forked from dogtagpki/pki
-
Notifications
You must be signed in to change notification settings - Fork 0
150 lines (133 loc) · 4.08 KB
/
kra-tests.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
name: KRA Tests
on: [push, pull_request]
jobs:
init:
name: Initializing workflow
runs-on: ubuntu-latest
outputs:
matrix: ${{ steps.init.outputs.matrix }}
repo: ${{ steps.init.outputs.repo }}
db-image: ${{ steps.init.outputs.db-image }}
steps:
- name: Clone repository
uses: actions/checkout@v3
- name: Initialize workflow
id: init
env:
BASE64_MATRIX: ${{ secrets.BASE64_MATRIX }}
BASE64_REPO: ${{ secrets.BASE64_REPO }}
BASE64_DATABASE: ${{ secrets.BASE64_DATABASE }}
run: |
tests/bin/init-workflow.sh
# docs/development/Building_PKI.md
build:
name: Building PKI
needs: init
runs-on: ubuntu-latest
strategy:
matrix: ${{ fromJSON(needs.init.outputs.matrix) }}
steps:
- name: Clone repository
uses: actions/checkout@v3
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v2
- name: Cache Docker layers
id: cache-buildx
uses: actions/cache@v3
with:
key: buildx-${{ matrix.os }}-${{ hashFiles('pki.spec') }}
path: /tmp/.buildx-cache
- name: Build pki-deps image
uses: docker/build-push-action@v3
with:
context: .
build-args: |
OS_VERSION=${{ matrix.os }}
COPR_REPO=${{ needs.init.outputs.repo }}
tags: pki-deps
target: pki-deps
cache-to: type=local,dest=/tmp/.buildx-cache
if: steps.cache-buildx.outputs.cache-hit != 'true'
- name: Build pki-builder-deps image
uses: docker/build-push-action@v3
with:
context: .
build-args: |
OS_VERSION=${{ matrix.os }}
COPR_REPO=${{ needs.init.outputs.repo }}
tags: pki-builder-deps
target: pki-builder-deps
cache-to: type=local,dest=/tmp/.buildx-cache
if: steps.cache-buildx.outputs.cache-hit != 'true'
- name: Build runner image
uses: docker/build-push-action@v3
with:
context: .
build-args: |
OS_VERSION=${{ matrix.os }}
COPR_REPO=${{ needs.init.outputs.repo }}
tags: pki-runner
target: pki-runner
cache-from: type=local,src=/tmp/.buildx-cache
outputs: type=docker,dest=pki-runner.tar
- name: Store runner image
uses: actions/cache@v3
with:
key: pki-kra-runner-${{ matrix.os }}-${{ github.run_id }}
path: pki-runner.tar
kra-basic-test:
name: Basic KRA
needs: [init, build]
strategy:
matrix: ${{ fromJSON(needs.init.outputs.matrix) }}
uses: ./.github/workflows/kra-basic-test.yml
with:
os: ${{ matrix.os }}
kra-separate-test:
name: KRA on separate instance
needs: [init, build]
strategy:
matrix: ${{ fromJSON(needs.init.outputs.matrix) }}
uses: ./.github/workflows/kra-separate-test.yml
with:
os: ${{ matrix.os }}
kra-external-certs-test:
name: KRA with external certs
needs: [init, build]
strategy:
matrix: ${{ fromJSON(needs.init.outputs.matrix) }}
uses: ./.github/workflows/kra-external-certs-test.yml
with:
os: ${{ matrix.os }}
kra-cmc-test:
name: KRA with CMC
needs: [init, build]
strategy:
matrix: ${{ fromJSON(needs.init.outputs.matrix) }}
uses: ./.github/workflows/kra-cmc-test.yml
with:
os: ${{ matrix.os }}
kra-clone-test:
name: KRA clone
needs: [init, build]
strategy:
matrix: ${{ fromJSON(needs.init.outputs.matrix) }}
uses: ./.github/workflows/kra-clone-test.yml
with:
os: ${{ matrix.os }}
kra-standalone-test:
name: Standalone KRA
needs: [init, build]
strategy:
matrix: ${{ fromJSON(needs.init.outputs.matrix) }}
uses: ./.github/workflows/kra-standalone-test.yml
with:
os: ${{ matrix.os }}
kra-rsnv3-test:
name: KRA with RSNv3
needs: [init, build]
strategy:
matrix: ${{ fromJSON(needs.init.outputs.matrix) }}
uses: ./.github/workflows/kra-rsnv3-test.yml
with:
os: ${{ matrix.os }}