[RELEASE-1.13] Back-port https://github.com/knative-extensions/net-is… #6465
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: e2e | |
| on: | |
| pull_request: | |
| branches: [ 'main', 'release-*' ] | |
| push: | |
| branches: [ 'main', 'release-*' ] | |
| defaults: | |
| run: | |
| shell: bash | |
| working-directory: ./src/knative.dev/net-istio | |
| jobs: | |
| test: | |
| name: test | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false # Keep running if one leg fails. | |
| matrix: | |
| k8s-version: | |
| - v1.27.x | |
| - v1.28.x | |
| - v1.29.x | |
| test-suite: | |
| - ./test/conformance | |
| - ./test/e2e | |
| istio-version: | |
| - latest | |
| encryption: | |
| - disabled | |
| - system-internal-tls | |
| istio-profile: | |
| - no-mesh | |
| - ambient | |
| env: | |
| GOPATH: ${{ github.workspace }} | |
| KO_DOCKER_REPO: kind.local | |
| # Use a semi-random cluster suffix, but somewhat predictable | |
| # so reruns don't just give us a completely new value. | |
| CLUSTER_SUFFIX: c${{ github.run_id }}.local | |
| steps: | |
| - name: Set up Go 1.21.x | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: 1.21.x | |
| - uses: ko-build/[email protected] | |
| - name: Check out code onto GOPATH | |
| uses: actions/checkout@v4 | |
| with: | |
| path: ./src/knative.dev/net-istio | |
| - name: Create KinD Cluster | |
| uses: chainguard-dev/actions/setup-kind@main | |
| id: kind | |
| with: | |
| k8s-version: ${{ matrix.k8s-version }} | |
| kind-worker-count: 1 | |
| cluster-suffix: "${CLUSTER_SUFFIX}" | |
| - name: Install Knative net-istio | |
| run: | | |
| set -o pipefail | |
| # Replace cluster.local with random suffix. | |
| sed -ie "s/cluster\.local/${CLUSTER_SUFFIX}/g" third_party/istio-${{ matrix.istio-version }}/istio-kind-${{ matrix.istio-profile }}/istio.yaml | |
| # Deploy Istio | |
| ./third_party/istio-${{ matrix.istio-version }}/install-istio.sh istio-kind-${{ matrix.istio-profile }} | |
| # Remove Knative Certificate as we are running without Serving CRs | |
| rm -f config/700-istio-knative-certificate.yaml | |
| # Build and Publish our containers to the docker daemon (including test assets) | |
| ko resolve --platform=linux/amd64 -f test/config/ -f config/ | kubectl apply -f - | |
| CONFIG_ISTIO="./third_party/istio-${{ matrix.istio-version }}/istio-kind-${{ matrix.istio-profile }}/config-istio.yaml" | |
| if [[ -f "${CONFIG_ISTIO}" ]]; then | |
| kubectl apply -f "${CONFIG_ISTIO}" | |
| fi | |
| echo "GATEWAY_NAMESPACE_OVERRIDE=istio-system" >> $GITHUB_ENV | |
| - name: Generate certificates and enable system-internal-tls | |
| if: matrix.encryption == 'system-internal-tls' && matrix.istio-profile == 'no-mesh' | |
| run: | | |
| set -o pipefail | |
| echo ">> Deploy certificate for upstream traffic" | |
| ./test/generate-upstream-cert.sh | |
| echo ">> Setting environment variables for upstream tls" | |
| echo "UPSTREAM_TLS_CERT=serving-certs" >> $GITHUB_ENV | |
| echo "SERVER_NAME=kn-user-serving-tests" >> $GITHUB_ENV | |
| echo ">> Enabling system-internal-tls in config-network" | |
| kubectl apply -f test/config/system-internal-tls | |
| - name: Upload Test Images | |
| run: | | |
| # Build and Publish our test images to the docker daemon. | |
| ./test/upload-test-images.sh | |
| - name: Wait for Ready | |
| run: | | |
| echo Waiting for Pods to become ready. | |
| # # TODO: Find a good way to do this with chaos enabled. | |
| # kubectl wait pod --for=condition=Ready -n knative-serving -l '!job-name' | |
| kubectl wait pod --for=condition=Ready -n ${GATEWAY_NAMESPACE_OVERRIDE} -l '!job-name' | |
| # For debugging. | |
| kubectl get pods --all-namespaces | |
| - name: Run e2e Tests | |
| run: | | |
| set -x | |
| # Exclude the control-plane node, which doesn't seem to expose the nodeport service. | |
| IPS=( $(kubectl get nodes -lkubernetes.io/hostname!=kind-control-plane -ojsonpath='{.items[*].status.addresses[?(@.type=="InternalIP")].address}') ) | |
| # Run the tests tagged as e2e on the KinD cluster. | |
| go test -race -count=1 -short -timeout=20m -tags=e2e ${{ matrix.test-suite }} \ | |
| --enable-alpha --enable-beta \ | |
| --ingressendpoint="${IPS[0]}" \ | |
| --ingressClass=istio.ingress.networking.knative.dev \ | |
| --cluster-suffix=$CLUSTER_SUFFIX | |
| - name: Post failure notice to Slack | |
| uses: rtCamp/[email protected] | |
| if: ${{ failure() && github.event_name != 'pull_request' }} | |
| env: | |
| SLACK_ICON: http://github.com/knative.png?size=48 | |
| SLACK_USERNAME: github-actions | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| SLACK_CHANNEL: 'net-istio' | |
| SLACK_COLOR: '#8E1600' | |
| MSG_MINIMAL: 'true' | |
| SLACK_TITLE: Periodic ${{ matrix.k8s-version }} failed. | |
| SLACK_MESSAGE: | | |
| For detailed logs: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }} |