Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated Github Actions Workflows for 3.x.x Chaos Center #4063

Merged
merged 22 commits into from
Jul 6, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
206 changes: 115 additions & 91 deletions .github/workflows/build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,52 +16,52 @@ jobs:
frontend: ${{ steps.filter.outputs.frontend }}
graphql-server: ${{ steps.filter.outputs.graphql-server }}
authentication: ${{ steps.filter.outputs.authentication }}
event-tracker: ${{ steps.filter.outputs.event-tracker }}
upgrade-agent-cp: ${{ steps.filter.outputs.upgrade-agent-cp }}
subscriber: ${{ steps.filter.outputs.subscriber }}
litmus-demo: ${{ steps.filter.outputs.litmus-demo }}
dex-server: ${{ steps.filter.outputs.dex-server }}
event-tracker: ${{ steps.filter.outputs.event-tracker }}
# upgrade-agent-cp: ${{ steps.filter.outputs.upgrade-agent-cp }}
# dex-server: ${{ steps.filter.outputs.dex-server }}
steps:
# For pull requests it's not necessary to checkout the code
- uses: dorny/paths-filter@v2
id: filter
with:
filters: |
frontend:
- 'litmus-portal/frontend/**'
- 'chaoscenter/web/**'
graphql-server:
- 'litmus-portal/graphql-server/**'
- 'chaoscenter/graphql/server/**'
authentication:
- 'litmus-portal/authentication/**'
event-tracker:
- 'litmus-portal/cluster-agents/event-tracker/**'
upgrade-agent-cp:
- 'litmus-portal/upgrade-agents/control-plane/**'
- 'chaoscenter/authentication/**'
subscriber:
- 'litmus-portal/cluster-agents/subscriber/**'
litmus-demo:
- 'demo/1.x/**'
dex-server:
- 'litmus-portal/dex-server/**'
- 'chaoscenter/subscriber/**'
event-tracker:
- 'chaoscenter/event-tracker/**'
# upgrade-agent-cp:
# - 'chaoscenter/upgrade-agents/control-plane/**'
# dex-server:
# - 'chaoscenter/dex-server/**'

backend-checks:
runs-on: ubuntu-latest
needs: changes
if: needs.changes.outputs.graphql-server == 'true' || needs.changes.outputs.dex-server == 'true' || needs.changes.outputs.upgrade-agent-cp == 'true' || needs.changes.outputs.authentication == 'true' || needs.changes.outputs.event-tracker == 'true' || needs.changes.outputs.subscriber == 'true'
if: needs.changes.outputs.graphql-server == 'true' || needs.changes.outputs.authentication == 'true' || needs.changes.outputs.subscriber == 'true' || needs.changes.outputs.event-tracker == 'true'
steps:
- name: Checkout repository
uses: actions/checkout@v2

- uses: actions/setup-go@v2
with:
go-version: "1.16" # By default, the go version is v1.15 in runner.
go-version: "1.20" # By default, the go version is v1.15 in runner.

- name: Check Golang imports order
uses: Jerome1337/goimports-action@v1.0.3
with:
goimports-path: ./litmus-portal
goimports-path: ./chaoscenter

- name: Backend checks
shell: bash
run: |
cd litmus-portal
cd chaoscenter
make backend-services-checks

frontend-checks:
Expand All @@ -71,46 +71,49 @@ jobs:
steps:
- name: Checkout repository
uses: actions/checkout@v2

- uses: actions/setup-node@v3
with:
node-version: 16.14.2
node-version: 16

- name: Frontend checks
shell: bash
run: |
cd litmus-portal
cd chaoscenter
make frontend-services-checks

backend-unit-tests:
runs-on: ubuntu-latest
needs:
- changes
- backend-checks
steps:
- name: Checkout repository
uses: actions/checkout@v2
- uses: actions/setup-go@v2
with:
go-version: "1.16" # By default, the go version is v1.15 in runner.
- name: Backend unit tests
shell: bash
run: |
cd litmus-portal
make unit-tests
# backend-unit-tests:
# runs-on: ubuntu-latest
# needs:
# - changes
# - backend-checks
# steps:
# - name: Checkout repository
# uses: actions/checkout@v2
# - uses: actions/setup-go@v2
# with:
# go-version: "1.20" # By default, the go version is v1.15 in runner.
# - name: Backend unit tests
# shell: bash
# run: |
# cd chaoscenter
# make unit-tests

docker-build-graphql-server:
runs-on: ubuntu-latest
needs:
- backend-checks
- changes
- backend-unit-tests
# - backend-unit-tests
if: ${{ needs.changes.outputs.graphql-server == 'true' }}
steps:
- name: Checkout code
uses: actions/checkout@v2

- name: Build graphql server docker image
shell: bash
run: |
cd litmus-portal/graphql-server
cd chaoscenter/graphql/server
docker build . -f Dockerfile -t docker.io/litmuschaos/litmusportal-server:${{ github.sha }} --build-arg TARGETARCH=amd64

- name: Run Trivy vulnerability scanner
Expand All @@ -128,22 +131,24 @@ jobs:
needs:
- backend-checks
- changes
- backend-unit-tests
# - backend-unit-tests
if: ${{ needs.changes.outputs.authentication == 'true' }}
steps:
- name: Checkout code
uses: actions/checkout@v2

- name: Build auth server docker image
shell: bash
run: |
cd litmus-portal/authentication
cd chaoscenter/authentication
docker build . -f Dockerfile -t docker.io/litmuschaos/litmusportal-auth-server:${{ github.sha }} --build-arg TARGETARCH=amd64

- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
image-ref: 'docker.io/litmuschaos/litmusportal-auth-server:${{ github.sha }}'
format: 'table'
exit-code: '1'
exit-code: '0'
ignore-unfixed: true
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH'
Expand All @@ -153,16 +158,18 @@ jobs:
needs:
- backend-checks
- changes
- backend-unit-tests
# - backend-unit-tests
if: ${{ needs.changes.outputs.subscriber == 'true' }}
steps:
- name: Checkout code
uses: actions/checkout@v2

- name: Build subscriber docker image
shell: bash
run: |
cd litmus-portal/cluster-agents/subscriber
cd chaoscenter/subscriber
docker build . -f Dockerfile -t docker.io/litmuschaos/litmusportal-subscriber:${{ github.sha }} --build-arg TARGETARCH=amd64

- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
Expand All @@ -173,83 +180,100 @@ jobs:
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH'

docker-build-event-tracker:
docker-build-frontend:
runs-on: ubuntu-latest
needs:
- backend-checks
- frontend-checks
- changes
- backend-unit-tests
if: ${{ needs.changes.outputs.event-tracker == 'true' }}
if: ${{ needs.changes.outputs.frontend == 'true' }}
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Build event tracker docker image

- name: yarn build check
run: |
cd chaoscenter/web && yarn && yarn build

- name: web docker build check
shell: bash
run: |
cd litmus-portal/cluster-agents/event-tracker
docker build . -f Dockerfile -t docker.io/litmuschaos/litmusportal-event-tracker:${{ github.sha }} --build-arg TARGETARCH=amd64
cd chaoscenter/web
docker build . -f Dockerfile --build-arg TARGETARCH=amd64 -t docker.io/litmuschaos/litmusportal-frontend:${{ github.sha }}

- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
image-ref: 'docker.io/litmuschaos/litmusportal-event-tracker:${{ github.sha }}'
image-ref: 'docker.io/litmuschaos/litmusportal-frontend:${{ github.sha }}'
format: 'table'
exit-code: '1'
ignore-unfixed: true
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH'

docker-build-upgrade-agent-cp:
docker-build-event-tracker:
runs-on: ubuntu-latest
needs:
- backend-checks
- changes
- backend-unit-tests
if: ${{ needs.changes.outputs.upgrade-agent-cp == 'true' }}
# - backend-unit-tests
if: ${{ needs.changes.outputs.event-tracker == 'true' }}
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Build control plane upgrade agent docker image

- name: Build event tracker docker image
shell: bash
run: |
cd litmus-portal/upgrade-agents/control-plane
docker build . -f Dockerfile -t docker.io/litmuschaos/upgrade-agent-cp:${{ github.sha }} --build-arg TARGETARCH=amd64
cd chaoscenter/event-tracker
docker build . -f Dockerfile -t docker.io/litmuschaos/litmusportal-event-tracker:${{ github.sha }} --build-arg TARGETARCH=amd64

- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
image-ref: 'docker.io/litmuschaos/upgrade-agent-cp:${{ github.sha }}'
image-ref: 'docker.io/litmuschaos/litmusportal-event-tracker:${{ github.sha }}'
format: 'table'
exit-code: '1'
exit-code: '0'
ignore-unfixed: true
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH'
severity: 'CRITICAL,HIGH'

docker-build-frontend:
runs-on: ubuntu-latest
needs:
- frontend-checks
- changes
if: ${{ needs.changes.outputs.frontend == 'true' }}
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Build frontend docker image
shell: bash
run: |
cd litmus-portal/frontend
docker build . -f Dockerfile --build-arg TARGETARCH=amd64
# docker-build-upgrade-agent-cp:
# runs-on: ubuntu-latest
# needs:
# - backend-checks
# - changes
# - backend-unit-tests
# if: ${{ needs.changes.outputs.upgrade-agent-cp == 'true' }}
# steps:
# - name: Checkout code
# uses: actions/checkout@v2
# - name: Build control plane upgrade agent docker image
# shell: bash
# run: |
# cd chaoscenter/upgrade-agents/control-plane
# docker build . -f Dockerfile -t docker.io/litmuschaos/upgrade-agent-cp:${{ github.sha }} --build-arg TARGETARCH=amd64
# - name: Run Trivy vulnerability scanner
# uses: aquasecurity/trivy-action@master
# with:
# image-ref: 'docker.io/litmuschaos/upgrade-agent-cp:${{ github.sha }}'
# format: 'table'
# exit-code: '1'
# ignore-unfixed: true
# vuln-type: 'os,library'
# severity: 'CRITICAL,HIGH'

docker-build-dex-server:
runs-on: ubuntu-latest
needs:
- backend-checks
- changes
- backend-unit-tests
if: needs.changes.outputs.dex-server == 'true'
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Build dex-server docker image
shell: bash
run: |
cd litmus-portal/dex-server
docker images && docker build . -f Dockerfile --build-arg TARGETARCH=amd64
# docker-build-dex-server:
# runs-on: ubuntu-latest
# needs:
# - backend-checks
# - changes
# - backend-unit-tests
# if: needs.changes.outputs.dex-server == 'true'
# steps:
# - name: Checkout code
# uses: actions/checkout@v2
# - name: Build dex-server docker image
# shell: bash
# run: |
# cd chaoscenter/dex-server
# docker images && docker build . -f Dockerfile --build-arg TARGETARCH=amd64