pod/${pod#pod/}" | sed 's,^, ,' | |
| # done |