ci-test-controllers.yml

name: ci-test-controllers

on:
  pull_request:
    branches:
      - "main"
    paths:
      - "pkg/**"
      - ".github/workflows/ci-test-controllers.yml"

jobs:
  kubearmor-controller-test:
    name: Build and Test KubeArmorController Using Ginkgo
    runs-on: ubuntu-20.04
    timeout-minutes: 30
    steps:
      - uses: actions/setup-go@v3
        with:
          go-version: "v1.20"

      - uses: actions/checkout@v3

      - name: Setup a Kubernetes environment
        run: ./.github/workflows/install-k3s.sh

      - name: Build KubeArmorController
        run: make -C pkg/KubeArmorController/ docker-build TAG=latest

      - name: Install KubeArmor Latest and KubeArmorController using Helm
        run: |
          # install kubearmor latest and controller built in this PR
          helm upgrade --install kubearmor ./deployments/helm/KubeArmor \
          --values ./KubeArmor/build/kubearmor-helm-test-values.yaml \
          --set kubearmorController.imagePullPolicy=Never \
          --set kubearmorInit.imagePullPolicy=Always \
          --set kubearmor.imagePullPolicy=Always \
          --set kubearmor.image.tag=latest \
          -n kubearmor --create-namespace;
          kubectl wait --for=condition=ready --timeout=5m -n kubearmor pod -l kubearmor-app
          kubectl get pods -A

      - name: Test KubeArmor using Ginkgo
        run: |
          go install -mod=mod github.com/onsi/ginkgo/v2/ginkgo
          make -C tests/k8s_env/
        timeout-minutes: 20

      - name: Get karmor sysdump
        if: ${{ failure() }}
        run: |
          kubectl describe pod -n kubearmor -l kubearmor-app=kubearmor
          curl -sfL http://get.kubearmor.io/ | sudo sh -s -- -b /usr/local/bin
          mkdir -p /tmp/kubearmor/ && cd /tmp/kubearmor && karmor sysdump

      - name: Archive log artifacts
        if: ${{ failure() }}
        uses: actions/upload-artifact@v3
        with:
          name: kubearmor.logs
          path: |
            /tmp/kubearmor/
            /tmp/kubearmor.*