b74681f22c
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> # Conflicts: # web/package-lock.json # web/src/pages/sources/oauth/OAuthSourceForm.ts
439 lines
15 KiB
YAML
439 lines
15 KiB
YAML
trigger:
|
|
batch: true
|
|
branches:
|
|
include:
|
|
- master
|
|
- next
|
|
- version-*
|
|
paths:
|
|
exclude:
|
|
- website
|
|
- outpost
|
|
|
|
resources:
|
|
- repo: self
|
|
|
|
variables:
|
|
- name: POSTGRES_DB
|
|
value: authentik
|
|
- name: POSTGRES_USER
|
|
value: authentik
|
|
- name: POSTGRES_PASSWORD
|
|
value: "EK-5jnKfjrGRm<77"
|
|
- group: coverage
|
|
|
|
stages:
|
|
- stage: Lint_and_test
|
|
jobs:
|
|
- job: pylint
|
|
pool:
|
|
vmImage: 'ubuntu-latest'
|
|
steps:
|
|
- task: UsePythonVersion@0
|
|
inputs:
|
|
versionSpec: '3.9'
|
|
- task: DockerCompose@0
|
|
displayName: Run services
|
|
inputs:
|
|
dockerComposeFile: 'scripts/ci.docker-compose.yml'
|
|
action: 'Run services'
|
|
buildImages: false
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
sudo apt update
|
|
sudo apt install -y libxmlsec1-dev pkg-config
|
|
sudo pip install -U wheel pipenv
|
|
pipenv install --dev
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
pipenv run python -m scripts.generate_ci_config
|
|
pipenv run pylint authentik tests lifecycle
|
|
- job: black
|
|
pool:
|
|
vmImage: 'ubuntu-latest'
|
|
steps:
|
|
- task: UsePythonVersion@0
|
|
inputs:
|
|
versionSpec: '3.9'
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
sudo apt update
|
|
sudo apt install -y libxmlsec1-dev pkg-config
|
|
sudo pip install -U wheel pipenv
|
|
pipenv install --dev
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: pipenv run black --check authentik tests lifecycle
|
|
- job: isort
|
|
pool:
|
|
vmImage: 'ubuntu-latest'
|
|
steps:
|
|
- task: UsePythonVersion@0
|
|
inputs:
|
|
versionSpec: '3.9'
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
sudo apt update
|
|
sudo apt install -y libxmlsec1-dev pkg-config
|
|
sudo pip install -U wheel pipenv
|
|
pipenv install --dev
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: pipenv run isort --check authentik tests lifecycle
|
|
- job: bandit
|
|
pool:
|
|
vmImage: 'ubuntu-latest'
|
|
steps:
|
|
- task: UsePythonVersion@0
|
|
inputs:
|
|
versionSpec: '3.9'
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
sudo apt update
|
|
sudo apt install -y libxmlsec1-dev pkg-config
|
|
sudo pip install -U wheel pipenv
|
|
pipenv install --dev
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: pipenv run bandit -r authentik tests lifecycle
|
|
- job: pyright
|
|
pool:
|
|
vmImage: ubuntu-latest
|
|
steps:
|
|
- task: UseNode@1
|
|
inputs:
|
|
version: '12.x'
|
|
- task: UsePythonVersion@0
|
|
inputs:
|
|
versionSpec: '3.9'
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: npm install -g pyright@1.1.136
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
sudo apt update
|
|
sudo apt install -y libxmlsec1-dev pkg-config
|
|
sudo pip install -U wheel pipenv
|
|
pipenv install --dev
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: pipenv run pyright e2e lifecycle
|
|
- job: migrations
|
|
pool:
|
|
vmImage: 'ubuntu-latest'
|
|
steps:
|
|
- task: UsePythonVersion@0
|
|
inputs:
|
|
versionSpec: '3.9'
|
|
- task: DockerCompose@0
|
|
displayName: Run services
|
|
inputs:
|
|
dockerComposeFile: 'scripts/ci.docker-compose.yml'
|
|
action: 'Run services'
|
|
buildImages: false
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
sudo apt update
|
|
sudo apt install -y libxmlsec1-dev pkg-config
|
|
sudo pip install -U wheel pipenv
|
|
pipenv install --dev
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
pipenv run python -m scripts.generate_ci_config
|
|
pipenv run python -m lifecycle.migrate
|
|
- job: migrations_from_previous_release
|
|
pool:
|
|
vmImage: 'ubuntu-latest'
|
|
steps:
|
|
- task: UsePythonVersion@0
|
|
inputs:
|
|
versionSpec: '3.8'
|
|
- task: UsePythonVersion@0
|
|
inputs:
|
|
versionSpec: '3.9'
|
|
- task: DockerCompose@0
|
|
displayName: Run services
|
|
inputs:
|
|
dockerComposeFile: 'scripts/ci.docker-compose.yml'
|
|
action: 'Run services'
|
|
buildImages: false
|
|
- task: CmdLine@2
|
|
displayName: Prepare Last tagged release
|
|
inputs:
|
|
script: |
|
|
# Copy current, latest config to local
|
|
cp authentik/lib/default.yml local.env.yml
|
|
git checkout $(git describe --abbrev=0 --match 'version/*')
|
|
sudo apt update
|
|
sudo apt install -y libxmlsec1-dev pkg-config
|
|
sudo pip install -U wheel pipenv
|
|
pipenv install --dev
|
|
- task: CmdLine@2
|
|
displayName: Migrate to last tagged release
|
|
inputs:
|
|
script: |
|
|
pipenv run python -m scripts.generate_ci_config
|
|
pipenv run python -m lifecycle.migrate
|
|
- task: CmdLine@2
|
|
displayName: Install current branch
|
|
inputs:
|
|
script: |
|
|
set -x
|
|
git checkout ${{ variables.branchName }}
|
|
pipenv sync --dev
|
|
- task: CmdLine@2
|
|
displayName: Migrate to current branch
|
|
inputs:
|
|
script: |
|
|
pipenv run python -m scripts.generate_ci_config
|
|
pipenv run python -m lifecycle.migrate
|
|
- job: coverage_unittest
|
|
pool:
|
|
vmImage: 'ubuntu-latest'
|
|
steps:
|
|
- task: UsePythonVersion@0
|
|
inputs:
|
|
versionSpec: '3.9'
|
|
- task: DockerCompose@0
|
|
displayName: Run services
|
|
inputs:
|
|
dockerComposeFile: 'scripts/ci.docker-compose.yml'
|
|
action: 'Run services'
|
|
buildImages: false
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
sudo apt update
|
|
sudo apt install -y libxmlsec1-dev pkg-config
|
|
sudo pip install -U wheel pipenv
|
|
pipenv install --dev
|
|
- task: CmdLine@2
|
|
displayName: Run full test suite
|
|
inputs:
|
|
script: |
|
|
pipenv run python -m scripts.generate_ci_config
|
|
pipenv run make test
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
mkdir output-unittest
|
|
mv unittest.xml output-unittest/unittest.xml
|
|
mv .coverage output-unittest/coverage
|
|
- task: PublishPipelineArtifact@1
|
|
inputs:
|
|
targetPath: 'output-unittest/'
|
|
artifact: 'coverage-unittest'
|
|
publishLocation: 'pipeline'
|
|
- job: coverage_integration
|
|
pool:
|
|
vmImage: 'ubuntu-latest'
|
|
steps:
|
|
- task: UsePythonVersion@0
|
|
inputs:
|
|
versionSpec: '3.9'
|
|
- task: DockerCompose@0
|
|
displayName: Run services
|
|
inputs:
|
|
dockerComposeFile: 'scripts/ci.docker-compose.yml'
|
|
action: 'Run services'
|
|
buildImages: false
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
sudo apt update
|
|
sudo apt install -y libxmlsec1-dev pkg-config
|
|
sudo pip install -U wheel pipenv
|
|
pipenv install --dev
|
|
- task: CmdLine@2
|
|
displayName: Install K3d and prepare
|
|
inputs:
|
|
script: |
|
|
wget -q -O - https://raw.githubusercontent.com/rancher/k3d/main/install.sh | bash
|
|
k3d cluster create
|
|
k3d kubeconfig write -o ~/.kube/config --overwrite
|
|
- task: CmdLine@2
|
|
displayName: Run full test suite
|
|
inputs:
|
|
script: |
|
|
pipenv run python -m scripts.generate_ci_config
|
|
pipenv run make test-integration
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
mkdir output-integration
|
|
mv unittest.xml output-integration/unittest.xml
|
|
mv .coverage output-integration/coverage
|
|
- task: PublishPipelineArtifact@1
|
|
inputs:
|
|
targetPath: 'output-integration/'
|
|
artifact: 'coverage-integration'
|
|
publishLocation: 'pipeline'
|
|
- job: coverage_e2e
|
|
pool:
|
|
vmImage: 'ubuntu-latest'
|
|
steps:
|
|
- task: UsePythonVersion@0
|
|
inputs:
|
|
versionSpec: '3.9'
|
|
- task: NodeTool@0
|
|
inputs:
|
|
versionSpec: '16.x'
|
|
- task: DockerCompose@0
|
|
displayName: Run services
|
|
inputs:
|
|
dockerComposeFile: 'scripts/ci.docker-compose.yml'
|
|
action: 'Run services'
|
|
buildImages: false
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
sudo apt update
|
|
sudo apt install -y libxmlsec1-dev pkg-config
|
|
sudo pip install -U wheel pipenv
|
|
pipenv install --dev --python python3.9
|
|
- task: DockerCompose@0
|
|
displayName: Run ChromeDriver
|
|
inputs:
|
|
dockerComposeFile: 'tests/e2e/ci.docker-compose.yml'
|
|
action: 'Run a specific service'
|
|
serviceName: 'chrome'
|
|
- task: CmdLine@2
|
|
displayName: Build static files for e2e
|
|
inputs:
|
|
script: |
|
|
cd web
|
|
cd api && npm i && cd ..
|
|
npm i
|
|
npm run build
|
|
- task: CmdLine@2
|
|
displayName: Run full test suite
|
|
inputs:
|
|
script: |
|
|
pipenv run python -m scripts.generate_ci_config
|
|
pipenv run make test-e2e
|
|
- task: CmdLine@2
|
|
condition: always()
|
|
displayName: Cleanup
|
|
inputs:
|
|
script: |
|
|
docker stop $(docker ps -aq)
|
|
docker container prune -f
|
|
- task: CmdLine@2
|
|
displayName: Prepare unittests and coverage for upload
|
|
inputs:
|
|
script: |
|
|
mkdir output-e2e
|
|
mv unittest.xml output-e2e/unittest.xml
|
|
mv .coverage output-e2e/coverage
|
|
- task: PublishPipelineArtifact@1
|
|
condition: failed()
|
|
displayName: Upload screenshots if selenium tests fail
|
|
inputs:
|
|
targetPath: 'selenium_screenshots/'
|
|
artifact: 'selenium screenshots'
|
|
publishLocation: 'pipeline'
|
|
- task: PublishPipelineArtifact@1
|
|
inputs:
|
|
targetPath: 'output-e2e/'
|
|
artifact: 'coverage-e2e'
|
|
publishLocation: 'pipeline'
|
|
- stage: test_combine
|
|
jobs:
|
|
- job: test_coverage_combine
|
|
pool:
|
|
vmImage: 'ubuntu-latest'
|
|
steps:
|
|
- task: DownloadPipelineArtifact@2
|
|
inputs:
|
|
buildType: 'current'
|
|
artifactName: 'coverage-e2e'
|
|
path: "coverage-e2e/"
|
|
- task: DownloadPipelineArtifact@2
|
|
inputs:
|
|
buildType: 'current'
|
|
artifactName: 'coverage-integration'
|
|
path: "coverage-integration/"
|
|
- task: DownloadPipelineArtifact@2
|
|
inputs:
|
|
buildType: 'current'
|
|
artifactName: 'coverage-unittest'
|
|
path: "coverage-unittest/"
|
|
- task: UsePythonVersion@0
|
|
inputs:
|
|
versionSpec: '3.9'
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: |
|
|
sudo apt update
|
|
sudo apt install -y libxmlsec1-dev pkg-config
|
|
sudo pip install -U wheel pipenv
|
|
pipenv install --dev
|
|
pipenv run coverage combine coverage-e2e/coverage coverage-unittest/coverage coverage-integration/coverage
|
|
pipenv run coverage xml
|
|
pipenv run coverage html
|
|
- task: PublishCodeCoverageResults@1
|
|
inputs:
|
|
codeCoverageTool: 'Cobertura'
|
|
summaryFileLocation: 'coverage.xml'
|
|
pathToSources: '$(System.DefaultWorkingDirectory)'
|
|
- task: PublishTestResults@2
|
|
condition: succeededOrFailed()
|
|
inputs:
|
|
testResultsFormat: 'JUnit'
|
|
testResultsFiles: |
|
|
coverage-e2e/unittest.xml
|
|
coverage-integration/unittest.xml
|
|
coverage-unittest/unittest.xml
|
|
mergeTestResults: true
|
|
- task: CmdLine@2
|
|
inputs:
|
|
script: bash <(curl -s https://codecov.io/bash)
|
|
- task: CmdLine@2
|
|
continueOnError: true
|
|
inputs:
|
|
script: |
|
|
npm install -g @zeus-ci/cli
|
|
npx zeus job update -b $BUILD_BUILDID -j $BUILD_BUILDNUMBER -r $BUILD_SOURCEVERSION
|
|
npx zeus upload -b $BUILD_BUILDID -j $BUILD_BUILDNUMBER -t "application/x-cobertura+xml" coverage.xml
|
|
npx zeus upload -b $BUILD_BUILDID -j $BUILD_BUILDNUMBER -t "application/x-junit+xml" coverage-e2e/unittest.xml
|
|
npx zeus upload -b $BUILD_BUILDID -j $BUILD_BUILDNUMBER -t "application/x-junit+xml" coverage-integration/unittest.xml
|
|
npx zeus upload -b $BUILD_BUILDID -j $BUILD_BUILDNUMBER -t "application/x-junit+xml" coverage-unittest/unittest.xml
|
|
npx zeus job update --status=passed -b $BUILD_BUILDID -j $BUILD_BUILDNUMBER -r $BUILD_SOURCEVERSION
|
|
- stage: Build
|
|
jobs:
|
|
- job: build_server
|
|
pool:
|
|
vmImage: 'ubuntu-latest'
|
|
steps:
|
|
- task: Bash@3
|
|
inputs:
|
|
targetType: 'inline'
|
|
script: |
|
|
python ./scripts/az_do_set_branch.py
|
|
- task: Docker@2
|
|
inputs:
|
|
containerRegistry: 'beryjuorg-harbor'
|
|
repository: 'authentik/server'
|
|
command: 'build'
|
|
Dockerfile: 'Dockerfile'
|
|
tags: |
|
|
gh-$(branchName)
|
|
gh-$(branchName)-$(timestamp)
|
|
arguments: '--build-arg GIT_BUILD_HASH=$(Build.SourceVersion)'
|
|
- task: Docker@2
|
|
inputs:
|
|
containerRegistry: 'beryjuorg-harbor'
|
|
repository: 'authentik/server'
|
|
command: 'push'
|
|
tags: |
|
|
gh-$(branchName)
|
|
gh-$(branchName)-$(timestamp)
|