Merge branch 'improvement/change-ci-runners' into tmp/octopus/w/127.0…

…/improvement/change-ci-runners

.github/actions/destroy-cluster/action.yaml

@@ -17,11 +17,11 @@ inputs:
   TERRAFORM_VERSION:
     description: "Terraform version to use"
     required: false
-    default: "1.3.6"
+    default: "1.5.2"
   TERRAFORM_SNAPSHOT_TAG:
     description: "Tag to checkout for the scality/terraform-snapshot repository"
     required: false
-    default: "0.9.0"
+    default: "0.12.0"
 
   # Cloud configuration
   CLOUD:
@@ -56,7 +56,7 @@ runs:
     - name: Install tools
       if: inputs.ARTIFACTS_URL
       shell: bash
-      run: sudo yum install -y unzip
+      run: sudo apt-get update && sudo apt-get install -y unzip
     - name: Install node
       if: inputs.ARTIFACTS_URL
       uses: actions/setup-node@v3

.github/actions/generate-snapshots/action.yaml

@@ -25,7 +25,7 @@ runs:
     - name: Install dependencies for Openstack
       if: contains('ovh', inputs.cloud)
       run: |
-        sudo yum install -y python36-pip jq
+        sudo apt-get update && sudo apt-get install -y python3-pip jq
         pip3 install --user --upgrade pip
         pip3 install --user python-openstackclient~=5.8.0 openstacksdk~=1.4.0
       shell: bash

.github/actions/spawn-cluster/action.yaml

@@ -17,11 +17,11 @@ inputs:
   TERRAFORM_VERSION:
     description: "Terraform version to use"
     required: false
-    default: "1.3.6"
+    default: "1.5.2"
   TERRAFORM_SNAPSHOT_TAG:
     description: "Tag to checkout for the scality/terraform-snapshot repository"
     required: false
-    default: "0.9.0"
+    default: "0.12.0"
 
   # Cloud configuration
   CLOUD:
@@ -55,6 +55,10 @@ inputs:
     description: "The RHSM password to use (only needed on RedHat)"
     required: false
     default: ""
+  AUTHORIZED_CIDRS:
+    description: "List of CIDRs to allow SSH and ICMP ingress from"
+    required: false
+    default: '["0.0.0.0/0"]'
 
   args:
     description: Specific arguments to add to the apply command
@@ -98,7 +102,7 @@ runs:
     - name: Install tools
       if: inputs.skip-prepare == 'false'
       shell: bash
-      run: sudo yum install -y unzip tar
+      run: sudo apt-get update && sudo apt-get install -y unzip
     - name: Install node
       if: inputs.skip-prepare == 'false'
       uses: actions/setup-node@v3
@@ -129,6 +133,7 @@ runs:
         TF_VAR_restore_env: "${{ inputs.RESTORE_ENV }}"
         TF_VAR_rhsm_username: "${{ inputs.rhsm-username }}"
         TF_VAR_rhsm_password: "${{ inputs.rhsm-password }}"
+        TF_VAR_ingress_remote_ip_prefix: "${{ inputs.AUTHORIZED_CIDRS }}"
         MAX_RETRIES: "3"
         TFVARS_DIR: "${{ github.workspace }}/.github/spawn/tfvars"
       run: |

.github/workflows/downgrade-test.yaml

@@ -23,14 +23,16 @@ env:
 
 jobs:
   downgrade:
-    runs-on: [self-hosted, centos7, large]
+    # We need to use a large runner so that we have known runner IPs
+    # It allows us to filter authorized IPs on the machines we spawn
+    runs-on: ubuntu-22.04-4core
     env:
       NAME: downgrade-${{ inputs.type }}
     steps:
       - name: Checkout
         uses: actions/checkout@v3
       - name: Install deps
-        run: sudo yum install -y isomd5sum
+        run: sudo apt-get update && sudo apt-get install -y isomd5sum
 
      ## Spawn {{{
       - name: Export environment variables for accessing the cloud
@@ -52,6 +54,7 @@ jobs:
           GIT_ACCESS_TOKEN: ${{ secrets.GIT_ACCESS_TOKEN }}
           ARTIFACTS_USER: ${{ secrets.ARTIFACTS_USER }}
           ARTIFACTS_PASSWORD: ${{ secrets.ARTIFACTS_PASSWORD }}
+          AUTHORIZED_CIDRS: ${{ vars.AUTHORIZED_CIDRS }}
       - name: Save Terraform context
         if: always()
         uses: ./.github/actions/save-terraform-context

.github/workflows/lifecycle-promoted.yaml

@@ -22,7 +22,9 @@ env:
 
 jobs:
   snapshot-upgrade:
-    runs-on: [self-hosted, centos7, large]
+    # We need to use a large runner so that we have known runner IPs
+    # It allows us to filter authorized IPs on the machines we spawn
+    runs-on: ubuntu-22.04-4core
     strategy:
       fail-fast: false
       matrix:
@@ -37,7 +39,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v3
       - name: Install deps
-        run: sudo yum install -y isomd5sum
+        run: sudo apt-get update && sudo apt-get install -y isomd5sum
 
      ## Spawn {{{
       - name: Export environment variables for accessing the cloud
@@ -60,6 +62,7 @@ jobs:
           GIT_ACCESS_TOKEN: ${{ secrets.GIT_ACCESS_TOKEN }}
           ARTIFACTS_USER: ${{ secrets.ARTIFACTS_USER }}
           ARTIFACTS_PASSWORD: ${{ secrets.ARTIFACTS_PASSWORD }}
+          AUTHORIZED_CIDRS: ${{ vars.AUTHORIZED_CIDRS }}
       - name: Save Terraform context
         if: always()
         uses: ./.github/actions/save-terraform-context

.github/workflows/multi-node-test.yaml

@@ -79,15 +79,17 @@ env:
 
 jobs:
   multi-node:
-    runs-on: [self-hosted, centos7, large]
+    # We need to use a large runner so that we have known runner IPs
+    # It allows us to filter authorized IPs on the machines we spawn
+    runs-on: ubuntu-22.04-4core
     env:
       SSH_PRIVATE_KEY: "~/.ssh/terraform"
       NODES_COUNT: ${{ inputs.nodes-count }}
     steps:
       - name: Checkout
         uses: actions/checkout@v3
       - name: Install deps
-        run: sudo yum install -y isomd5sum jq
+        run: sudo apt-get update && sudo apt-get install -y isomd5sum jq
       - name: Retrieve product.txt from artifacts
         run: >
           curl --fail -LO -u ${{ secrets.ARTIFACTS_USER }}:${{ secrets.ARTIFACTS_PASSWORD }}
@@ -118,6 +120,7 @@ jobs:
           GIT_ACCESS_TOKEN: ${{ secrets.GIT_ACCESS_TOKEN }}
           ARTIFACTS_USER: ${{ secrets.ARTIFACTS_USER }}
           ARTIFACTS_PASSWORD: ${{ secrets.ARTIFACTS_PASSWORD }}
+          AUTHORIZED_CIDRS: ${{ vars.AUTHORIZED_CIDRS }}
       - name: Save Terraform context
         if: always()
         uses: ./.github/actions/save-terraform-context
@@ -371,7 +374,9 @@ jobs:
   destroy-multi-node-cluster:
     needs:
       - multi-node
-    runs-on: [self-hosted, centos7, large]
+    # We need to use a large runner so that we have known runner IPs
+    # It allows us to filter authorized IPs on the machines we spawn
+    runs-on: ubuntu-22.04-4core
     if: always()
     steps:
       - name: Checkout

.github/workflows/single-node-test.yaml

@@ -76,14 +76,16 @@ env:
 
 jobs:
   single-node:
-    runs-on: [self-hosted, centos7, large]
+    # We need to use a large runner so that we have known runner IPs
+    # It allows us to filter authorized IPs on the machines we spawn
+    runs-on: ubuntu-22.04-4core
     env:
       SSH_PRIVATE_KEY: "~/.ssh/terraform"
     steps:
       - name: Checkout
         uses: actions/checkout@v3
       - name: Install deps
-        run: sudo yum install -y isomd5sum
+        run: sudo apt-get update && sudo apt-get install -y isomd5sum
       - name: Retrieve product.txt from artifacts
         run: >
           curl --fail -LO -u ${{ secrets.ARTIFACTS_USER }}:${{ secrets.ARTIFACTS_PASSWORD }}
@@ -115,6 +117,7 @@ jobs:
           ARTIFACTS_PASSWORD: ${{ secrets.ARTIFACTS_PASSWORD }}
           rhsm-username: ${{ secrets.RHSM_USERNAME }}
           rhsm-password: ${{ secrets.RHSM_PASSWORD }}
+          AUTHORIZED_CIDRS: ${{ vars.AUTHORIZED_CIDRS }}
       - name: Save Terraform context
         if: always()
         uses: ./.github/actions/save-terraform-context
@@ -267,7 +270,7 @@ jobs:
   destroy-single-node-cluster:
     needs:
       - single-node
-    runs-on: [self-hosted, centos7, large]
+    runs-on: ubuntu-22.04-4core
     if: always()
     steps:
       - name: Checkout

.github/workflows/upgrade-test.yaml

@@ -23,14 +23,16 @@ env:
 
 jobs:
   upgrade:
-    runs-on: [self-hosted, centos7, large]
+    # We need to use a large runner so that we have known runner IPs
+    # It allows us to filter authorized IPs on the machines we spawn
+    runs-on: ubuntu-22.04-4core
     env:
       NAME: upgrade-${{ inputs.type }}
     steps:
       - name: Checkout
         uses: actions/checkout@v3
       - name: Install deps
-        run: sudo yum install -y isomd5sum
+        run: sudo apt-get update && sudo apt-get install -y isomd5sum
 
      ## Spawn {{{
       - name: Export environment variables for accessing the cloud
@@ -52,6 +54,7 @@ jobs:
           GIT_ACCESS_TOKEN: ${{ secrets.GIT_ACCESS_TOKEN }}
           ARTIFACTS_USER: ${{ secrets.ARTIFACTS_USER }}
           ARTIFACTS_PASSWORD: ${{ secrets.ARTIFACTS_PASSWORD }}
+          AUTHORIZED_CIDRS: ${{ vars.AUTHORIZED_CIDRS }}
       - name: Save Terraform context
         if: always()
         uses: ./.github/actions/save-terraform-context