165 lines
7.4 KiB
Bash
Executable File
165 lines
7.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# vim: set tabstop=4 shiftwidth=4
|
|
|
|
set -e
|
|
set -o pipefail
|
|
|
|
# IMPORTS -----------------------------------------------------------------------------------------------------------
|
|
|
|
# determine working directory to use to relative paths irrespective of starting directory
|
|
dir="${BASH_SOURCE%/*}"
|
|
if [[ ! -d "${dir}" ]]; then dir="${PWD}"; fi
|
|
|
|
. "${dir}/lib/output.sh"
|
|
. "${dir}/lib/ensure.sh"
|
|
|
|
|
|
# GLOBALS -----------------------------------------------------------------------------------------------------------
|
|
|
|
test_ns="helmfile-tests-$(date +"%Y%m%d-%H%M%S")"
|
|
helmfile="./helmfile --namespace=${test_ns}"
|
|
helm="helm --kube-context=minikube"
|
|
kubectl="kubectl --context=minikube --namespace=${test_ns}"
|
|
|
|
# FUNCTIONS ----------------------------------------------------------------------------------------------------------
|
|
|
|
function wait_deploy_ready() {
|
|
${kubectl} rollout status deployment ${1}
|
|
while [ "$(${kubectl} get deploy ${1} -o=jsonpath='{.status.readyReplicas}')" == "0" ]; do
|
|
info "Waiting for deployment ${1} to be ready"
|
|
sleep 1
|
|
done
|
|
}
|
|
function retry() {
|
|
local -r max=${1}
|
|
local -r command=${2}
|
|
n=0
|
|
retry_result=0
|
|
until [ ${n} -ge ${max} ]; do
|
|
info "Executing: ${command} (attempt $((n+1)))"
|
|
${command} && break # substitute your command here
|
|
retry_result=$?
|
|
n=$[$n+1]
|
|
# approximated binary exponential backoff to reduce flakiness
|
|
sleep $((n ** 2))
|
|
done
|
|
}
|
|
|
|
# SETUP --------------------------------------------------------------------------------------------------------------
|
|
|
|
set -e
|
|
info "Using namespace: ${test_ns}"
|
|
# helm v2
|
|
if helm version --client 2>/dev/null | grep '"v2\.'; then
|
|
helm_major_version=2
|
|
info "Using Helm version: $(helm version --short --client | grep -o v.*$)"
|
|
${helm} init --stable-repo-url https://charts.helm.sh/stable --wait --override spec.template.spec.automountServiceAccountToken=true
|
|
${helm} plugin ls | grep diff || ${helm} plugin install https://github.com/databus23/helm-diff --version v2.11.0+5
|
|
else # helm v3
|
|
helm_major_version=3
|
|
info "Using Helm version: $(helm version --short | grep -o v.*$)"
|
|
${helm} plugin ls | grep diff || ${helm} plugin install https://github.com/databus23/helm-diff --version v3.1.3
|
|
# ${helm} plugin ls | grep secrets || ${helm} plugin install https://github.com/jkroepke/helm-secrets --version v3.5.0
|
|
fi
|
|
info "Using Kustomize version: $(kustomize version --short | grep -o 'v[^ ]+')"
|
|
${kubectl} get namespace ${test_ns} &> /dev/null && warn "Namespace ${test_ns} exists, from a previous test run?"
|
|
$kubectl create namespace ${test_ns} || fail "Could not create namespace ${test_ns}"
|
|
trap "{ $kubectl delete namespace ${test_ns}; }" EXIT # remove namespace whenever we exit this script
|
|
|
|
|
|
# TEST CASES----------------------------------------------------------------------------------------------------------
|
|
|
|
# test_start "happypath - simple rollout of httpbin chart"
|
|
|
|
# info "Diffing ${dir}/happypath.yaml"
|
|
# bash -c "${helmfile} -f ${dir}/happypath.yaml diff --detailed-exitcode; code="'$?'"; [ "'${code}'" -eq 2 ]" || fail "unexpected exit code returned by helmfile diff"
|
|
|
|
# info "Diffing ${dir}/happypath.yaml without color"
|
|
# bash -c "${helmfile} -f ${dir}/happypath.yaml --no-color diff --detailed-exitcode; code="'$?'"; [ "'${code}'" -eq 2 ]" || fail "unexpected exit code returned by helmfile diff"
|
|
|
|
# info "Diffing ${dir}/happypath.yaml with limited context"
|
|
# bash -c "${helmfile} -f ${dir}/happypath.yaml diff --context 3 --detailed-exitcode; code="'$?'"; [ "'${code}'" -eq 2 ]" || fail "unexpected exit code returned by helmfile diff"
|
|
|
|
# info "Templating ${dir}/happypath.yaml"
|
|
# rm -rf ${dir}/tmp
|
|
# ${helmfile} -f ${dir}/happypath.yaml --debug template --output-dir tmp
|
|
# code=$?
|
|
# [ ${code} -eq 0 ] || fail "unexpected exit code returned by helmfile template: ${code}"
|
|
# for output in $(ls -d ${dir}/tmp/*); do
|
|
# # e.g. test/integration/tmp/happypath-877c0dd4-helmx/helmx
|
|
# for release_dir in $(ls -d ${output}/*); do
|
|
# release_name=$(basename ${release_dir})
|
|
# golden_dir=${dir}/templates-golden/v${helm_major_version}/${release_name}
|
|
# info "Comparing template output ${release_dir}/templates with ${golden_dir}"
|
|
# ./diff-yamls ${golden_dir} ${release_dir}/templates || fail "unexpected diff in template result for ${release_name}"
|
|
# done
|
|
# done
|
|
|
|
# info "Applying ${dir}/happypath.yaml"
|
|
# bash -c "${helmfile} -f ${dir}/happypath.yaml apply --detailed-exitcode; code="'$?'"; echo Code: "'$code'"; [ "'${code}'" -eq 2 ]" || fail "unexpected exit code returned by helmfile apply"
|
|
|
|
# info "Syncing ${dir}/happypath.yaml"
|
|
# ${helmfile} -f ${dir}/happypath.yaml sync
|
|
# wait_deploy_ready httpbin-httpbin
|
|
# retry 5 "curl --fail $(minikube service --url --namespace=${test_ns} httpbin-httpbin)/status/200"
|
|
# [ ${retry_result} -eq 0 ] || fail "httpbin failed to return 200 OK"
|
|
|
|
# info "Applying ${dir}/happypath.yaml"
|
|
# ${helmfile} -f ${dir}/happypath.yaml apply --detailed-exitcode
|
|
# code=$?
|
|
# [ ${code} -eq 0 ] || fail "unexpected exit code returned by helmfile apply: want 0, got ${code}"
|
|
|
|
# info "Locking dependencies"
|
|
# ${helmfile} -f ${dir}/happypath.yaml deps
|
|
# code=$?
|
|
# [ ${code} -eq 0 ] || fail "unexpected exit code returned by helmfile deps: ${code}"
|
|
|
|
# info "Applying ${dir}/happypath.yaml with locked dependencies"
|
|
# ${helmfile} -f ${dir}/happypath.yaml apply
|
|
# code=$?
|
|
# [ ${code} -eq 0 ] || fail "unexpected exit code returned by helmfile apply: ${code}"
|
|
# ${helm} list --namespace=${test_ns} || fail "unable to list releases"
|
|
|
|
# info "Deleting release"
|
|
# ${helmfile} -f ${dir}/happypath.yaml delete
|
|
# ${helm} status --namespace=${test_ns} httpbin &> /dev/null && fail "release should not exist anymore after a delete"
|
|
|
|
# info "Ensuring \"helmfile delete\" doesn't fail when no releases installed"
|
|
# ${helmfile} -f ${dir}/happypath.yaml delete || fail "\"helmfile delete\" shouldn't fail when there are no installed releases"
|
|
|
|
# info "Ensuring \"helmfile template\" output does contain only YAML docs"
|
|
# (${helmfile} -f ${dir}/happypath.yaml template | kubectl apply -f -) || fail "\"helmfile template | kubectl apply -f -\" shouldn't fail"
|
|
|
|
# test_pass "happypath"
|
|
|
|
if [[ helm_major_version -eq 3 ]]; then
|
|
export VAULT_ADDR=http://127.0.0.1:8200
|
|
export VAULT_TOKEN=toor
|
|
sops="sops --hc-vault-transit $VAULT_ADDR/v1/sops/keys/key"
|
|
mkdir -p ${dir}/tmp
|
|
|
|
test_start "secretssops"
|
|
|
|
info "Encrypt secrets"
|
|
${sops} -e ${dir}/env-1.secrets.yaml > ${dir}/tmp/env-1.secrets.sops.yaml || fail "${sops} failed at ${dir}/env-1.secrets.yaml"
|
|
${sops} -e ${dir}/env-2.secrets.yaml > ${dir}/tmp/env-2.secrets.sops.yaml || fail "${sops} failed at ${dir}/env-2.secrets.yaml"
|
|
|
|
info "Ensure helm-secrets is not installed"
|
|
${helm} plugin rm secrets || true
|
|
|
|
info "Ensure helmfile fails when no helm-secrets is installed"
|
|
${helmfile} -f ${dir}/secretssops.yaml -e direct build; code="$?"; echo Code: "$code"; [ "${code}" -ne 0 ] || fail "\"helmfile build\" should fail without secrets plugin"
|
|
|
|
info "Ensure helm-secrets is installed"
|
|
${helm} plugin install https://github.com/jkroepke/helm-secrets --version v3.5.0
|
|
|
|
info "Ensure helmfile succeed when helm-secrets is installed"
|
|
${helmfile} -f ${dir}/secretssops.yaml -e direct build || fail "\"helmfile build\" shouldn't fail"
|
|
|
|
test_pass "secretssops"
|
|
fi
|
|
|
|
# ALL DONE -----------------------------------------------------------------------------------------------------------
|
|
|
|
all_tests_passed
|