Add debugging output to OIDC CI workflow #45
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: OIDC integration tests | |
on: | |
pull_request: | |
push: | |
branches: | |
- qa/** | |
- stable/** | |
- dev/oidc-tests | |
jobs: | |
integration-tests: | |
runs-on: ubuntu-20.04 | |
strategy: | |
fail-fast: false | |
matrix: | |
browser: [Chrome, Electron, Firefox] | |
name: ${{ matrix.browser }} | |
env: | |
COMPOSE_FILE: ${{ github.workspace }}/docker/docker-compose.dev.yml | |
steps: | |
- name: Check out code | |
uses: actions/checkout@v3 | |
- name: Start containerized services | |
run: | | |
sudo sysctl -w vm.max_map_count=262144 | |
docker compose -p ci up -d percona elasticsearch gearmand | |
- name: Set CI-specific Realm File | |
run: echo "REALM_FILE=../test/etc/keycloak/realm.json" >> $GITHUB_ENV | |
- name: Launch Keycloak service | |
run: | | |
docker compose -p ci -f ${{ github.workspace }}/docker/docker-compose.keycloak.yml up -d | |
- name: Wait for Keycloak to be Ready | |
run: | | |
echo "Waiting for Keycloak to be ready..." | |
for i in {1..30}; do | |
if nc -z localhost 8080; then | |
echo "Keycloak is up!" | |
break | |
fi | |
echo "Waiting for Keycloak..." | |
sleep 5 | |
done | |
- name: Setup PHP | |
uses: shivammathur/setup-php@v2 | |
with: | |
php-version: 7.4 | |
coverage: none | |
extensions: apcu, opcache | |
- name: Setup PHP-FPM | |
run: | | |
sudo apt install php7.4-fpm | |
sudo service php7.4-fpm start | |
- name: Cache Composer dependencies | |
uses: actions/cache@v3 | |
with: | |
path: ~/.composer/cache/files | |
key: 20.04-7.4-composer-${{ hashFiles('composer.lock') }} | |
- name: Install Composer dependencies | |
run: composer install | |
- name: Cache NPM dependencies | |
uses: actions/cache@v3 | |
with: | |
path: | | |
~/.npm | |
~/.cache/Cypress | |
key: npm-${{ hashFiles('package-lock.json') }} | |
- name: Install NPM dependencies | |
run: sudo npm install -g npm && npm ci | |
- name: Modify Gearman config | |
run: | | |
echo -e "all:\n servers:\n default: 127.0.0.1:63005" \ | |
> apps/qubit/config/gearman.yml | |
- name: Build themes | |
run: | | |
sudo npm install -g "less@<4.0.0" | |
make -C plugins/arDominionPlugin | |
make -C plugins/arArchivesCanadaPlugin | |
npm run build | |
- name: Run the installer | |
run: | | |
php symfony tools:install \ | |
--database-host=127.0.0.1 \ | |
--database-port=63003 \ | |
--database-name=atom \ | |
--database-user=atom \ | |
--database-password=atom_12345 \ | |
--search-host=127.0.0.1 \ | |
--search-port=63002 \ | |
--search-index=atom \ | |
--demo \ | |
--no-confirmation | |
- name: Start application services | |
run: | | |
sudo cp test/etc/fpm_conf /etc/php/7.4/fpm/pool.d/atom.conf | |
sudo rm /etc/php/7.4/fpm/pool.d/www.conf | |
sudo systemctl restart php7.4-fpm | |
sudo php-fpm7.4 --test | |
sudo cp test/etc/worker_conf /usr/lib/systemd/system/atom-worker.service | |
sudo systemctl daemon-reload | |
sudo systemctl start atom-worker | |
- name: Install and configure Nginx | |
run: | | |
sudo apt install nginx | |
sudo cp test/etc/nginx_conf /etc/nginx/sites-available/atom | |
sudo ln -s /etc/nginx/sites-available/atom /etc/nginx/sites-enabled | |
sudo rm -f /etc/nginx/sites-enabled/default | |
sudo nginx -t | |
sudo systemctl restart nginx | |
- name: Dump contents of app.yml BEFORE copy | |
run: sudo cat plugins/arOidcPlugin/config/app.yml | |
- name: Update OIDC plugin app.yml file | |
run: sudo cp -v test/etc/oidc/arOidcPlugin/config/app.yml plugins/arOidcPlugin/config | |
- name: Dump contents of app.yml AFTER copy | |
run: sudo cat plugins/arOidcPlugin/config/app.yml | |
- name: Update factories.yml to use oidcUser | |
run: | | |
sudo sed -i 's/class: myUser/class: oidcUser/' config/factories.yml | |
- name: Install OIDC Plugin | |
run: | | |
php symfony tools:atom-plugins add arOidcPlugin | |
- name: Clear Symfony cache | |
run: | | |
php symfony cc | |
- name: Restart php-fpm | |
run: | | |
sudo systemctl restart php7.4-fpm | |
sudo php-fpm7.4 --test | |
- name: Change filesystem permissions | |
run: sudo chown -R www-data:www-data ${{ github.workspace }} | |
- name: Create writable Cypress videos and screenshots dirs | |
run: | | |
sudo mkdir -p ${{ github.workspace }}/cypress/screenshots ${{ github.workspace }}/cypress/videos | |
sudo chmod a=rwx ${{ github.workspace }}/cypress/screenshots ${{ github.workspace }}/cypress/videos | |
- name: Ensure NGINX is Running | |
run: sudo systemctl status nginx | |
- name: Run tests | |
env: | |
BROWSER: ${{ matrix.browser }} | |
CYPRESS_VIDEO: false | |
CYPRESS_BASE_URL: http://localhost | |
run: npx cypress run --config-file cypress.config.oidc.js --browser ${BROWSER,} | |
- name: Ensure NGINX is Running | |
run: sudo systemctl status nginx | |
- name: Output NGINX error log | |
if: always() | |
run: sudo cat /var/log/nginx/error.log | |
- name: Output AtoM error test log | |
if: always() | |
run: sudo cat ./log/qubit_test.log | |
- name: Output AtoM error prod log | |
if: always() | |
run: sudo cat ./log/qubit_prod.log | |
- name: Tear down services | |
if: always() | |
run: | | |
docker compose -p ci down | |
docker compose -p ci -f ${{ github.workspace }}/docker/docker-compose.keycloak.yml down |