[Backport 2.x] fix workflow security tests in alerting #2655
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test Workflow | |
| # This workflow is triggered on pull requests and pushes to main or an OpenSearch release branch | |
| on: | |
| pull_request: | |
| branches: | |
| - "*" | |
| push: | |
| branches: | |
| - "*" | |
| jobs: | |
| Get-CI-Image-Tag: | |
| uses: opensearch-project/opensearch-build/.github/workflows/get-ci-image-tag.yml@main | |
| with: | |
| product: opensearch | |
| build-linux: | |
| needs: Get-CI-Image-Tag | |
| env: | |
| BUILD_ARGS: ${{ matrix.os_build_args }} | |
| WORKING_DIR: ${{ matrix.working_directory }}. | |
| strategy: | |
| matrix: | |
| java: [11, 17] | |
| # Job name | |
| name: Build Alerting with JDK ${{ matrix.java }} on Linux | |
| # This job runs on Linux | |
| runs-on: ubuntu-latest | |
| container: | |
| # using the same image which is used by opensearch-build team to build the OpenSearch Distribution | |
| # this image tag is subject to change as more dependencies and updates will arrive over time | |
| image: ${{ needs.Get-CI-Image-Tag.outputs.ci-image-version-linux }} | |
| # need to switch to root so that github actions can install runner binary on container without permission issues. | |
| options: --user root | |
| steps: | |
| # This step uses the checkout Github action: https://github.com/actions/checkout | |
| - name: Checkout Branch | |
| uses: actions/checkout@v2 | |
| # This step uses the setup-java Github action: https://github.com/actions/setup-java | |
| - name: Set Up JDK ${{ matrix.java }} | |
| uses: actions/setup-java@v1 | |
| with: | |
| java-version: ${{ matrix.java }} | |
| - name: Build and run with Gradle | |
| run: | | |
| chown -R 1000:1000 `pwd` | |
| su `id -un 1000` -c "whoami && java -version && ./gradlew assemble integTest" | |
| - name: Create Artifact Path | |
| run: | | |
| mkdir -p alerting-artifacts | |
| cp ./alerting/build/distributions/*.zip alerting-artifacts | |
| # This step uses the codecov-action Github action: https://github.com/codecov/codecov-action | |
| - name: Upload Coverage Report | |
| uses: codecov/codecov-action@v1 | |
| with: | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| # This step uses the upload-artifact Github action: https://github.com/actions/upload-artifact | |
| - name: Upload Artifacts | |
| uses: actions/upload-artifact@v1 | |
| with: | |
| name: alerting-plugin-${{ matrix.os }} | |
| path: alerting-artifacts | |
| build: | |
| needs: Get-CI-Image-Tag | |
| env: | |
| BUILD_ARGS: ${{ matrix.os_build_args }} | |
| WORKING_DIR: ${{ matrix.working_directory }}. | |
| strategy: | |
| matrix: | |
| java: [11, 17] | |
| os: [ windows-latest, macos-latest ] | |
| include: | |
| - os: windows-latest | |
| os_build_args: -x integTest | |
| working_directory: X:\ | |
| os_java_options: -Xmx4096M | |
| # Job name | |
| name: Build Alerting with JDK ${{ matrix.java }} on ${{ matrix.os }} | |
| # This job runs on Linux | |
| runs-on: ${{ matrix.os }} | |
| steps: | |
| # This step uses the checkout Github action: https://github.com/actions/checkout | |
| - name: Checkout Branch | |
| uses: actions/checkout@v2 | |
| # This is a hack, but this step creates a link to the X: mounted drive, which makes the path | |
| # short enough to work on Windows | |
| - name: Shorten Path | |
| if: ${{ matrix.os == 'windows-latest' }} | |
| run: subst 'X:' . | |
| # This step uses the setup-java Github action: https://github.com/actions/setup-java | |
| - name: Set Up JDK ${{ matrix.java }} | |
| uses: actions/setup-java@v1 | |
| with: | |
| java-version: ${{ matrix.java }} | |
| - name: Build and run with Gradle | |
| working-directory: ${{ env.WORKING_DIR }} | |
| run: ./gradlew assemble integTest ${{ env.BUILD_ARGS }} | |
| env: | |
| _JAVA_OPTIONS: ${{ matrix.os_java_options }} | |
| - name: Create Artifact Path | |
| run: | | |
| mkdir -p alerting-artifacts | |
| cp ./alerting/build/distributions/*.zip alerting-artifacts | |
| # This step uses the upload-artifact Github action: https://github.com/actions/upload-artifact | |
| - name: Upload Artifacts | |
| uses: actions/upload-artifact@v1 | |
| with: | |
| name: alerting-plugin-${{ matrix.os }} | |
| path: alerting-artifacts |