This repository has been archived by the owner on Mar 29, 2024. It is now read-only.
better region #11
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: test-new-ci | |
| permissions: | |
| id-token: write | |
| contents: read | |
| defaults: | |
| run: | |
| # We need -e -o pipefail for consistency with GitHub Actions' default behavior | |
| shell: bash -e -o pipefail {0} | |
| on: | |
| push: | |
| workflow_dispatch: | |
| jobs: | |
| build-test-and-publish-2: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Free GH runner build space | |
| run: | | |
| df -h | |
| sudo rm -rf /usr/share/dotnet | |
| sudo rm -rf /usr/local/lib/android | |
| sudo rm -rf /opt/ghc | |
| sudo rm -rf /opt/hostedtoolcache/CodeQL | |
| sudo docker image prune --all --force | |
| df -h | |
| - name: Checkout Repo | |
| uses: actions/checkout@v3 | |
| with: | |
| token: ${{ secrets.PAT }} | |
| repository: ${{ github.repository }} | |
| ref: ${{ github.ref_name }} | |
| - name: Login to GHCR | |
| uses: docker/login-action@v2 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Login to registry1 | |
| uses: docker/login-action@v2 | |
| with: | |
| registry: registry1.dso.mil | |
| username: ${{ secrets.REGISTRY1_USERNAME }} | |
| password: ${{ secrets.REGISTRY1_PASSWORD }} | |
| - name: Build bundle and all dependencies | |
| run: | | |
| make build/all | |
| - name: Add zarf to bin on path | |
| run: | | |
| sudo cp build/zarf /usr/local/bin/zarf | |
| - name: Create k3s cluster in AWS | |
| id: create-cluster | |
| uses: defenseunicorns/uds-aws-ci-k3d@swf_additions | |
| with: | |
| cluster-action: create | |
| aws-assume-role: ${{ secrets.AWS_COMMERCIAL_ROLE_TO_ASSUME_K3D }} | |
| aws-region: us-east-2 | |
| instance-size: "m6i.8xlarge" | |
| ami-prefix: "rc-uds-ci-k3d" | |
| k3s: "true" | |
| - name: Deploy bundle | |
| run: | | |
| make deploy | |
| - name: Setup LB hostnames | |
| run: | | |
| utils/metallb/dns.sh | |
| sudo utils/metallb/hosts-write.sh | |
| - name: Run tests | |
| run: | | |
| make start-proxy | |
| kubectl rollout status deployment/gitlab-webservice-default -n gitlab --watch --timeout=1200s | |
| curl https://keycloak.bigbang.dev | |
| curl https://gitlab.bigbang.dev | |
| curl https://grafana.bigbang.dev | |
| make stop-proxy | |
| - name: Teardown k3s cluster | |
| if: always() | |
| # renovate: datasource=github-tags depName=defenseunicorns/uds-aws-ci-k3d versioning=semver | |
| uses: defenseunicorns/uds-aws-ci-k3d@swf_additions | |
| with: | |
| cluster-action: destroy | |
| ami-prefix: "rc-uds-ci-k3d" | |
| k3s: "true" |