simp-beaker-helpers 1.21.4 → 1.22.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.fips_fixtures +1 -0
- data/.github/workflows/pr_glci.yml +190 -0
- data/.github/workflows/pr_glci_cleanup.yml +105 -0
- data/.github/workflows/pr_glci_manual.yml +143 -0
- data/.github/workflows/tag_deploy_rubygem.yml +152 -0
- data/.gitlab-ci.yml +24 -37
- data/CHANGELOG.md +20 -0
- data/README.md +63 -5
- data/lib/simp/beaker_helpers.rb +146 -46
- data/lib/simp/beaker_helpers/version.rb +1 -1
- data/lib/simp/rake/beaker.rb +6 -0
- data/spec/acceptance/suites/default/install_simp_deps_repo_spec.rb +17 -5
- data/spec/acceptance/suites/fips_from_fixtures/00_default_spec.rb +1 -0
- metadata +6 -3
- data/.travis.yml +0 -42
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: cf4dabba2a12366f3acb4e850cd1894df06f7ab2f1de040f384351c8a2fdc3a1
|
|
4
|
+
data.tar.gz: ee3ee574fbb0165bc5354cc5a5bc5a9355add5da3412f5e65d2e3d27274d1f4a
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: c11025a91bc2e4cb079531e9930c54e7540b759bc365bb7a676c90a1c6ce50b5af4f610fb22e3c74b54f8c1d858d71ff4f12b30ba136ef5d1788255727c0df91
|
|
7
|
+
data.tar.gz: 50696f976eba788b3ed287af8aab9925ff237ba8d1b524ea0eaf04dbd97b11192a350cde65004696f6b0d83c3ce0bae1561fd408dce6d334aab57745cc1e7f40
|
data/.fips_fixtures
CHANGED
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
fixtures:
|
|
3
3
|
repositories:
|
|
4
|
+
crypto_policy: https://github.com/simp/pupmod-simp-crypto_policy
|
|
4
5
|
fips: https://github.com/simp/pupmod-simp-fips
|
|
5
6
|
augeasproviders_core: https://github.com/simp/augeasproviders_core
|
|
6
7
|
augeasproviders_grub: https://github.com/simp/augeasproviders_grub
|
|
@@ -0,0 +1,190 @@
|
|
|
1
|
+
# Push/Trigger a GitLab CI pipeline for the PR HEAD, **ONLY IF:**
|
|
2
|
+
#
|
|
3
|
+
# 1. The .gitlab-ci.yaml file exists and validates
|
|
4
|
+
# 2. The PR submitter has write access to the target repository.
|
|
5
|
+
#
|
|
6
|
+
# ------------------------------------------------------------------------------
|
|
7
|
+
#
|
|
8
|
+
# NOTICE: **This file is maintained with puppetsync**
|
|
9
|
+
#
|
|
10
|
+
# This file is updated automatically as part of a puppet module baseline.
|
|
11
|
+
#
|
|
12
|
+
# The next baseline sync will overwrite any local changes to this file!
|
|
13
|
+
#
|
|
14
|
+
# ==============================================================================
|
|
15
|
+
#
|
|
16
|
+
# GitHub Action Secrets variables available for this pipeline:
|
|
17
|
+
#
|
|
18
|
+
# GitHub Secret variable Type Notes
|
|
19
|
+
# ------------------------ -------- ----------------------------------------
|
|
20
|
+
# GITLAB_API_PRIVATE_TOKEN Secure Should have `api` scope
|
|
21
|
+
# GITLAB_API_URL Optional
|
|
22
|
+
#
|
|
23
|
+
# The secure vars will be filtered in GitHub Actions log output, and aren't
|
|
24
|
+
# provided to untrusted builds (i.e, triggered by PR from another repository)
|
|
25
|
+
#
|
|
26
|
+
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
27
|
+
# WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING
|
|
28
|
+
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!V!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
29
|
+
#
|
|
30
|
+
# DO NOT MODIFY this workflow, unless you **REALLY** know what you are doing.
|
|
31
|
+
#
|
|
32
|
+
# This workflow bypasses some of the built-in protections of the
|
|
33
|
+
# `pull_request_target` event by explicitly checking out the PR's **HEAD**.
|
|
34
|
+
# Without being VERY CAREFUL, this could easily allow a malcious PR
|
|
35
|
+
# contributor the chance to access secrets or a GITHUB_TOKEN with write scope!!
|
|
36
|
+
#
|
|
37
|
+
# The jobs in this workflow are designed to handle this safely -- but DO NOT
|
|
38
|
+
# assume any alterations will also be safe.
|
|
39
|
+
#
|
|
40
|
+
# For general information, see:
|
|
41
|
+
#
|
|
42
|
+
# https://docs.github.com/en/actions/reference/events-that-trigger-workflows#pull_request_target
|
|
43
|
+
#
|
|
44
|
+
# For further information, or if ANY of this seems confusing or unecessary:
|
|
45
|
+
#
|
|
46
|
+
# ASK FOR ASSISTANCE **BEFORE** ATTEMPTING TO MODIFY THIS WORKFLOW.
|
|
47
|
+
#
|
|
48
|
+
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
49
|
+
# WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING
|
|
50
|
+
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!V!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
51
|
+
#
|
|
52
|
+
# https://docs.github.com/en/actions/reference/events-that-trigger-workflows
|
|
53
|
+
#
|
|
54
|
+
---
|
|
55
|
+
name: PR GLCI
|
|
56
|
+
on:
|
|
57
|
+
pull_request_target:
|
|
58
|
+
types: [opened, reopened, synchronize]
|
|
59
|
+
|
|
60
|
+
jobs:
|
|
61
|
+
|
|
62
|
+
# The ONLY reason we can validate the PR HEAD's content safely here is that
|
|
63
|
+
# we restrict ourselves to sending data elsewhere.
|
|
64
|
+
glci-syntax:
|
|
65
|
+
name: '.gitlab-ci.yml Syntax'
|
|
66
|
+
runs-on: ubuntu-16.04
|
|
67
|
+
outputs:
|
|
68
|
+
valid: ${{ steps.validate-glci-file.outputs.valid }}
|
|
69
|
+
steps:
|
|
70
|
+
- uses: actions/checkout@v2
|
|
71
|
+
with:
|
|
72
|
+
repository: ${{ github.event.pull_request.head.repo.full_name }}
|
|
73
|
+
ref: ${{ github.event.pull_request.head.ref }}
|
|
74
|
+
- name: 'Validate GLCI file syntax'
|
|
75
|
+
id: validate-glci-file
|
|
76
|
+
uses: simp/github-action-gitlab-ci-syntax-check@main
|
|
77
|
+
with:
|
|
78
|
+
gitlab_api_private_token: ${{ secrets.GITLAB_API_PRIVATE_TOKEN }}
|
|
79
|
+
gitlab_api_url: ${{ secrets.GITLAB_API_URL }} # https://gitlab.com/api/v4
|
|
80
|
+
|
|
81
|
+
contributor-permissions:
|
|
82
|
+
name: 'PR contributor check'
|
|
83
|
+
runs-on: ubuntu-18.04
|
|
84
|
+
outputs:
|
|
85
|
+
permitted: ${{ steps.user-repo-permissions.outputs.permitted }}
|
|
86
|
+
steps:
|
|
87
|
+
- uses: actions/github-script@v3
|
|
88
|
+
id: user-repo-permissions
|
|
89
|
+
with:
|
|
90
|
+
github-token: ${{secrets.GITHUB_TOKEN}}
|
|
91
|
+
# See:
|
|
92
|
+
# - https://octokit.github.io/rest.js/
|
|
93
|
+
# - https://docs.github.com/en/free-pro-team@latest/rest/reference/repos#get-repository-permissions-for-a-user
|
|
94
|
+
script: |
|
|
95
|
+
const project_permission = await github.request('GET /repos/{owner}/{repo}/collaborators/{username}/permission', {
|
|
96
|
+
headers: {
|
|
97
|
+
accept: 'application/vnd.github.v3+json'
|
|
98
|
+
},
|
|
99
|
+
owner: context.repo.owner,
|
|
100
|
+
repo: context.repo.repo,
|
|
101
|
+
username: context.payload.sender.login,
|
|
102
|
+
})
|
|
103
|
+
const has_write_access = perm_lvl => (perm_lvl == "admin" || perm_lvl == "write" )
|
|
104
|
+
const write_access_desc = perm_bool => (perm_bool ? "PERMISSION OK" : "PERMISSION DENIED" )
|
|
105
|
+
if( has_write_access(project_permission.data.permission )){
|
|
106
|
+
core.setOutput( 'permitted', 'true' )
|
|
107
|
+
} else {
|
|
108
|
+
core.setOutput( 'permitted', 'false' )
|
|
109
|
+
console.log(`::error ::payload user '${context.payload.sender.login}' does not have CI trigger permission for '${context.repository}; not triggering external CI'`)
|
|
110
|
+
}
|
|
111
|
+
console.log(`== payload user '${context.payload.sender.login}' CI trigger permission for '${context.repo.owner}': ${write_access_desc(has_write_access(project_permission.data.permission))}`)
|
|
112
|
+
|
|
113
|
+
|
|
114
|
+
trigger-when-user-has-repo-permissions:
|
|
115
|
+
name: 'Trigger CI [trusted users only]'
|
|
116
|
+
needs: [ glci-syntax, contributor-permissions ]
|
|
117
|
+
# This conditional provides an extra safety control, in case the workflow's
|
|
118
|
+
# `on` section is inadventently modified without considering the security
|
|
119
|
+
# implications.
|
|
120
|
+
#
|
|
121
|
+
# This job will ONLY trigger on:
|
|
122
|
+
#
|
|
123
|
+
# - [x] pull_request_target event: github.event_name == 'pull_request_target'
|
|
124
|
+
# AND:
|
|
125
|
+
# - [x] Newly-opened PRs: github.event.action == 'opened'
|
|
126
|
+
# - [x] Re-opened PRs: github.event.action == 'reopened'
|
|
127
|
+
# - [x] Commits are added to PR: github.event.action == 'synchronize'
|
|
128
|
+
# AND:
|
|
129
|
+
# - [x] .gitlab-ci.yml exists/ok: needs.glci-syntax.outputs.valid == 'true'
|
|
130
|
+
#
|
|
131
|
+
# [Not implemented] It should NEVER trigger on:
|
|
132
|
+
#
|
|
133
|
+
# - [ ] Merged PRs: github.event.pull_request.merged == 'false'
|
|
134
|
+
# - (the downstream GitLab mirror will take care of that)
|
|
135
|
+
# - Not implemented: For some reason, this conditional always fails
|
|
136
|
+
# - Unnecessary if on>pull_request_target>types doesn't include 'closed'
|
|
137
|
+
if: github.event_name == 'pull_request_target' && ( github.event.action == 'opened' || github.event.action == 'reopened' || github.event.action == 'synchronize' ) && github.event.pull_request.merged != 'true' && needs.glci-syntax.outputs.valid == 'true' && needs.contributor-permissions.outputs.permitted == 'true'
|
|
138
|
+
runs-on: ubuntu-18.04
|
|
139
|
+
steps:
|
|
140
|
+
# Things we'd like to do:
|
|
141
|
+
# - [ ] if there's no GitLab mirror, make one
|
|
142
|
+
# - [ ] if there's no GitLab <-> GitHub integration, make one
|
|
143
|
+
# - [ ] if there's no PR check on the main GitHub branch, make one (?)
|
|
144
|
+
# - [x] Cancel any GLCI pipelines already pending/running for this branch
|
|
145
|
+
# - "created|waiting_for_resource|preparing|pending|running"
|
|
146
|
+
# - Exception: don't cancel existing pipeline for our own commit
|
|
147
|
+
# - [x] if PR: force-push branch to GitLab
|
|
148
|
+
- uses: actions/checkout@v2
|
|
149
|
+
if: needs.contributor-permissions.outputs.permitted == 'true'
|
|
150
|
+
with:
|
|
151
|
+
clean: true
|
|
152
|
+
fetch-depth: 0 # Need full checkout to push to gitlab mirror
|
|
153
|
+
repository: ${{ github.event.pull_request.head.repo.full_name }}
|
|
154
|
+
ref: ${{ github.event.pull_request.head.ref }}
|
|
155
|
+
|
|
156
|
+
- name: Trigger CI when user has Repo Permissions
|
|
157
|
+
if: needs.contributor-permissions.outputs.permitted == 'true'
|
|
158
|
+
uses: simp/github-action-gitlab-ci-pipeline-trigger@v1
|
|
159
|
+
with:
|
|
160
|
+
git_branch: ${{ github.event.pull_request.head.ref }} # TODO check for/avoid protected branches?
|
|
161
|
+
git_hashref: ${{ github.event.pull_request.head.sha }}
|
|
162
|
+
gitlab_api_private_token: ${{ secrets.GITLAB_API_PRIVATE_TOKEN }}
|
|
163
|
+
gitlab_group: ${{ github.event.organization.login }}
|
|
164
|
+
github_repository: ${{ github.repository }}
|
|
165
|
+
github_repository_owner: ${{ github.repository_owner }}
|
|
166
|
+
|
|
167
|
+
- name: When user does NOT have Repo Permissions
|
|
168
|
+
if: needs.contributor-permissions.outputs.permitted == 'false'
|
|
169
|
+
continue-on-error: true
|
|
170
|
+
run: |
|
|
171
|
+
echo "Ending gracefully; Contributor $GITHUB_ACTOR does not have permission to trigger CI"
|
|
172
|
+
false
|
|
173
|
+
|
|
174
|
+
### examine_contexts:
|
|
175
|
+
### name: 'Examine Context contents'
|
|
176
|
+
### if: always()
|
|
177
|
+
### runs-on: ubuntu-16.04
|
|
178
|
+
### needs: [ glci-syntax, contributor-permissions ]
|
|
179
|
+
### steps:
|
|
180
|
+
### - name: Dump contexts
|
|
181
|
+
### env:
|
|
182
|
+
### GITHUB_CONTEXT: ${{ toJson(github) }}
|
|
183
|
+
### run: echo "$GITHUB_CONTEXT"
|
|
184
|
+
### - name: Dump needs context
|
|
185
|
+
### env:
|
|
186
|
+
### ENV_CONTEXT: ${{ toJson(needs) }}
|
|
187
|
+
### run: echo "$ENV_CONTEXT"
|
|
188
|
+
### - name: Dump env vars
|
|
189
|
+
### run: env | sort
|
|
190
|
+
|
|
@@ -0,0 +1,105 @@
|
|
|
1
|
+
# When a PR is closed, clean up any associated GitLab CI pipelines & branch
|
|
2
|
+
#
|
|
3
|
+
# * Cancels all GLCI pipelines associated with the PR HEAD ref (branch)
|
|
4
|
+
# * Removes the PR HEAD branch from the corresponding gitlab.com/org/ project
|
|
5
|
+
#
|
|
6
|
+
# ------------------------------------------------------------------------------
|
|
7
|
+
#
|
|
8
|
+
# NOTICE: **This file is maintained with puppetsync**
|
|
9
|
+
#
|
|
10
|
+
# This file is updated automatically as part of a standardized asset baseline.
|
|
11
|
+
#
|
|
12
|
+
# The next baseline sync will overwrite any local changes to this file!
|
|
13
|
+
#
|
|
14
|
+
# ==============================================================================
|
|
15
|
+
#
|
|
16
|
+
# GitHub Action Secrets variables available for this pipeline:
|
|
17
|
+
#
|
|
18
|
+
# GitHub Secret variable Type Notes
|
|
19
|
+
# ------------------------ -------- ----------------------------------------
|
|
20
|
+
# GITLAB_API_PRIVATE_TOKEN Secure Should have `api` scope
|
|
21
|
+
# GITLAB_API_URL Optional
|
|
22
|
+
#
|
|
23
|
+
# The secure vars will be filtered in GitHub Actions log output, and aren't
|
|
24
|
+
# provided to untrusted builds (i.e, triggered by PR from another repository)
|
|
25
|
+
#
|
|
26
|
+
# ------------------------------------------------------------------------------
|
|
27
|
+
#
|
|
28
|
+
# https://docs.github.com/en/actions/reference/events-that-trigger-workflows
|
|
29
|
+
#
|
|
30
|
+
---
|
|
31
|
+
name: PR GLCI Cleanup
|
|
32
|
+
on:
|
|
33
|
+
pull_request_target:
|
|
34
|
+
types: [closed]
|
|
35
|
+
|
|
36
|
+
jobs:
|
|
37
|
+
cleanup-glci-branch:
|
|
38
|
+
name: 'Clean up GLCI'
|
|
39
|
+
# This conditional provides an extra safety control, in case the workflow's
|
|
40
|
+
# `on` section is inadventently modified without considering the security
|
|
41
|
+
# implications.
|
|
42
|
+
if: github.event_name == 'pull_request_target' && github.event.action == 'closed'
|
|
43
|
+
runs-on: ubuntu-18.04
|
|
44
|
+
steps:
|
|
45
|
+
- uses: actions/checkout@v2
|
|
46
|
+
with:
|
|
47
|
+
repository: ${{ github.event.pull_request.head.repo.full_name }}
|
|
48
|
+
ref: ${{ github.event.pull_request.head.ref }}
|
|
49
|
+
- name: Trigger CI when user has Repo Permissions
|
|
50
|
+
env:
|
|
51
|
+
GITLAB_SERVER_URL: ${{ secrets.GITLAB_SERVER_URL }} # https://gitlab.com
|
|
52
|
+
GITLAB_API_URL: ${{ secrets.GITLAB_API_URL }} # https://gitlab.com/api/v4
|
|
53
|
+
GITLAB_ORG: ${{ github.event.organization.login }}
|
|
54
|
+
GITLAB_API_PRIVATE_TOKEN: ${{ secrets.GITLAB_API_PRIVATE_TOKEN }}
|
|
55
|
+
GIT_BRANCH: ${{ github.event.pull_request.head.ref }}
|
|
56
|
+
run: |
|
|
57
|
+
GITLAB_SERVER_URL="${GITLAB_SERVER_URL:-https://gitlab.com}"
|
|
58
|
+
GITLAB_API_URL="${GITLAB_API_URL:-${GITLAB_SERVER_URL}/api/v4}"
|
|
59
|
+
GIT_BRANCH="${GIT_BRANCH:-GITHUB_HEAD_REF}"
|
|
60
|
+
GITXXB_REPO_NAME="${GITHUB_REPOSITORY/$GITHUB_REPOSITORY_OWNER\//}"
|
|
61
|
+
GITLAB_PROJECT_ID="${GITLAB_ORG}%2F${GITXXB_REPO_NAME}"
|
|
62
|
+
# --http1.0 avoids an HTTP/2 load balancing issue when run from GA
|
|
63
|
+
CURL_CMD=(curl --http1.0 --fail --silent --show-error \
|
|
64
|
+
--header "Authorization: Bearer $GITLAB_API_PRIVATE_TOKEN" \
|
|
65
|
+
--header "Content-Type: application/json" \
|
|
66
|
+
--header "Accept: application/json" \
|
|
67
|
+
)
|
|
68
|
+
|
|
69
|
+
# Cancel any active/pending GitLab CI pipelines for the same project+branch
|
|
70
|
+
active_pipeline_ids=()
|
|
71
|
+
for pipe_status in created waiting_for_resource preparing pending running; do
|
|
72
|
+
echo " ---- checking for CI pipelines with status '$pipe_status' for project '$GITLAB_PROJECT_ID', branch '$GIT_BRANCH'"
|
|
73
|
+
url="${GITLAB_API_URL}/projects/${GITLAB_PROJECT_ID}/pipelines?ref=${GIT_BRANCH}&status=${pipe_status}"
|
|
74
|
+
active_pipelines="$("${CURL_CMD[@]}" "$url" | jq -r '.[] | .id , .web_url')"
|
|
75
|
+
active_pipeline_ids+=($(echo "$active_pipelines" | grep -E '^[0-9]*$'))
|
|
76
|
+
printf "$active_pipelines\n\n"
|
|
77
|
+
done
|
|
78
|
+
if [ "${#active_pipeline_ids[@]}" -gt 0 ]; then
|
|
79
|
+
printf "\nFound %s active pipeline ids:\n" "${#active_pipeline_ids[@]}"
|
|
80
|
+
echo "${active_pipeline_ids[@]}"
|
|
81
|
+
for pipe_id in "${active_pipeline_ids[@]}"; do
|
|
82
|
+
printf "\n ------ Cancelling pipeline ID %s...\n" "$pipe_id"
|
|
83
|
+
"${CURL_CMD[@]}" --request POST "${GITLAB_API_URL}/projects/${GITLAB_PROJECT_ID}/pipelines/${pipe_id}/cancel"
|
|
84
|
+
done
|
|
85
|
+
else
|
|
86
|
+
echo No active pipelines found
|
|
87
|
+
fi
|
|
88
|
+
|
|
89
|
+
echo "== Removing $GIT_BRANCH from gitlab"
|
|
90
|
+
git remote add gitlab "https://oauth2:${GITLAB_API_PRIVATE_TOKEN}@${GITLAB_SERVER_URL#*://}/${GITLAB_ORG}/${GITXXB_REPO_NAME}.git"
|
|
91
|
+
git push gitlab ":${GIT_BRANCH}" -f || : # attempt to un-weird GLCI's `changed` tracking
|
|
92
|
+
|
|
93
|
+
### examine_contexts:
|
|
94
|
+
### name: 'Examine Context contents'
|
|
95
|
+
### if: always()
|
|
96
|
+
### runs-on: ubuntu-16.04
|
|
97
|
+
### steps:
|
|
98
|
+
### - name: Dump contexts
|
|
99
|
+
### env:
|
|
100
|
+
### GITHUB_CONTEXT: ${{ toJson(github) }}
|
|
101
|
+
### run: echo "$GITHUB_CONTEXT"
|
|
102
|
+
### run: echo "$ENV_CONTEXT"
|
|
103
|
+
### - name: Dump env vars
|
|
104
|
+
### run: env | sort
|
|
105
|
+
|
|
@@ -0,0 +1,143 @@
|
|
|
1
|
+
# Manually trigger GLCI pipelines for a PR
|
|
2
|
+
# ------------------------------------------------------------------------------
|
|
3
|
+
#
|
|
4
|
+
# NOTICE: **This file is maintained with puppetsync**
|
|
5
|
+
#
|
|
6
|
+
# This file is updated automatically as part of a standardized asset baseline.
|
|
7
|
+
#
|
|
8
|
+
# The next baseline sync will overwrite any local changes to this file!
|
|
9
|
+
#
|
|
10
|
+
# ==============================================================================
|
|
11
|
+
#
|
|
12
|
+
# This pipeline uses the following GitHub Action Secrets:
|
|
13
|
+
#
|
|
14
|
+
# GitHub Secret variable Type Notes
|
|
15
|
+
# ------------------------ -------- ----------------------------------------
|
|
16
|
+
# GITLAB_API_PRIVATE_TOKEN Required GitLab token (should have `api` scope)
|
|
17
|
+
# NO_SCOPE_GITHUB_TOKEN Required GitHub token (should have no scopes)
|
|
18
|
+
# GITLAB_SERVER_URL Optional Specify a GL server other than gitlab.com
|
|
19
|
+
# The secure vars will be filtered in GitHub Actions log output, and aren't
|
|
20
|
+
# provided to untrusted builds (i.e, triggered by PR from another repository)
|
|
21
|
+
#
|
|
22
|
+
# ------------------------------------------------------------------------------
|
|
23
|
+
#
|
|
24
|
+
# NOTES:
|
|
25
|
+
# It is necessary to provide NO_SCOPE_GITHUB_TOKEN because $secrets.GITHUB_AUTO
|
|
26
|
+
# is NOT provide to manually-triggered (`workflow_dispatch`) events, in order
|
|
27
|
+
# to prevent recursive triggers between workflows
|
|
28
|
+
#
|
|
29
|
+
# Reference:
|
|
30
|
+
#
|
|
31
|
+
# https://docs.github.com/en/actions/reference/events-that-trigger-workflows#triggering-new-workflows-using-a-personal-access-token
|
|
32
|
+
---
|
|
33
|
+
name: 'Manual: PR GLCI'
|
|
34
|
+
|
|
35
|
+
on:
|
|
36
|
+
workflow_dispatch:
|
|
37
|
+
inputs:
|
|
38
|
+
pr_number:
|
|
39
|
+
description: "PR number to trigger GLCI"
|
|
40
|
+
required: true
|
|
41
|
+
|
|
42
|
+
jobs:
|
|
43
|
+
glci-syntax:
|
|
44
|
+
name: '.gitlab-ci.yml Syntax'
|
|
45
|
+
runs-on: ubuntu-18.04
|
|
46
|
+
outputs:
|
|
47
|
+
valid: ${{ steps.validate-glci-file.outputs.valid }}
|
|
48
|
+
pr_head_ref: ${{ steps.get-pr.outputs.pr_head_ref }}
|
|
49
|
+
pr_head_sha: ${{ steps.get-pr.outputs.pr_head_sha }}
|
|
50
|
+
pr_head_label: ${{ steps.get-pr.outputs.pr_head_label }}
|
|
51
|
+
pr_head_full_name: ${{ steps.get-pr.outputs.pr_full_name }}
|
|
52
|
+
steps:
|
|
53
|
+
- uses: actions/github-script@v3
|
|
54
|
+
id: get-pr
|
|
55
|
+
with:
|
|
56
|
+
github-token: ${{secrets.NO_SCOPE_GITHUB_TOKEN}}
|
|
57
|
+
# See:
|
|
58
|
+
# - https://octokit.github.io/rest.js/
|
|
59
|
+
script: |
|
|
60
|
+
console.log(`== pr number: ${context.payload.inputs.pr_number}`)
|
|
61
|
+
const pr = await github.request('get /repos/{owner}/{repo}/pulls/{pull_number}', {
|
|
62
|
+
headers: {
|
|
63
|
+
accept: 'application/vnd.github.v3+json'
|
|
64
|
+
},
|
|
65
|
+
owner: context.repo.owner,
|
|
66
|
+
repo: context.repo.repo,
|
|
67
|
+
pull_number: context.payload.inputs.pr_number
|
|
68
|
+
});
|
|
69
|
+
|
|
70
|
+
console.log("\n\n== pr\n");
|
|
71
|
+
console.log(pr);
|
|
72
|
+
console.log("\n\n== pr.data.head\n");
|
|
73
|
+
console.log(pr.data.head);
|
|
74
|
+
console.log(pr.status);
|
|
75
|
+
|
|
76
|
+
// PR must have been returned
|
|
77
|
+
if ( pr.status != 200 ) {
|
|
78
|
+
//#console.log(`::error ::Error looking up PR \#${context.payload.inputs.pr_number}: HTTP Response ${pr.status}`)
|
|
79
|
+
return(false)
|
|
80
|
+
}
|
|
81
|
+
|
|
82
|
+
// TODO: should either of these conditions really prevent a GLCI trigger?
|
|
83
|
+
if ( pr.data.state != 'open' ) {
|
|
84
|
+
console.log(`::error ::PR# ${context.payload.inputs.pr_number} is not open`)
|
|
85
|
+
}
|
|
86
|
+
if ( pr.data.merged ) {
|
|
87
|
+
console.log(`::error ::PR# ${context.payload.inputs.pr_number} is already merged`)
|
|
88
|
+
}
|
|
89
|
+
core.setOutput( 'pr_head_sha', pr.data.head.sha )
|
|
90
|
+
core.setOutput( 'pr_head_ref', pr.data.head.ref )
|
|
91
|
+
core.setOutput( 'pr_head_label', pr.data.head.label )
|
|
92
|
+
core.setOutput( 'pr_head_full_name', pr.data.head.full_name )
|
|
93
|
+
- uses: actions/checkout@v2
|
|
94
|
+
with:
|
|
95
|
+
repository: ${{ steps.get-pr.outputs.pr_head_full_name }}
|
|
96
|
+
ref: ${{ steps.get-pr.outputs.pr_head_sha }}
|
|
97
|
+
token: ${{secrets.NO_SCOPE_GITHUB_TOKEN}}
|
|
98
|
+
clean: true
|
|
99
|
+
- name: 'Validate GLCI file syntax'
|
|
100
|
+
id: validate-glci-file
|
|
101
|
+
uses: simp/github-action-gitlab-ci-syntax-check@main
|
|
102
|
+
with:
|
|
103
|
+
gitlab_api_private_token: ${{ secrets.GITLAB_API_PRIVATE_TOKEN }}
|
|
104
|
+
gitlab_api_url: ${{ secrets.GITLAB_API_URL }} # https://gitlab.com/api/v4
|
|
105
|
+
|
|
106
|
+
trigger-when-user-has-repo-permissions:
|
|
107
|
+
name: 'Trigger CI'
|
|
108
|
+
needs: [ glci-syntax ]
|
|
109
|
+
runs-on: ubuntu-18.04
|
|
110
|
+
steps:
|
|
111
|
+
- uses: actions/checkout@v2
|
|
112
|
+
with:
|
|
113
|
+
repository: ${{ needs.glci-syntax.outputs.pr_head_full_name }}
|
|
114
|
+
ref: ${{ needs.glci-syntax.outputs.pr_head_sha }}
|
|
115
|
+
token: ${{secrets.NO_SCOPE_GITHUB_TOKEN}}
|
|
116
|
+
fetch-depth: 0 # Need full checkout to push to gitlab mirror
|
|
117
|
+
clean: true
|
|
118
|
+
- name: Trigger CI when user has Repo Permissions
|
|
119
|
+
uses: simp/github-action-gitlab-ci-pipeline-trigger@v1
|
|
120
|
+
with:
|
|
121
|
+
git_hashref: ${{ needs.glci-syntax.outputs.pr_head_sha }}
|
|
122
|
+
git_branch: ${{ needs.glci-syntax.outputs.pr_head_ref }}
|
|
123
|
+
gitlab_api_private_token: ${{ secrets.GITLAB_API_PRIVATE_TOKEN }}
|
|
124
|
+
gitlab_group: ${{ github.event.organization.login }}
|
|
125
|
+
github_repository: ${{ github.repository }}
|
|
126
|
+
github_repository_owner: ${{ github.repository_owner }}
|
|
127
|
+
|
|
128
|
+
### examine_contexts:
|
|
129
|
+
### needs: [ glci-syntax ]
|
|
130
|
+
### name: 'Examine Context contents'
|
|
131
|
+
### if: always()
|
|
132
|
+
### runs-on: ubuntu-18.04
|
|
133
|
+
### steps:
|
|
134
|
+
### - name: Dump contexts
|
|
135
|
+
### env:
|
|
136
|
+
### GITHUB_CONTEXT: ${{ toJson(github) }}
|
|
137
|
+
### run: echo "$GITHUB_CONTEXT"
|
|
138
|
+
### - name: Dump 'needs' context
|
|
139
|
+
### env:
|
|
140
|
+
### ENV_CONTEXT: ${{ toJson(needs) }}
|
|
141
|
+
### run: echo "$ENV_CONTEXT"
|
|
142
|
+
### - name: Dump env vars
|
|
143
|
+
### run: env | sort
|
|
@@ -0,0 +1,152 @@
|
|
|
1
|
+
# Build & Deploy RubyGem & GitHub release when a SemVer tag is pushed
|
|
2
|
+
# ------------------------------------------------------------------------------
|
|
3
|
+
#
|
|
4
|
+
# NOTICE: **This file is maintained with puppetsync**
|
|
5
|
+
#
|
|
6
|
+
# This file is updated automatically as part of a standardized asset baseline.
|
|
7
|
+
#
|
|
8
|
+
# The next baseline sync will overwrite any local changes to this file!
|
|
9
|
+
#
|
|
10
|
+
# ==============================================================================
|
|
11
|
+
#
|
|
12
|
+
# This pipeline uses the following GitHub Action Secrets:
|
|
13
|
+
#
|
|
14
|
+
# GitHub Secret variable Type Notes
|
|
15
|
+
# ------------------------ -------- ----------------------------------------
|
|
16
|
+
# RUBYGEMS_API_KEY Required
|
|
17
|
+
#
|
|
18
|
+
# ------------------------------------------------------------------------------
|
|
19
|
+
#
|
|
20
|
+
# NOTES:
|
|
21
|
+
#
|
|
22
|
+
# * The CHANGLOG text is altered to remove RPM-style date headers, which don't
|
|
23
|
+
# render well as markdown on the GitHub release pages
|
|
24
|
+
---
|
|
25
|
+
name: 'Tag: Release to GitHub & rubygems.org'
|
|
26
|
+
|
|
27
|
+
on:
|
|
28
|
+
push:
|
|
29
|
+
tags:
|
|
30
|
+
- '[0-9]+\.[0-9]+\.[0-9]+'
|
|
31
|
+
|
|
32
|
+
env:
|
|
33
|
+
PUPPET_VERSION: '~> 6'
|
|
34
|
+
LOCAL_WORKFLOW_CONFIG_FILE: .github/workflows.local.json
|
|
35
|
+
|
|
36
|
+
jobs:
|
|
37
|
+
releng-checks:
|
|
38
|
+
name: "RELENG checks"
|
|
39
|
+
runs-on: ubuntu-18.04
|
|
40
|
+
outputs:
|
|
41
|
+
build_command: ${{ steps.commands.outputs.build_command }}
|
|
42
|
+
release_command: ${{ steps.commands.outputs.release_command }}
|
|
43
|
+
steps:
|
|
44
|
+
- name: "Assert '${{ github.ref }}' is a tag"
|
|
45
|
+
run: '[[ "$GITHUB_REF" =~ ^refs/tags/ ]] || { echo "::error ::GITHUB_REF is not a tag: ${GITHUB_REF}"; exit 1 ; }'
|
|
46
|
+
- uses: actions/checkout@v2
|
|
47
|
+
with:
|
|
48
|
+
ref: ${{ github.ref }}
|
|
49
|
+
clean: true
|
|
50
|
+
- name: Determing build and release commands
|
|
51
|
+
id: commands
|
|
52
|
+
run: |
|
|
53
|
+
# By default, these are the standard tasks from "bundler/gem_tasks"
|
|
54
|
+
# To override them in the LOCAL_WORKFLOW_CONFIG_FILE
|
|
55
|
+
GEM_BUILD_COMMAND='bundle exec rake build'
|
|
56
|
+
GEM_RELEASE_COMMAND='gem push pkg/*.gem'
|
|
57
|
+
if jq -r '. | keys' "$LOCAL_WORKFLOW_CONFIG_FILE" 2>/dev/null | \
|
|
58
|
+
grep -w '"gem_build_command"' &> /dev/null; then
|
|
59
|
+
GEM_BUILD_COMMAND="$(jq .gem_build_command "$LOCAL_WORKFLOW_CONFIG_FILE" )"
|
|
60
|
+
fi
|
|
61
|
+
if jq -r '. | keys' "$LOCAL_WORKFLOW_CONFIG_FILE" 2>/dev/null | \
|
|
62
|
+
grep -w '"gem_release_command"' &> /dev/null; then
|
|
63
|
+
GEM_RELEASE_COMMAND="$(jq .gem_release_command "$LOCAL_WORKFLOW_CONFIG_FILE" )"
|
|
64
|
+
fi
|
|
65
|
+
echo "::set-output name=build_command::${GEM_BUILD_COMMAND}"
|
|
66
|
+
echo "::set-output name=release_command::${GEM_RELEASE_COMMAND}"
|
|
67
|
+
- uses: ruby/setup-ruby@v1
|
|
68
|
+
with:
|
|
69
|
+
ruby-version: 2.5
|
|
70
|
+
bundler-cache: true
|
|
71
|
+
- name: Test build the package
|
|
72
|
+
run: "${{ steps.commands.outputs.build_command }}"
|
|
73
|
+
|
|
74
|
+
create-github-release:
|
|
75
|
+
name: Deploy GitHub Release
|
|
76
|
+
needs: [ releng-checks ]
|
|
77
|
+
runs-on: ubuntu-18.04
|
|
78
|
+
steps:
|
|
79
|
+
- name: Checkout code
|
|
80
|
+
uses: actions/checkout@v2
|
|
81
|
+
with:
|
|
82
|
+
ref: ${{ github.ref }}
|
|
83
|
+
clean: true
|
|
84
|
+
fetch-depth: 0
|
|
85
|
+
- name: Get tag & annotation info (${{github.ref}})
|
|
86
|
+
id: tag-check
|
|
87
|
+
run: |
|
|
88
|
+
tag="${GITHUB_REF/refs\/tags\//}"
|
|
89
|
+
annotation="$(git for-each-ref "$GITHUB_REF" --format='%(contents)' --count=1)"
|
|
90
|
+
annotation_title="$(echo "$annotation" | head -1)"
|
|
91
|
+
|
|
92
|
+
echo "::set-output name=tag::${tag}"
|
|
93
|
+
echo "::set-output name=annotation_title::${annotation_title}"
|
|
94
|
+
|
|
95
|
+
# Prepare annotation body as a file for the next step
|
|
96
|
+
#
|
|
97
|
+
# * The GitHub Release render the text in this file as markdown
|
|
98
|
+
# * The file is needed because :set-output only supports single lines
|
|
99
|
+
# * The `perl -pe` removes RPM-style date headers from the CHANGELOG,
|
|
100
|
+
# because they don't render well as markdown on the Release page
|
|
101
|
+
#
|
|
102
|
+
echo "$annotation" | tail -n +2 | \
|
|
103
|
+
perl -pe 'BEGIN{undef $/;} s/\n\* (Mon|Tue|Wed|Thu|Fri|Sat|Sun) .*?\n//smg;' > /tmp/annotation.body
|
|
104
|
+
|
|
105
|
+
- name: Create Release
|
|
106
|
+
uses: actions/create-release@v1
|
|
107
|
+
id: create_release
|
|
108
|
+
env:
|
|
109
|
+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
110
|
+
with:
|
|
111
|
+
tag_name: ${{ github.ref }}
|
|
112
|
+
release_name: ${{ steps.tag-check.outputs.annotation_title }}
|
|
113
|
+
body_path: /tmp/annotation.body
|
|
114
|
+
draft: false
|
|
115
|
+
prerelease: false
|
|
116
|
+
|
|
117
|
+
deploy-rubygem:
|
|
118
|
+
name: Deploy RubyGem Release
|
|
119
|
+
needs: [ releng-checks ]
|
|
120
|
+
runs-on: ubuntu-18.04
|
|
121
|
+
env:
|
|
122
|
+
RUBYGEMS_API_KEY: ${{ secrets.RUBYGEMS_API_KEY }}
|
|
123
|
+
BUILD_COMMAND: ${{ needs.releng-checks.outputs.build_command }}
|
|
124
|
+
RELEASE_COMMAND: ${{ needs.releng-checks.outputs.release_command }}
|
|
125
|
+
steps:
|
|
126
|
+
- name: Checkout code
|
|
127
|
+
uses: actions/checkout@v2
|
|
128
|
+
with:
|
|
129
|
+
ref: ${{ github.ref }}
|
|
130
|
+
clean: true
|
|
131
|
+
- uses: ruby/setup-ruby@v1
|
|
132
|
+
with:
|
|
133
|
+
ruby-version: 2.5
|
|
134
|
+
bundler-cache: true
|
|
135
|
+
- name: Build RubyGem
|
|
136
|
+
run: '$BUILD_COMMAND'
|
|
137
|
+
|
|
138
|
+
- name: Release RubyGem
|
|
139
|
+
run: |
|
|
140
|
+
echo "Setting up gem credentials..."
|
|
141
|
+
mkdir -p ~/.gem
|
|
142
|
+
|
|
143
|
+
cat << EOF > ~/.gem/credentials
|
|
144
|
+
---
|
|
145
|
+
:rubygems_api_key: ${RUBYGEMS_API_KEY}
|
|
146
|
+
EOF
|
|
147
|
+
chmod 0600 ~/.gem/credentials
|
|
148
|
+
|
|
149
|
+
chmod -R go=u-w .
|
|
150
|
+
|
|
151
|
+
echo "Running '$RELEASE_COMMAND'..."
|
|
152
|
+
$RELEASE_COMMAND
|
data/.gitlab-ci.yml
CHANGED
|
@@ -1,11 +1,4 @@
|
|
|
1
1
|
# ------------------------------------------------------------------------------
|
|
2
|
-
# NOTICE: **This file is maintained with puppetsync**
|
|
3
|
-
#
|
|
4
|
-
# This file is updated automatically as part of a puppet module baseline.
|
|
5
|
-
#
|
|
6
|
-
# The next baseline sync will overwrite any local changes to everything above
|
|
7
|
-
# the line "# Repo-specific content"
|
|
8
|
-
# ------------------------------------------------------------------------------
|
|
9
2
|
# The testing matrix considers ruby/puppet versions supported by SIMP and PE:
|
|
10
3
|
#
|
|
11
4
|
# https://puppet.com/docs/pe/2019.8/component_versions_in_recent_pe_releases.html
|
|
@@ -216,28 +209,28 @@ variables:
|
|
|
216
209
|
# Puppet Versions
|
|
217
210
|
#-----------------------------------------------------------------------
|
|
218
211
|
|
|
219
|
-
.
|
|
212
|
+
.pup_5_x: &pup_5_x
|
|
220
213
|
image: 'ruby:2.4'
|
|
221
214
|
variables:
|
|
222
215
|
PUPPET_VERSION: '~> 5.0'
|
|
223
216
|
BEAKER_PUPPET_COLLECTION: 'puppet5'
|
|
224
217
|
MATRIX_RUBY_VERSION: '2.4'
|
|
225
218
|
|
|
226
|
-
.
|
|
219
|
+
.pup_6_x: &pup_6_x
|
|
227
220
|
image: 'ruby:2.5'
|
|
228
221
|
variables:
|
|
229
222
|
PUPPET_VERSION: '~> 6.0'
|
|
230
223
|
BEAKER_PUPPET_COLLECTION: 'puppet6'
|
|
231
224
|
MATRIX_RUBY_VERSION: '2.5'
|
|
232
225
|
|
|
233
|
-
.
|
|
226
|
+
.pup_6_pe: &pup_6_pe
|
|
234
227
|
image: 'ruby:2.5'
|
|
235
228
|
variables:
|
|
236
229
|
PUPPET_VERSION: '6.18.0'
|
|
237
230
|
BEAKER_PUPPET_COLLECTION: 'puppet6'
|
|
238
231
|
MATRIX_RUBY_VERSION: '2.5'
|
|
239
232
|
|
|
240
|
-
.
|
|
233
|
+
.pup_7_x: &pup_7_x
|
|
241
234
|
image: 'ruby:2.7'
|
|
242
235
|
variables:
|
|
243
236
|
PUPPET_VERSION: '~> 7.0'
|
|
@@ -280,24 +273,18 @@ variables:
|
|
|
280
273
|
# Unit Tests
|
|
281
274
|
#-----------------------------------------------------------------------
|
|
282
275
|
|
|
283
|
-
pup5-unit:
|
|
284
|
-
<<: *
|
|
276
|
+
pup5.x-unit:
|
|
277
|
+
<<: *pup_5_x
|
|
285
278
|
<<: *unit_tests
|
|
286
279
|
|
|
287
|
-
pup6-unit:
|
|
288
|
-
<<: *
|
|
280
|
+
pup6.x-unit:
|
|
281
|
+
<<: *pup_6_x
|
|
289
282
|
<<: *unit_tests
|
|
290
283
|
|
|
291
|
-
pup7-unit:
|
|
292
|
-
<<: *
|
|
284
|
+
pup7.x-unit:
|
|
285
|
+
<<: *pup_7_x
|
|
293
286
|
<<: *unit_tests
|
|
294
287
|
|
|
295
|
-
# ------------------------------------------------------------------------------
|
|
296
|
-
# NOTICE: **This file is maintained with puppetsync**
|
|
297
|
-
#
|
|
298
|
-
# Everything above the "Repo-specific content" comment will be overwritten by
|
|
299
|
-
# the next puppetsync.
|
|
300
|
-
# ------------------------------------------------------------------------------
|
|
301
288
|
|
|
302
289
|
# Repo-specific content
|
|
303
290
|
# ==============================================================================
|
|
@@ -305,20 +292,20 @@ pup7-unit:
|
|
|
305
292
|
#=======================================================================
|
|
306
293
|
# Packaging test
|
|
307
294
|
|
|
308
|
-
pup5-pkg:
|
|
309
|
-
<<: *
|
|
295
|
+
pup5.x-pkg:
|
|
296
|
+
<<: *pup_5_x
|
|
310
297
|
<<: *unit_tests
|
|
311
298
|
script:
|
|
312
299
|
'bundle exec rake pkg:gem'
|
|
313
300
|
|
|
314
|
-
pup6-pkg:
|
|
315
|
-
<<: *
|
|
301
|
+
pup6.x-pkg:
|
|
302
|
+
<<: *pup_6_x
|
|
316
303
|
<<: *unit_tests
|
|
317
304
|
script:
|
|
318
305
|
'bundle exec rake pkg:gem'
|
|
319
306
|
|
|
320
|
-
pup7-pkg:
|
|
321
|
-
<<: *
|
|
307
|
+
pup7.x-pkg:
|
|
308
|
+
<<: *pup_7_x
|
|
322
309
|
<<: *unit_tests
|
|
323
310
|
script:
|
|
324
311
|
'bundle exec rake pkg:gem'
|
|
@@ -326,49 +313,49 @@ pup7-pkg:
|
|
|
326
313
|
#=======================================================================
|
|
327
314
|
# Acceptance tests
|
|
328
315
|
default:
|
|
329
|
-
<<: *
|
|
316
|
+
<<: *pup_6_x
|
|
330
317
|
<<: *acceptance_base
|
|
331
318
|
script:
|
|
332
319
|
- bundle exec rake beaker:suites[default]
|
|
333
320
|
|
|
334
321
|
default-fips:
|
|
335
|
-
<<: *
|
|
322
|
+
<<: *pup_6_x
|
|
336
323
|
<<: *acceptance_base
|
|
337
324
|
script:
|
|
338
325
|
- BEAKER_fips=yes bundle exec rake beaker:suites[default]
|
|
339
326
|
|
|
340
327
|
fips_from_fixtures:
|
|
341
|
-
<<: *
|
|
328
|
+
<<: *pup_6_x
|
|
342
329
|
<<: *acceptance_base
|
|
343
330
|
script:
|
|
344
331
|
- bundle exec rake beaker:suites[fips_from_fixtures]
|
|
345
332
|
|
|
346
333
|
puppet5_collections:
|
|
347
|
-
<<: *
|
|
334
|
+
<<: *pup_5_x
|
|
348
335
|
<<: *acceptance_base
|
|
349
336
|
script:
|
|
350
337
|
- bundle exec rake beaker:suites[puppet_collections]
|
|
351
338
|
|
|
352
339
|
puppet6_collections:
|
|
353
|
-
<<: *
|
|
340
|
+
<<: *pup_6_x
|
|
354
341
|
<<: *acceptance_base
|
|
355
342
|
script:
|
|
356
343
|
- bundle exec rake beaker:suites[puppet_collections]
|
|
357
344
|
|
|
358
345
|
puppet7_collections:
|
|
359
|
-
<<: *
|
|
346
|
+
<<: *pup_7_x
|
|
360
347
|
<<: *acceptance_base
|
|
361
348
|
script:
|
|
362
349
|
- bundle exec rake beaker:suites[puppet_collections]
|
|
363
350
|
|
|
364
351
|
windows:
|
|
365
|
-
<<: *
|
|
352
|
+
<<: *pup_6_x
|
|
366
353
|
<<: *acceptance_base
|
|
367
354
|
script:
|
|
368
355
|
- bundle exec rake beaker:suites[windows]
|
|
369
356
|
|
|
370
357
|
snapshot:
|
|
371
|
-
<<: *
|
|
358
|
+
<<: *pup_6_x
|
|
372
359
|
<<: *acceptance_base
|
|
373
360
|
# This is prone to breakage in the underlying system
|
|
374
361
|
allow_failure: true
|
data/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,23 @@
|
|
|
1
|
+
### 1.22.1 / 2021-03-01
|
|
2
|
+
* Fixed: enable_epel_on() now installs the correct EPEL repository
|
|
3
|
+
package on OracleLinux
|
|
4
|
+
|
|
5
|
+
### 1.22.0 / 2021-01-27
|
|
6
|
+
* Fixed:
|
|
7
|
+
* Ensure that the simp-crypto_policy module is installed when flipping to FIPS
|
|
8
|
+
mode
|
|
9
|
+
* Only attempt to install the simp repos once in case they are broken for some
|
|
10
|
+
reason
|
|
11
|
+
* Added:
|
|
12
|
+
* Documentation for all of the beaker environment variables
|
|
13
|
+
* set_simp_repo_release() for setting the release and release_type of the
|
|
14
|
+
public SIMP yum repos
|
|
15
|
+
* set_yum_opts_on() method for setting bulk yum config options
|
|
16
|
+
* set_yum_opt_on() method for setting singular yum config options
|
|
17
|
+
* install_package_unless_present_on() method
|
|
18
|
+
* Allow users to set repos to disable using an environment variable
|
|
19
|
+
* A total run time summary for beaker suites
|
|
20
|
+
|
|
1
21
|
### 1.21.4 / 2021-01-21
|
|
2
22
|
* Fixed:
|
|
3
23
|
* Reverted the use of OpenStruct due to issues with seralization
|
data/README.md
CHANGED
|
@@ -13,6 +13,8 @@ Methods to assist beaker acceptance tests for SIMP.
|
|
|
13
13
|
* [`rake beaker:suites`](#rake-beakersuites)
|
|
14
14
|
* [Suite Execution](#suite-execution)
|
|
15
15
|
* [Environment Variables](#environment-variables)
|
|
16
|
+
* [Beaker Management](#beaker-management)
|
|
17
|
+
* [Beaker Helpers Adjustments](#beaker-helpers-adjustments)
|
|
16
18
|
* [Global Suite Configuration](#global-suite-configuration)
|
|
17
19
|
* [Supported Config:](#supported-config)
|
|
18
20
|
* [Individual Suite Configuration](#individual-suite-configuration)
|
|
@@ -112,12 +114,68 @@ sensitive).
|
|
|
112
114
|
|
|
113
115
|
#### Environment Variables
|
|
114
116
|
|
|
115
|
-
|
|
117
|
+
##### Beaker Management
|
|
118
|
+
|
|
119
|
+
* BEAKER_suite_runall [yes|no]
|
|
116
120
|
* Run all Suites
|
|
117
121
|
|
|
118
|
-
* BEAKER_suite_basedir
|
|
122
|
+
* BEAKER_suite_basedir [String]
|
|
119
123
|
* The base directory where suites will be defined
|
|
120
|
-
* Default: spec/acceptance
|
|
124
|
+
* Default: `spec/acceptance`
|
|
125
|
+
|
|
126
|
+
##### Beaker Helpers Adjustments
|
|
127
|
+
|
|
128
|
+
* BEAKER_SIMP_parallel [yes|no]
|
|
129
|
+
* `yes` => Run simp-beaker-helpers methods on SUTs in parallel if possible
|
|
130
|
+
* `no` => Do not run methods in parallel
|
|
131
|
+
|
|
132
|
+
* BEAKER_docker_cmd [String]
|
|
133
|
+
* The specific command to use for performing `docker` operations
|
|
134
|
+
|
|
135
|
+
* BEAKER_helpers_verbose [yes|no]
|
|
136
|
+
* `yes` => Enable verbose output
|
|
137
|
+
* `no` => Do not enable verbose output
|
|
138
|
+
|
|
139
|
+
* BEAKER_copy_fixtures [yes|no]
|
|
140
|
+
* `yes` => Enable copying fixtures to the SUT
|
|
141
|
+
* `no` => Disable copying fixtures to the SUT
|
|
142
|
+
|
|
143
|
+
* BEAKER_use_fixtures_dir_for_modules [yes|no]
|
|
144
|
+
* `yes` => Pull fixtures directly from `spec/fixtures/modules`
|
|
145
|
+
* `no` => Ignore `spec/fixtures/modules` content
|
|
146
|
+
|
|
147
|
+
* BEAKER_stringify_facts [yes|no]
|
|
148
|
+
* `yes` => Enable fact stringification
|
|
149
|
+
|
|
150
|
+
* BEAKER_fips_module_version [String]
|
|
151
|
+
* The specific version of the FIPS module to install from the puppet forge
|
|
152
|
+
|
|
153
|
+
* BEAKER_RHSM_USER [String]
|
|
154
|
+
* The username for using with RHSM
|
|
155
|
+
|
|
156
|
+
* BEAKER_RHSM_PASS [String]
|
|
157
|
+
* The password for using with RHSM
|
|
158
|
+
|
|
159
|
+
* BEAKER_fips [yes|no]
|
|
160
|
+
* `yes` => Enable FIPS on the SUT
|
|
161
|
+
* `no` => Do not manage FIPS on the SUT (will not disable if enabled)
|
|
162
|
+
|
|
163
|
+
* BEAKER_no_fix_interfaces [Boolean]
|
|
164
|
+
* If present, will not try to fix the interfaces on the SUT
|
|
165
|
+
|
|
166
|
+
* BEAKER_SIMP_install_repos [yes|no]
|
|
167
|
+
* `yes` => Install the SIMP YUM repositories
|
|
168
|
+
* `no` => No not install the SIMP YUM repositories
|
|
169
|
+
|
|
170
|
+
* BEAKER_SIMP_disable_repos [String]
|
|
171
|
+
* Comma delimited list of YUM repositories to disable on the SUT
|
|
172
|
+
|
|
173
|
+
* BEAKER_SIMP_repo_release [String]
|
|
174
|
+
* The release of SIMP to target in the YUM repos (usually a number)
|
|
175
|
+
|
|
176
|
+
* BEAKER_SIMP_repo_release_type [String]
|
|
177
|
+
* The release type of SIMP to target in the YUM repos
|
|
178
|
+
* Something like `stable`, `rolling`, or `unstable`
|
|
121
179
|
|
|
122
180
|
#### Global Suite Configuration
|
|
123
181
|
|
|
@@ -406,7 +464,7 @@ might try to install packages before subscription manager is configured.
|
|
|
406
464
|
The version of InSpec to use when running inspec tests. Currently hard-coded to
|
|
407
465
|
`4.16.14` due to a bug introduced in `4.16.15`.
|
|
408
466
|
|
|
409
|
-
|
|
467
|
+
Set to 'latest' to use the latest available in the upstream repos.
|
|
410
468
|
|
|
411
469
|
## Examples
|
|
412
470
|
|
|
@@ -510,7 +568,7 @@ underlying OS configuration.
|
|
|
510
568
|
|
|
511
569
|
`Simp::BeakerHelpers::Snapshot.save(sut, '<name of snapshot>')` will save a
|
|
512
570
|
snapshot with the given name. If the snapshot already exists, it will be
|
|
513
|
-
|
|
571
|
+
forcibly overwritten.
|
|
514
572
|
|
|
515
573
|
|
|
516
574
|
##### Base Snapshots
|
data/lib/simp/beaker_helpers.rb
CHANGED
|
@@ -18,7 +18,53 @@ module Simp::BeakerHelpers
|
|
|
18
18
|
"simp-beaker-helpers-#{t}-#{$$}-#{rand(0x100000000).to_s(36)}.tmp"
|
|
19
19
|
end
|
|
20
20
|
|
|
21
|
-
|
|
21
|
+
# Sets a single YUM option in the form that yum-config-manager/dnf
|
|
22
|
+
# config-manager would expect.
|
|
23
|
+
#
|
|
24
|
+
# If not prefaced with a repository, the option will be applied globally.
|
|
25
|
+
#
|
|
26
|
+
# Has no effect if yum or dnf is not present.
|
|
27
|
+
def set_yum_opt_on(suts, key, value)
|
|
28
|
+
parallel = (ENV['BEAKER_SIMP_parallel'] == 'yes')
|
|
29
|
+
block_on(suts, :run_in_parallel => parallel) do |sut|
|
|
30
|
+
repo,target = key.split('.')
|
|
31
|
+
|
|
32
|
+
unless target
|
|
33
|
+
key = "\\*.#{repo}"
|
|
34
|
+
end
|
|
35
|
+
|
|
36
|
+
command = nil
|
|
37
|
+
if !sut.which('dnf').empty?
|
|
38
|
+
install_package_unless_present_on(sut, 'dnf-plugins-core', :accept_all_exit_codes => true)
|
|
39
|
+
command = 'dnf config-manager'
|
|
40
|
+
elsif !sut.which('yum').empty?
|
|
41
|
+
command = 'yum-config-manager'
|
|
42
|
+
end
|
|
43
|
+
|
|
44
|
+
on(sut, %{#{command} --save --setopt=#{key}=#{value}}, :silent => true) if command
|
|
45
|
+
end
|
|
46
|
+
end
|
|
47
|
+
|
|
48
|
+
# Takes a hash of YUM options to set in the form that yum-config-manager/dnf
|
|
49
|
+
# config-manager would expect.
|
|
50
|
+
#
|
|
51
|
+
# If not prefaced with a repository, the option will be applied globally.
|
|
52
|
+
#
|
|
53
|
+
# Example:
|
|
54
|
+
# {
|
|
55
|
+
# 'skip_if_unavailable' => '1', # Applies globally
|
|
56
|
+
# 'foo.installonly_limit' => '5' # Applies only to the 'foo' repo
|
|
57
|
+
# }
|
|
58
|
+
def set_yum_opts_on(suts, yum_opts={})
|
|
59
|
+
parallel = (ENV['BEAKER_SIMP_parallel'] == 'yes')
|
|
60
|
+
block_on(suts, :run_in_parallel => parallel) do |sut|
|
|
61
|
+
yum_opts.each_pair do |k,v|
|
|
62
|
+
set_yum_opt_on(sut, k, v)
|
|
63
|
+
end
|
|
64
|
+
end
|
|
65
|
+
end
|
|
66
|
+
|
|
67
|
+
def install_package_unless_present_on(suts, package_name, package_source=nil, opts={})
|
|
22
68
|
default_opts = {
|
|
23
69
|
max_retries: 3,
|
|
24
70
|
retry_interval: 10
|
|
@@ -28,19 +74,35 @@ module Simp::BeakerHelpers
|
|
|
28
74
|
block_on(suts, :run_in_parallel => parallel) do |sut|
|
|
29
75
|
package_source = package_name unless package_source
|
|
30
76
|
|
|
31
|
-
|
|
32
|
-
sut.
|
|
77
|
+
unless sut.check_for_package(package_name)
|
|
78
|
+
sut.install_package(
|
|
33
79
|
package_source,
|
|
34
80
|
'',
|
|
81
|
+
nil,
|
|
35
82
|
default_opts.merge(opts)
|
|
36
83
|
)
|
|
37
|
-
|
|
38
|
-
|
|
84
|
+
end
|
|
85
|
+
end
|
|
86
|
+
end
|
|
87
|
+
|
|
88
|
+
def install_latest_package_on(suts, package_name, package_source=nil, opts={})
|
|
89
|
+
default_opts = {
|
|
90
|
+
max_retries: 3,
|
|
91
|
+
retry_interval: 10
|
|
92
|
+
}
|
|
93
|
+
|
|
94
|
+
parallel = (ENV['BEAKER_SIMP_parallel'] == 'yes')
|
|
95
|
+
block_on(suts, :run_in_parallel => parallel) do |sut|
|
|
96
|
+
package_source = package_name unless package_source
|
|
97
|
+
|
|
98
|
+
if sut.check_for_package(package_name)
|
|
99
|
+
sut.upgrade_package(
|
|
39
100
|
package_source,
|
|
40
101
|
'',
|
|
41
|
-
nil,
|
|
42
102
|
default_opts.merge(opts)
|
|
43
103
|
)
|
|
104
|
+
else
|
|
105
|
+
install_package_unless_present_on(sut, package_name, package_source, opts)
|
|
44
106
|
end
|
|
45
107
|
end
|
|
46
108
|
end
|
|
@@ -434,13 +496,16 @@ module Simp::BeakerHelpers
|
|
|
434
496
|
|
|
435
497
|
fips_enable_modulepath = '--modulepath=/root/.beaker_fips/modules'
|
|
436
498
|
|
|
437
|
-
|
|
499
|
+
modules_to_install = {
|
|
500
|
+
'simp-fips' => ENV['BEAKER_fips_module_version'],
|
|
501
|
+
'simp-crypto_policy' => nil
|
|
502
|
+
}
|
|
438
503
|
|
|
439
|
-
|
|
440
|
-
module_install_cmd
|
|
504
|
+
modules_to_install.each_pair do |to_install, version|
|
|
505
|
+
module_install_cmd = "puppet module install #{to_install} --target-dir=/root/.beaker_fips/modules"
|
|
506
|
+
module_install_cmd += " --version #{version}" if version
|
|
507
|
+
on(sut, module_install_cmd)
|
|
441
508
|
end
|
|
442
|
-
|
|
443
|
-
on(sut, module_install_cmd)
|
|
444
509
|
end
|
|
445
510
|
|
|
446
511
|
# Work around Vagrant and cipher restrictions in EL8+
|
|
@@ -549,12 +614,13 @@ module Simp::BeakerHelpers
|
|
|
549
614
|
def enable_epel_on(suts)
|
|
550
615
|
parallel = (ENV['BEAKER_SIMP_parallel'] == 'yes')
|
|
551
616
|
block_on(suts, :run_in_parallel => parallel) do |sut|
|
|
552
|
-
if ONLINE
|
|
617
|
+
if ONLINE
|
|
553
618
|
os_info = fact_on(sut, 'os')
|
|
554
619
|
os_maj_rel = os_info['release']['major']
|
|
555
620
|
|
|
556
621
|
# This is based on the official EPEL docs https://fedoraproject.org/wiki/EPEL
|
|
557
|
-
|
|
622
|
+
case os_info['name']
|
|
623
|
+
when 'RedHat','CentOS'
|
|
558
624
|
install_latest_package_on(
|
|
559
625
|
sut,
|
|
560
626
|
'epel-release',
|
|
@@ -580,7 +646,11 @@ module Simp::BeakerHelpers
|
|
|
580
646
|
on sut, %{dnf config-manager --set-enabled powertools || dnf config-manager --set-enabled PowerTools}
|
|
581
647
|
end
|
|
582
648
|
end
|
|
649
|
+
when 'OracleLinux'
|
|
650
|
+
package_name = "oracle-epel-release-el#{os_maj_rel}"
|
|
651
|
+
install_latest_package_on(sut,package_name)
|
|
583
652
|
end
|
|
653
|
+
|
|
584
654
|
end
|
|
585
655
|
end
|
|
586
656
|
end
|
|
@@ -1397,49 +1467,79 @@ module Simp::BeakerHelpers
|
|
|
1397
1467
|
# * 'simp-community-postgres'
|
|
1398
1468
|
# * 'simp-community-puppet'
|
|
1399
1469
|
#
|
|
1400
|
-
|
|
1470
|
+
#
|
|
1471
|
+
# Environment Variables:
|
|
1472
|
+
# * BEAKER_SIMP_install_repos
|
|
1473
|
+
# * 'no' => disable the capability
|
|
1474
|
+
# * BEAKER_SIMP_disable_repos
|
|
1475
|
+
# * Comma delimited list of active yum repo names to disable
|
|
1476
|
+
def install_simp_repos(suts, disable = [])
|
|
1401
1477
|
# NOTE: Do *NOT* use puppet in this method since it may not be available yet
|
|
1402
1478
|
|
|
1403
|
-
|
|
1404
|
-
|
|
1405
|
-
|
|
1406
|
-
|
|
1407
|
-
|
|
1408
|
-
|
|
1479
|
+
return if (ENV.fetch('SIMP_install_repos', 'yes') == 'no')
|
|
1480
|
+
|
|
1481
|
+
parallel = (ENV['BEAKER_SIMP_parallel'] == 'yes')
|
|
1482
|
+
block_on(suts, :run_in_parallel => parallel) do |sut|
|
|
1483
|
+
install_package_unless_present_on(sut, 'yum-utils')
|
|
1484
|
+
|
|
1485
|
+
install_package_unless_present_on(
|
|
1486
|
+
sut,
|
|
1487
|
+
'simp-release-community',
|
|
1488
|
+
"https://download.simp-project.com/simp-release-community.rpm",
|
|
1489
|
+
)
|
|
1409
1490
|
|
|
1410
|
-
|
|
1491
|
+
to_disable = disable.dup
|
|
1492
|
+
to_disable += ENV.fetch('BEAKER_SIMP_disable_repos', '').split(',').map(&:strip)
|
|
1411
1493
|
|
|
1412
|
-
|
|
1413
|
-
|
|
1414
|
-
|
|
1415
|
-
|
|
1416
|
-
|
|
1494
|
+
unless to_disable.empty?
|
|
1495
|
+
if to_disable.include?('simp')
|
|
1496
|
+
to_disable.delete('simp')
|
|
1497
|
+
to_disable << 'simp-community-simp'
|
|
1498
|
+
end
|
|
1417
1499
|
|
|
1418
|
-
|
|
1419
|
-
|
|
1420
|
-
|
|
1421
|
-
|
|
1422
|
-
|
|
1423
|
-
|
|
1500
|
+
if to_disable.include?('simp_deps')
|
|
1501
|
+
to_disable.delete('simp_deps')
|
|
1502
|
+
to_disable << 'simp-community-epel'
|
|
1503
|
+
to_disable << 'simp-community-postgres'
|
|
1504
|
+
to_disable << 'simp-community-puppet'
|
|
1505
|
+
end
|
|
1424
1506
|
|
|
1425
|
-
|
|
1426
|
-
|
|
1427
|
-
|
|
1428
|
-
|
|
1429
|
-
|
|
1430
|
-
|
|
1431
|
-
|
|
1507
|
+
# NOTE: This --enablerepo enables the repos for listing and is inherited
|
|
1508
|
+
# from YUM. This does not actually "enable" the repos, that would require
|
|
1509
|
+
# the "--enable" option (from yum-config-manager) :-D.
|
|
1510
|
+
#
|
|
1511
|
+
# Note: Certain versions of EL8 do not dump by default and EL7 does not
|
|
1512
|
+
# have the '--dump' option.
|
|
1513
|
+
available_repos = on(sut, %{yum-config-manager --enablerepo="*" || yum-config-manager --enablerepo="*" --dump}).stdout.lines.grep(/\A\[(.+)\]\Z/){|x| $1}
|
|
1432
1514
|
|
|
1433
|
-
|
|
1515
|
+
invalid_repos = (to_disable - available_repos)
|
|
1434
1516
|
|
|
1435
|
-
|
|
1436
|
-
|
|
1437
|
-
|
|
1438
|
-
|
|
1517
|
+
# Verify that the repos passed to disable are in the list of valid repos
|
|
1518
|
+
unless invalid_repos.empty?
|
|
1519
|
+
logger.warn(%{WARN: install_simp_repo - requested repos to disable do not exist on the target system '#{invalid_repos.join("', '")}'.})
|
|
1520
|
+
end
|
|
1439
1521
|
|
|
1440
|
-
|
|
1441
|
-
|
|
1522
|
+
(to_disable - invalid_repos).each do |repo|
|
|
1523
|
+
on(sut, %{yum-config-manager --disable "#{repo}"})
|
|
1524
|
+
end
|
|
1442
1525
|
end
|
|
1443
1526
|
end
|
|
1527
|
+
|
|
1528
|
+
set_yum_opts_on(suts, {'simp*.skip_if_unavailable' => '1' })
|
|
1529
|
+
end
|
|
1530
|
+
|
|
1531
|
+
# Set the release and release type of the SIMP yum repos
|
|
1532
|
+
#
|
|
1533
|
+
# Environment variables may be used to set either one
|
|
1534
|
+
# * BEAKER_SIMP_repo_release => The actual release (version number)
|
|
1535
|
+
# * BEAKER_SIMP_repo_release_type => The type of release (stable, unstable, rolling, etc...)
|
|
1536
|
+
def set_simp_repo_release(sut, simp_release_type='stable', simp_release='6')
|
|
1537
|
+
simp_release = ENV.fetch('BEAKER_SIMP_repo_release', simp_release)
|
|
1538
|
+
simp_release_type = ENV.fetch('BEAKER_SIMP_repo_release_type', simp_release_type)
|
|
1539
|
+
|
|
1540
|
+
simp_release_type = 'releases' if (simp_release_type == 'stable')
|
|
1541
|
+
|
|
1542
|
+
create_remote_file(sut, '/etc/yum/vars/simprelease', simp_release)
|
|
1543
|
+
create_remote_file(sut, '/etc/yum/vars/simpreleasetype', simp_release_type)
|
|
1444
1544
|
end
|
|
1445
1545
|
end
|
data/lib/simp/rake/beaker.rb
CHANGED
|
@@ -196,6 +196,7 @@ module Simp::Rake
|
|
|
196
196
|
default_suite = ordered_suites.delete('default')
|
|
197
197
|
ordered_suites.unshift(default_suite) if default_suite
|
|
198
198
|
|
|
199
|
+
suite_start_time = Process.clock_gettime(Process::CLOCK_MONOTONIC)
|
|
199
200
|
ordered_suites.each do |ste|
|
|
200
201
|
|
|
201
202
|
next unless (suites[ste]['default_run'] == true)
|
|
@@ -255,6 +256,11 @@ module Simp::Rake
|
|
|
255
256
|
$stdout.puts("\n\n=== Suite '#{name}' Complete ===\n\n")
|
|
256
257
|
end
|
|
257
258
|
end
|
|
259
|
+
suite_end_time = Process.clock_gettime(Process::CLOCK_MONOTONIC)
|
|
260
|
+
|
|
261
|
+
suite_run_time = ((suite_end_time - suite_start_time)/60).round(2)
|
|
262
|
+
|
|
263
|
+
$stdout.puts("== Total Runtime: #{suite_run_time} minutes ==\n\n")
|
|
258
264
|
|
|
259
265
|
unless failures.keys.empty?
|
|
260
266
|
$stdout.puts("The following tests had failures:")
|
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
require 'spec_helper_acceptance'
|
|
2
2
|
|
|
3
3
|
hosts.each do |host|
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
end
|
|
4
|
+
expect_failures = false
|
|
5
|
+
if hosts_with_role(hosts, 'el8').include?(host)
|
|
6
|
+
expect_failures = true
|
|
7
|
+
end
|
|
9
8
|
|
|
9
|
+
describe '#install_simp_repos' do
|
|
10
10
|
it 'should install yum utils' do
|
|
11
11
|
host.install_package('yum-utils')
|
|
12
12
|
end
|
|
@@ -21,6 +21,18 @@ hosts.each do |host|
|
|
|
21
21
|
end
|
|
22
22
|
end
|
|
23
23
|
|
|
24
|
+
context 'when targeting a release type' do
|
|
25
|
+
it 'adjusts the SIMP release target' do
|
|
26
|
+
set_simp_repo_release(host, 'rolling')
|
|
27
|
+
expect(file_content_on(host, '/etc/yum/vars/simpreleasetype').strip).to eq('rolling')
|
|
28
|
+
end
|
|
29
|
+
|
|
30
|
+
it 'lists the simp rpm' do
|
|
31
|
+
skip "#{host} is not supported yet" if expect_failures
|
|
32
|
+
on(host, 'yum list simp')
|
|
33
|
+
end
|
|
34
|
+
end
|
|
35
|
+
|
|
24
36
|
context 'when passed a disabled list ' do
|
|
25
37
|
before(:all) { install_simp_repos(host, ['simp-community-simp'] ) }
|
|
26
38
|
|
|
@@ -18,6 +18,7 @@ new_fixtures = {
|
|
|
18
18
|
}
|
|
19
19
|
}
|
|
20
20
|
|
|
21
|
+
new_fixtures['fixtures']['repositories']['crypto_policy'] = 'https://github.com/simp/pupmod-simp-crypto_policy'
|
|
21
22
|
new_fixtures['fixtures']['repositories']['fips'] = 'https://github.com/simp/pupmod-simp-fips'
|
|
22
23
|
new_fixtures['fixtures']['repositories']['augeasproviders_core'] = 'https://github.com/simp/augeasproviders_core'
|
|
23
24
|
new_fixtures['fixtures']['repositories']['augeasproviders_grub'] = 'https://github.com/simp/augeasproviders_grub'
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: simp-beaker-helpers
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.22.1
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Chris Tessmer
|
|
@@ -9,7 +9,7 @@ authors:
|
|
|
9
9
|
autorequire:
|
|
10
10
|
bindir: bin
|
|
11
11
|
cert_chain: []
|
|
12
|
-
date: 2021-01
|
|
12
|
+
date: 2021-03-01 00:00:00.000000000 Z
|
|
13
13
|
dependencies:
|
|
14
14
|
- !ruby/object:Gem::Dependency
|
|
15
15
|
name: beaker
|
|
@@ -163,11 +163,14 @@ extra_rdoc_files: []
|
|
|
163
163
|
files:
|
|
164
164
|
- ".fips_fixtures"
|
|
165
165
|
- ".fixtures.yml"
|
|
166
|
+
- ".github/workflows/pr_glci.yml"
|
|
167
|
+
- ".github/workflows/pr_glci_cleanup.yml"
|
|
168
|
+
- ".github/workflows/pr_glci_manual.yml"
|
|
169
|
+
- ".github/workflows/tag_deploy_rubygem.yml"
|
|
166
170
|
- ".gitignore"
|
|
167
171
|
- ".gitlab-ci.yml"
|
|
168
172
|
- ".rspec"
|
|
169
173
|
- ".rubocop.yml"
|
|
170
|
-
- ".travis.yml"
|
|
171
174
|
- CHANGELOG.md
|
|
172
175
|
- Gemfile
|
|
173
176
|
- LICENSE
|
data/.travis.yml
DELETED
|
@@ -1,42 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
language: shell
|
|
3
|
-
notifications:
|
|
4
|
-
email: false
|
|
5
|
-
stages:
|
|
6
|
-
- name: deploy
|
|
7
|
-
if: 'tag IS present'
|
|
8
|
-
|
|
9
|
-
### Testing on Travis CI is indefinitely disabled
|
|
10
|
-
###
|
|
11
|
-
### See:
|
|
12
|
-
### * https://blog.travis-ci.com/2020-11-02-travis-ci-new-billing
|
|
13
|
-
### * https://simp-project.atlassian.net/browse/SIMP-8703
|
|
14
|
-
jobs:
|
|
15
|
-
include:
|
|
16
|
-
- stage: deploy
|
|
17
|
-
script: skip
|
|
18
|
-
cache: bundler
|
|
19
|
-
before_install:
|
|
20
|
-
- rm Gemfile.lock || true
|
|
21
|
-
bundler_args: "--without development --path .vendor"
|
|
22
|
-
language: ruby
|
|
23
|
-
rvm: 2.4.5
|
|
24
|
-
before_deploy:
|
|
25
|
-
- bundle exec rake clobber
|
|
26
|
-
- "export GEM_VERSION=`ruby -r ./lib/simp/beaker_helpers/version.rb -e 'puts Simp::BeakerHelpers::VERSION'`"
|
|
27
|
-
- '[[ $TRAVIS_TAG =~ ^${GEM_VERSION}$ ]]'
|
|
28
|
-
deploy:
|
|
29
|
-
- provider: rubygems
|
|
30
|
-
gemspec: simp-beaker-helpers.gemspec
|
|
31
|
-
gem: simp-beaker-helpers
|
|
32
|
-
token:
|
|
33
|
-
secure: "AlnBx0dBSxn+S97n0h14ltKUOA+6v0bc7QZPIcwGJV9nnf1hKH3pf9La1TVknEx7XgpAcM9jusQJ7hBlqvSq8z8SFF0bZk1EgSRIKc1cuYPLiGyUM2O7+AFHyCy3iCnPvKeoQmE/BJb5O1dGnbmSbf4A0fqLxA7jiHG1j7z+cnmJB1i67wovDfl13TsOXyBfbespWBMMc0BKAw56FPs9XggAk2cNusS3hd5tqW1AZPT2/xwt+d8ngkmO96u8QcichYRFQ+w+XW4H0w935wNg/dWiskJlt7TIYVAh4Ko5s2DZKf52Tne8TugALSn0LhRatpp7sw1FTTpteCW8UqK8uwGC2hM4pZViAOv4P1YObz2IPOZPriBl+cCayJdMKnotkUJliAMnw5TLiSWKLou+S0Pdj2h3fJZWdOEwRPMzIVoJtsOHG3GdNcPL6f7iU0vP/wr6FeR3uWa+fA7NHRi2Du955O8JpogjdrW08ahcAEwhtI3A4mrA08wN09axsrwr093uDRm/5h4FHyAhExJ0YiA/6kcPpUvILcLStyHe0RQDICQMdsQo2DSbnL65w3QjFa2fML2Shf9cRwX06+ia2BxozWzFD/6p3RiRtPxphnbFiUdjYSGWcwCcUgbJx9SW04lSSxOhpyItuXgxZqiybkzstXd6riu5zwg1R8TWk34="
|
|
34
|
-
on:
|
|
35
|
-
tags: true
|
|
36
|
-
condition: "($SKIP_PUBLISH != true)"
|
|
37
|
-
- provider: releases
|
|
38
|
-
token:
|
|
39
|
-
secure: "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"
|
|
40
|
-
on:
|
|
41
|
-
tags: true
|
|
42
|
-
condition: "($SKIP_PUBLISH != true)"
|