Admin Bot
819ea346b9
CI / CI (pull_request) Successful in 3m13s
Pipeline was a pass-through wrapping one Task — unnecessary indirection. CI now creates TaskRun directly against the integration-test Task.
134 lines
4.3 KiB
YAML
134 lines
4.3 KiB
YAML
name: CI
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
pull_request:
|
|
branches: [main]
|
|
workflow_dispatch:
|
|
|
|
env:
|
|
REGISTRY: forgejo.riotpiao.com
|
|
IMAGE: forgejo.riotpiao.com/rock/api-gateway
|
|
DOCKER_HOST: tcp://localhost:2375
|
|
|
|
jobs:
|
|
ci:
|
|
name: CI
|
|
runs-on: golang
|
|
steps:
|
|
- name: Install dependencies
|
|
run: |
|
|
apt-get update
|
|
apt-get install -y docker.io curl nodejs
|
|
curl -sLO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
|
|
chmod +x kubectl && mv kubectl /usr/local/bin/
|
|
kubectl version --client
|
|
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Go vet
|
|
run: go vet ./...
|
|
|
|
- name: Go test
|
|
run: go test ./...
|
|
|
|
- name: Get short SHA
|
|
id: sha
|
|
run: echo "short_sha=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
|
|
|
|
- name: Registry login
|
|
run: |
|
|
echo "${REGISTRY_TOKEN}" | docker login "${REGISTRY}" \
|
|
--username "${REGISTRY_USER}" --password-stdin
|
|
env:
|
|
REGISTRY_USER: ${{ secrets.FORGEJO_REGISTRY_USER }}
|
|
REGISTRY_TOKEN: ${{ secrets.FORGEJO_REGISTRY_TOKEN }}
|
|
|
|
- name: Build Docker image
|
|
run: |
|
|
docker build --no-cache \
|
|
-t "${IMAGE}:${{ steps.sha.outputs.short_sha }}" \
|
|
-f Dockerfile .
|
|
|
|
- name: Push image (SHA tag)
|
|
run: docker push "${IMAGE}:${{ steps.sha.outputs.short_sha }}"
|
|
|
|
# ── Tekton integration tests ─────────────────────────────
|
|
- name: Setup kubeconfig
|
|
run: |
|
|
mkdir -p ~/.kube
|
|
echo "${KUBECONFIG_B64}" | base64 -d > ~/.kube/config
|
|
kubectl get pipelineruns -n api --no-headers | head -1 || echo 'No PipelineRuns yet'
|
|
echo '✓ kubeconfig works'
|
|
env:
|
|
KUBECONFIG_B64: ${{ secrets.KUBECONFIG_B64 }}
|
|
|
|
- name: Trigger Tekton PipelineRun
|
|
id: tekton
|
|
run: |
|
|
SHA="${{ steps.sha.outputs.short_sha }}"
|
|
RUN_NAME="integration-test-${SHA}"
|
|
|
|
# Clean up any previous run with the same name
|
|
kubectl delete taskrun "${RUN_NAME}" -n api --ignore-not-found
|
|
|
|
# Create TaskRun — spins up gateway sidecar + curl tests
|
|
cat <<YAML | kubectl create -f -
|
|
apiVersion: tekton.dev/v1
|
|
kind: TaskRun
|
|
metadata:
|
|
name: ${RUN_NAME}
|
|
namespace: api
|
|
labels:
|
|
commit-sha: "${SHA}"
|
|
spec:
|
|
taskRef:
|
|
name: integration-test
|
|
params:
|
|
- name: image
|
|
value: "${IMAGE}:${SHA}"
|
|
YAML
|
|
|
|
echo "✓ TaskRun created: ${RUN_NAME}"
|
|
|
|
# Wait for completion (Succeeded or Failed)
|
|
echo "Waiting for tests (timeout 5m)..."
|
|
if kubectl wait taskrun/"${RUN_NAME}" -n api \
|
|
--for=condition=Succeeded --timeout=5m 2>/dev/null; then
|
|
echo "result=pass" >> $GITHUB_OUTPUT
|
|
else
|
|
echo "result=fail" >> $GITHUB_OUTPUT
|
|
fi
|
|
|
|
# Print logs + results
|
|
echo ""
|
|
echo "=== Test Logs ==="
|
|
POD=$(kubectl get pod -n api -l tekton.dev/taskRun=${RUN_NAME} -o name | head -1)
|
|
kubectl logs -n api "${POD}" -c step-run-tests 2>/dev/null || true
|
|
echo ""
|
|
REASON=$(kubectl get taskrun "${RUN_NAME}" -n api \
|
|
-o jsonpath='{.status.conditions[0].reason}')
|
|
SUMMARY=$(kubectl get taskrun "${RUN_NAME}" -n api \
|
|
-o jsonpath='{.status.results[?(@.name=="summary")].value}')
|
|
echo "Status: ${REASON}"
|
|
echo "Summary: ${SUMMARY}"
|
|
|
|
- name: Gate on test result
|
|
if: steps.tekton.outputs.result != 'pass'
|
|
run: |
|
|
echo "✗ Integration tests FAILED — image NOT promoted"
|
|
exit 1
|
|
|
|
# ── Promote only after tests pass ────────────────────────
|
|
- name: Promote image to latest
|
|
run: |
|
|
docker tag "${IMAGE}:${{ steps.sha.outputs.short_sha }}" "${IMAGE}:latest"
|
|
docker push "${IMAGE}:latest"
|
|
echo "✓ Promoted to latest"
|
|
|
|
- name: Cleanup
|
|
if: always()
|
|
run: docker image prune -af 2>&1 | tail -3 || true
|