CI/CD | enclave-cc e2e tests #669
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI/CD | enclave-cc e2e tests | |
| on: | |
| schedule: | |
| - cron: "0 0 * * *" | |
| permissions: | |
| contents: read | |
| jobs: | |
| e2e: | |
| name: operator enclave-cc e2e tests | |
| runs-on: ubuntu-22.04 | |
| services: | |
| registry: | |
| image: registry:2 | |
| ports: | |
| - 5000:5000 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v2 | |
| with: | |
| driver-opts: network=host | |
| - name: Build and push to local registry | |
| run: | | |
| make docker-build | |
| make docker-push | |
| env: | |
| IMG: localhost:5000/cc-operator:latest | |
| - name: Setup kind cluster | |
| run: | | |
| kind create cluster --image "kindest/node:v1.31.0@sha256:53df588e04085fd41ae12de0c3fe4c72f7013bba32a20e7325357a1ac94ba865" -n coco-sgx --config tests/e2e/enclave-cc-kind-config.yaml --wait 120s | |
| kubectl label node coco-sgx-worker node.kubernetes.io/worker= | |
| - name: Deploy operator from the local registry | |
| run: | | |
| cd config/default | |
| kustomize edit set image localhost:5000/cc-operator:latest | |
| kubectl apply -k . | |
| sleep 1 | |
| kubectl wait --for=jsonpath='{.status.conditions[0].status}'=True deployments/cc-operator-controller-manager -n confidential-containers-system | |
| - name: Install enclave-cc sim | |
| run: | | |
| cd config/samples/enclave-cc/sim | |
| latest_ci_tag=$(curl -s -X GET "https://quay.io/api/v1/repository/confidential-containers/runtime-payload-ci/tag/" | jq -r -n 'first(inputs | .tags[].name | select(test("enclave-cc-SIM-sample-kbc-[a-f0-9]{40}")))') | |
| kustomize edit set image quay.io/confidential-containers/runtime-payload=quay.io/confidential-containers/runtime-payload-ci:$latest_ci_tag | |
| echo "Testing Enclave CC using the following CI tag: ${latest_ci_tag}" | |
| kubectl apply -k . | |
| sleep 1 | |
| kubectl wait --for=jsonpath='{.status.runtimeClass}'=enclave-cc ccruntime/ccruntime-enclave-cc-sgx-mode-sim --timeout=90s | |
| - name: Deploy sample workload | |
| run: | | |
| kubectl apply -f tests/e2e/enclave-cc-pod-sim.yaml | |
| kubectl wait --for=condition=Ready pod/enclave-cc-pod-sim |