diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index e157f9fbd4..39b46bfb29 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -279,55 +279,55 @@ jobs: platforms: linux/amd64 file: src/tools/csi-kata-directvolume/Dockerfile - run-kata-monitor-tests: - if: ${{ inputs.skip-test != 'yes' }} - needs: build-kata-static-tarball-amd64 - uses: ./.github/workflows/run-kata-monitor-tests.yaml - with: - tarball-suffix: -${{ inputs.tag }} - commit-hash: ${{ inputs.commit-hash }} - target-branch: ${{ inputs.target-branch }} + # run-kata-monitor-tests: + # if: ${{ inputs.skip-test != 'yes' }} + # needs: build-kata-static-tarball-amd64 + # uses: ./.github/workflows/run-kata-monitor-tests.yaml + # with: + # tarball-suffix: -${{ inputs.tag }} + # commit-hash: ${{ inputs.commit-hash }} + # target-branch: ${{ inputs.target-branch }} - run-k8s-tests-on-aks: - if: ${{ inputs.skip-test != 'yes' }} - needs: publish-kata-deploy-payload-amd64 - uses: ./.github/workflows/run-k8s-tests-on-aks.yaml - with: - tarball-suffix: -${{ inputs.tag }} - registry: ghcr.io - repo: ${{ github.repository_owner }}/kata-deploy-ci - tag: ${{ inputs.tag }}-amd64 - commit-hash: ${{ inputs.commit-hash }} - pr-number: ${{ inputs.pr-number }} - target-branch: ${{ inputs.target-branch }} - secrets: - AZ_APPID: ${{ secrets.AZ_APPID }} - AZ_TENANT_ID: ${{ secrets.AZ_TENANT_ID }} - AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }} + # run-k8s-tests-on-aks: + # if: ${{ inputs.skip-test != 'yes' }} + # needs: publish-kata-deploy-payload-amd64 + # uses: ./.github/workflows/run-k8s-tests-on-aks.yaml + # with: + # tarball-suffix: -${{ inputs.tag }} + # registry: ghcr.io + # repo: ${{ github.repository_owner }}/kata-deploy-ci + # tag: ${{ inputs.tag }}-amd64 + # commit-hash: ${{ inputs.commit-hash }} + # pr-number: ${{ inputs.pr-number }} + # target-branch: ${{ inputs.target-branch }} + # secrets: + # AZ_APPID: ${{ secrets.AZ_APPID }} + # AZ_TENANT_ID: ${{ secrets.AZ_TENANT_ID }} + # AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }} - run-k8s-tests-on-amd64: - if: ${{ inputs.skip-test != 'yes' }} - needs: publish-kata-deploy-payload-amd64 - uses: ./.github/workflows/run-k8s-tests-on-amd64.yaml - with: - registry: ghcr.io - repo: ${{ github.repository_owner }}/kata-deploy-ci - tag: ${{ inputs.tag }}-amd64 - commit-hash: ${{ inputs.commit-hash }} - pr-number: ${{ inputs.pr-number }} - target-branch: ${{ inputs.target-branch }} + # run-k8s-tests-on-amd64: + # if: ${{ inputs.skip-test != 'yes' }} + # needs: publish-kata-deploy-payload-amd64 + # uses: ./.github/workflows/run-k8s-tests-on-amd64.yaml + # with: + # registry: ghcr.io + # repo: ${{ github.repository_owner }}/kata-deploy-ci + # tag: ${{ inputs.tag }}-amd64 + # commit-hash: ${{ inputs.commit-hash }} + # pr-number: ${{ inputs.pr-number }} + # target-branch: ${{ inputs.target-branch }} - run-k8s-tests-on-arm64: - if: ${{ inputs.skip-test != 'yes' }} - needs: publish-kata-deploy-payload-arm64 - uses: ./.github/workflows/run-k8s-tests-on-arm64.yaml - with: - registry: ghcr.io - repo: ${{ github.repository_owner }}/kata-deploy-ci - tag: ${{ inputs.tag }}-arm64 - commit-hash: ${{ inputs.commit-hash }} - pr-number: ${{ inputs.pr-number }} - target-branch: ${{ inputs.target-branch }} + # run-k8s-tests-on-arm64: + # if: ${{ inputs.skip-test != 'yes' }} + # needs: publish-kata-deploy-payload-arm64 + # uses: ./.github/workflows/run-k8s-tests-on-arm64.yaml + # with: + # registry: ghcr.io + # repo: ${{ github.repository_owner }}/kata-deploy-ci + # tag: ${{ inputs.tag }}-arm64 + # commit-hash: ${{ inputs.commit-hash }} + # pr-number: ${{ inputs.pr-number }} + # target-branch: ${{ inputs.target-branch }} run-k8s-tests-on-nvidia-gpu: if: ${{ inputs.skip-test != 'yes' }} @@ -366,146 +366,146 @@ jobs: AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }} ITA_KEY: ${{ secrets.ITA_KEY }} - run-k8s-tests-on-zvsi: - if: ${{ inputs.skip-test != 'yes' }} - needs: [publish-kata-deploy-payload-s390x, build-and-publish-tee-confidential-unencrypted-image] - uses: ./.github/workflows/run-k8s-tests-on-zvsi.yaml - with: - registry: ghcr.io - repo: ${{ github.repository_owner }}/kata-deploy-ci - tag: ${{ inputs.tag }}-s390x - commit-hash: ${{ inputs.commit-hash }} - pr-number: ${{ inputs.pr-number }} - target-branch: ${{ inputs.target-branch }} - secrets: - AUTHENTICATED_IMAGE_PASSWORD: ${{ secrets.AUTHENTICATED_IMAGE_PASSWORD }} + # run-k8s-tests-on-zvsi: + # if: ${{ inputs.skip-test != 'yes' }} + # needs: [publish-kata-deploy-payload-s390x, build-and-publish-tee-confidential-unencrypted-image] + # uses: ./.github/workflows/run-k8s-tests-on-zvsi.yaml + # with: + # registry: ghcr.io + # repo: ${{ github.repository_owner }}/kata-deploy-ci + # tag: ${{ inputs.tag }}-s390x + # commit-hash: ${{ inputs.commit-hash }} + # pr-number: ${{ inputs.pr-number }} + # target-branch: ${{ inputs.target-branch }} + # secrets: + # AUTHENTICATED_IMAGE_PASSWORD: ${{ secrets.AUTHENTICATED_IMAGE_PASSWORD }} - run-k8s-tests-on-ppc64le: - if: ${{ inputs.skip-test != 'yes' }} - needs: publish-kata-deploy-payload-ppc64le - uses: ./.github/workflows/run-k8s-tests-on-ppc64le.yaml - with: - registry: ghcr.io - repo: ${{ github.repository_owner }}/kata-deploy-ci - tag: ${{ inputs.tag }}-ppc64le - commit-hash: ${{ inputs.commit-hash }} - pr-number: ${{ inputs.pr-number }} - target-branch: ${{ inputs.target-branch }} + # run-k8s-tests-on-ppc64le: + # if: ${{ inputs.skip-test != 'yes' }} + # needs: publish-kata-deploy-payload-ppc64le + # uses: ./.github/workflows/run-k8s-tests-on-ppc64le.yaml + # with: + # registry: ghcr.io + # repo: ${{ github.repository_owner }}/kata-deploy-ci + # tag: ${{ inputs.tag }}-ppc64le + # commit-hash: ${{ inputs.commit-hash }} + # pr-number: ${{ inputs.pr-number }} + # target-branch: ${{ inputs.target-branch }} - run-kata-deploy-tests: - if: ${{ inputs.skip-test != 'yes' }} - needs: [publish-kata-deploy-payload-amd64] - uses: ./.github/workflows/run-kata-deploy-tests.yaml - with: - registry: ghcr.io - repo: ${{ github.repository_owner }}/kata-deploy-ci - tag: ${{ inputs.tag }}-amd64 - commit-hash: ${{ inputs.commit-hash }} - pr-number: ${{ inputs.pr-number }} - target-branch: ${{ inputs.target-branch }} + # run-kata-deploy-tests: + # if: ${{ inputs.skip-test != 'yes' }} + # needs: [publish-kata-deploy-payload-amd64] + # uses: ./.github/workflows/run-kata-deploy-tests.yaml + # with: + # registry: ghcr.io + # repo: ${{ github.repository_owner }}/kata-deploy-ci + # tag: ${{ inputs.tag }}-amd64 + # commit-hash: ${{ inputs.commit-hash }} + # pr-number: ${{ inputs.pr-number }} + # target-branch: ${{ inputs.target-branch }} - run-basic-amd64-tests: - if: ${{ inputs.skip-test != 'yes' }} - needs: build-kata-static-tarball-amd64 - uses: ./.github/workflows/basic-ci-amd64.yaml - with: - tarball-suffix: -${{ inputs.tag }} - commit-hash: ${{ inputs.commit-hash }} - target-branch: ${{ inputs.target-branch }} + # run-basic-amd64-tests: + # if: ${{ inputs.skip-test != 'yes' }} + # needs: build-kata-static-tarball-amd64 + # uses: ./.github/workflows/basic-ci-amd64.yaml + # with: + # tarball-suffix: -${{ inputs.tag }} + # commit-hash: ${{ inputs.commit-hash }} + # target-branch: ${{ inputs.target-branch }} - run-basic-s390x-tests: - if: ${{ inputs.skip-test != 'yes' }} - needs: build-kata-static-tarball-s390x - uses: ./.github/workflows/basic-ci-s390x.yaml - with: - tarball-suffix: -${{ inputs.tag }} - commit-hash: ${{ inputs.commit-hash }} - target-branch: ${{ inputs.target-branch }} + # run-basic-s390x-tests: + # if: ${{ inputs.skip-test != 'yes' }} + # needs: build-kata-static-tarball-s390x + # uses: ./.github/workflows/basic-ci-s390x.yaml + # with: + # tarball-suffix: -${{ inputs.tag }} + # commit-hash: ${{ inputs.commit-hash }} + # target-branch: ${{ inputs.target-branch }} - run-cri-containerd-amd64: - if: ${{ inputs.skip-test != 'yes' }} - needs: build-kata-static-tarball-amd64 - strategy: - fail-fast: false - matrix: - params: [ - { containerd_version: lts, vmm: clh }, - { containerd_version: lts, vmm: dragonball }, - { containerd_version: lts, vmm: qemu }, - { containerd_version: lts, vmm: stratovirt }, - { containerd_version: lts, vmm: cloud-hypervisor }, - { containerd_version: lts, vmm: qemu-runtime-rs }, - { containerd_version: active, vmm: clh }, - { containerd_version: active, vmm: dragonball }, - { containerd_version: active, vmm: qemu }, - { containerd_version: active, vmm: stratovirt }, - { containerd_version: active, vmm: cloud-hypervisor }, - { containerd_version: active, vmm: qemu-runtime-rs }, - ] - uses: ./.github/workflows/run-cri-containerd-tests.yaml - with: - tarball-suffix: -${{ inputs.tag }} - commit-hash: ${{ inputs.commit-hash }} - target-branch: ${{ inputs.target-branch }} - runner: ubuntu-22.04 - arch: amd64 - containerd_version: ${{ matrix.params.containerd_version }} - vmm: ${{ matrix.params.vmm }} + # run-cri-containerd-amd64: + # if: ${{ inputs.skip-test != 'yes' }} + # needs: build-kata-static-tarball-amd64 + # strategy: + # fail-fast: false + # matrix: + # params: [ + # { containerd_version: lts, vmm: clh }, + # { containerd_version: lts, vmm: dragonball }, + # { containerd_version: lts, vmm: qemu }, + # { containerd_version: lts, vmm: stratovirt }, + # { containerd_version: lts, vmm: cloud-hypervisor }, + # { containerd_version: lts, vmm: qemu-runtime-rs }, + # { containerd_version: active, vmm: clh }, + # { containerd_version: active, vmm: dragonball }, + # { containerd_version: active, vmm: qemu }, + # { containerd_version: active, vmm: stratovirt }, + # { containerd_version: active, vmm: cloud-hypervisor }, + # { containerd_version: active, vmm: qemu-runtime-rs }, + # ] + # uses: ./.github/workflows/run-cri-containerd-tests.yaml + # with: + # tarball-suffix: -${{ inputs.tag }} + # commit-hash: ${{ inputs.commit-hash }} + # target-branch: ${{ inputs.target-branch }} + # runner: ubuntu-22.04 + # arch: amd64 + # containerd_version: ${{ matrix.params.containerd_version }} + # vmm: ${{ matrix.params.vmm }} - run-cri-containerd-s390x: - if: ${{ inputs.skip-test != 'yes' }} - needs: build-kata-static-tarball-s390x - strategy: - fail-fast: false - matrix: - params: [ - { containerd_version: active, vmm: qemu }, - { containerd_version: active, vmm: qemu-runtime-rs }, - ] - uses: ./.github/workflows/run-cri-containerd-tests.yaml - with: - tarball-suffix: -${{ inputs.tag }} - commit-hash: ${{ inputs.commit-hash }} - target-branch: ${{ inputs.target-branch }} - runner: s390x-large - arch: s390x - containerd_version: ${{ matrix.params.containerd_version }} - vmm: ${{ matrix.params.vmm }} + # run-cri-containerd-s390x: + # if: ${{ inputs.skip-test != 'yes' }} + # needs: build-kata-static-tarball-s390x + # strategy: + # fail-fast: false + # matrix: + # params: [ + # { containerd_version: active, vmm: qemu }, + # { containerd_version: active, vmm: qemu-runtime-rs }, + # ] + # uses: ./.github/workflows/run-cri-containerd-tests.yaml + # with: + # tarball-suffix: -${{ inputs.tag }} + # commit-hash: ${{ inputs.commit-hash }} + # target-branch: ${{ inputs.target-branch }} + # runner: s390x-large + # arch: s390x + # containerd_version: ${{ matrix.params.containerd_version }} + # vmm: ${{ matrix.params.vmm }} - run-cri-containerd-tests-ppc64le: - if: ${{ inputs.skip-test != 'yes' }} - needs: build-kata-static-tarball-ppc64le - strategy: - fail-fast: false - matrix: - params: [ - { containerd_version: active, vmm: qemu }, - ] - uses: ./.github/workflows/run-cri-containerd-tests.yaml - with: - tarball-suffix: -${{ inputs.tag }} - commit-hash: ${{ inputs.commit-hash }} - target-branch: ${{ inputs.target-branch }} - runner: ppc64le - arch: ppc64le - containerd_version: ${{ matrix.params.containerd_version }} - vmm: ${{ matrix.params.vmm }} + # run-cri-containerd-tests-ppc64le: + # if: ${{ inputs.skip-test != 'yes' }} + # needs: build-kata-static-tarball-ppc64le + # strategy: + # fail-fast: false + # matrix: + # params: [ + # { containerd_version: active, vmm: qemu }, + # ] + # uses: ./.github/workflows/run-cri-containerd-tests.yaml + # with: + # tarball-suffix: -${{ inputs.tag }} + # commit-hash: ${{ inputs.commit-hash }} + # target-branch: ${{ inputs.target-branch }} + # runner: ppc64le + # arch: ppc64le + # containerd_version: ${{ matrix.params.containerd_version }} + # vmm: ${{ matrix.params.vmm }} - run-cri-containerd-tests-arm64: - if: ${{ inputs.skip-test != 'yes' }} - needs: build-kata-static-tarball-arm64 - strategy: - fail-fast: false - matrix: - params: [ - { containerd_version: active, vmm: qemu }, - ] - uses: ./.github/workflows/run-cri-containerd-tests.yaml - with: - tarball-suffix: -${{ inputs.tag }} - commit-hash: ${{ inputs.commit-hash }} - target-branch: ${{ inputs.target-branch }} - runner: arm64-non-k8s - arch: arm64 - containerd_version: ${{ matrix.params.containerd_version }} - vmm: ${{ matrix.params.vmm }} + # run-cri-containerd-tests-arm64: + # if: ${{ inputs.skip-test != 'yes' }} + # needs: build-kata-static-tarball-arm64 + # strategy: + # fail-fast: false + # matrix: + # params: [ + # { containerd_version: active, vmm: qemu }, + # ] + # uses: ./.github/workflows/run-cri-containerd-tests.yaml + # with: + # tarball-suffix: -${{ inputs.tag }} + # commit-hash: ${{ inputs.commit-hash }} + # target-branch: ${{ inputs.target-branch }} + # runner: arm64-non-k8s + # arch: arm64 + # containerd_version: ${{ matrix.params.containerd_version }} + # vmm: ${{ matrix.params.vmm }} diff --git a/.github/workflows/run-kata-coco-tests.yaml b/.github/workflows/run-kata-coco-tests.yaml index 147f152f7f..4f322e4b40 100644 --- a/.github/workflows/run-kata-coco-tests.yaml +++ b/.github/workflows/run-kata-coco-tests.yaml @@ -41,175 +41,175 @@ permissions: id-token: write jobs: - run-k8s-tests-on-tdx: - strategy: - fail-fast: false - matrix: - vmm: - - qemu-tdx - snapshotter: - - nydus - pull-type: - - guest-pull - runs-on: tdx - env: - DOCKER_REGISTRY: ${{ inputs.registry }} - DOCKER_REPO: ${{ inputs.repo }} - DOCKER_TAG: ${{ inputs.tag }} - GH_PR_NUMBER: ${{ inputs.pr-number }} - KATA_HYPERVISOR: ${{ matrix.vmm }} - KUBERNETES: "vanilla" - USING_NFD: "true" - KBS: "true" - K8S_TEST_HOST_TYPE: "baremetal" - KBS_INGRESS: "nodeport" - SNAPSHOTTER: ${{ matrix.snapshotter }} - PULL_TYPE: ${{ matrix.pull-type }} - AUTHENTICATED_IMAGE_USER: ${{ vars.AUTHENTICATED_IMAGE_USER }} - AUTHENTICATED_IMAGE_PASSWORD: ${{ secrets.AUTHENTICATED_IMAGE_PASSWORD }} - ITA_KEY: ${{ secrets.ITA_KEY }} - AUTO_GENERATE_POLICY: "yes" - steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - with: - ref: ${{ inputs.commit-hash }} - fetch-depth: 0 - persist-credentials: false + # run-k8s-tests-on-tdx: + # strategy: + # fail-fast: false + # matrix: + # vmm: + # - qemu-tdx + # snapshotter: + # - nydus + # pull-type: + # - guest-pull + # runs-on: tdx + # env: + # DOCKER_REGISTRY: ${{ inputs.registry }} + # DOCKER_REPO: ${{ inputs.repo }} + # DOCKER_TAG: ${{ inputs.tag }} + # GH_PR_NUMBER: ${{ inputs.pr-number }} + # KATA_HYPERVISOR: ${{ matrix.vmm }} + # KUBERNETES: "vanilla" + # USING_NFD: "true" + # KBS: "true" + # K8S_TEST_HOST_TYPE: "baremetal" + # KBS_INGRESS: "nodeport" + # SNAPSHOTTER: ${{ matrix.snapshotter }} + # PULL_TYPE: ${{ matrix.pull-type }} + # AUTHENTICATED_IMAGE_USER: ${{ vars.AUTHENTICATED_IMAGE_USER }} + # AUTHENTICATED_IMAGE_PASSWORD: ${{ secrets.AUTHENTICATED_IMAGE_PASSWORD }} + # ITA_KEY: ${{ secrets.ITA_KEY }} + # AUTO_GENERATE_POLICY: "yes" + # steps: + # - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + # with: + # ref: ${{ inputs.commit-hash }} + # fetch-depth: 0 + # persist-credentials: false - - name: Rebase atop of the latest target branch - run: | - ./tests/git-helper.sh "rebase-atop-of-the-latest-target-branch" - env: - TARGET_BRANCH: ${{ inputs.target-branch }} + # - name: Rebase atop of the latest target branch + # run: | + # ./tests/git-helper.sh "rebase-atop-of-the-latest-target-branch" + # env: + # TARGET_BRANCH: ${{ inputs.target-branch }} - - name: Deploy Snapshotter - timeout-minutes: 5 - run: bash tests/integration/kubernetes/gha-run.sh deploy-snapshotter + # - name: Deploy Snapshotter + # timeout-minutes: 5 + # run: bash tests/integration/kubernetes/gha-run.sh deploy-snapshotter - - name: Deploy Kata - timeout-minutes: 10 - run: bash tests/integration/kubernetes/gha-run.sh deploy-kata-tdx + # - name: Deploy Kata + # timeout-minutes: 10 + # run: bash tests/integration/kubernetes/gha-run.sh deploy-kata-tdx - - name: Uninstall previous `kbs-client` - timeout-minutes: 10 - run: bash tests/integration/kubernetes/gha-run.sh uninstall-kbs-client + # - name: Uninstall previous `kbs-client` + # timeout-minutes: 10 + # run: bash tests/integration/kubernetes/gha-run.sh uninstall-kbs-client - - name: Deploy CoCo KBS - timeout-minutes: 10 - run: bash tests/integration/kubernetes/gha-run.sh deploy-coco-kbs + # - name: Deploy CoCo KBS + # timeout-minutes: 10 + # run: bash tests/integration/kubernetes/gha-run.sh deploy-coco-kbs - - name: Install `kbs-client` - timeout-minutes: 10 - run: bash tests/integration/kubernetes/gha-run.sh install-kbs-client + # - name: Install `kbs-client` + # timeout-minutes: 10 + # run: bash tests/integration/kubernetes/gha-run.sh install-kbs-client - - name: Deploy CSI driver - timeout-minutes: 5 - run: bash tests/integration/kubernetes/gha-run.sh deploy-csi-driver + # - name: Deploy CSI driver + # timeout-minutes: 5 + # run: bash tests/integration/kubernetes/gha-run.sh deploy-csi-driver - - name: Run tests - timeout-minutes: 100 - run: bash tests/integration/kubernetes/gha-run.sh run-tests + # - name: Run tests + # timeout-minutes: 100 + # run: bash tests/integration/kubernetes/gha-run.sh run-tests - - name: Delete kata-deploy - if: always() - run: bash tests/integration/kubernetes/gha-run.sh cleanup-tdx + # - name: Delete kata-deploy + # if: always() + # run: bash tests/integration/kubernetes/gha-run.sh cleanup-tdx - - name: Delete Snapshotter - if: always() - run: bash tests/integration/kubernetes/gha-run.sh cleanup-snapshotter + # - name: Delete Snapshotter + # if: always() + # run: bash tests/integration/kubernetes/gha-run.sh cleanup-snapshotter - - name: Delete CoCo KBS - if: always() - run: bash tests/integration/kubernetes/gha-run.sh delete-coco-kbs + # - name: Delete CoCo KBS + # if: always() + # run: bash tests/integration/kubernetes/gha-run.sh delete-coco-kbs - - name: Delete CSI driver - timeout-minutes: 5 - run: bash tests/integration/kubernetes/gha-run.sh delete-csi-driver + # - name: Delete CSI driver + # timeout-minutes: 5 + # run: bash tests/integration/kubernetes/gha-run.sh delete-csi-driver - run-k8s-tests-sev-snp: - strategy: - fail-fast: false - matrix: - vmm: - - qemu-snp - snapshotter: - - nydus - pull-type: - - guest-pull - runs-on: sev-snp - env: - DOCKER_REGISTRY: ${{ inputs.registry }} - DOCKER_REPO: ${{ inputs.repo }} - DOCKER_TAG: ${{ inputs.tag }} - GH_PR_NUMBER: ${{ inputs.pr-number }} - KATA_HYPERVISOR: ${{ matrix.vmm }} - KUBECONFIG: /home/kata/.kube/config - KUBERNETES: "vanilla" - USING_NFD: "false" - KBS: "true" - KBS_INGRESS: "nodeport" - K8S_TEST_HOST_TYPE: "baremetal" - SNAPSHOTTER: ${{ matrix.snapshotter }} - PULL_TYPE: ${{ matrix.pull-type }} - AUTHENTICATED_IMAGE_USER: ${{ vars.AUTHENTICATED_IMAGE_USER }} - AUTHENTICATED_IMAGE_PASSWORD: ${{ secrets.AUTHENTICATED_IMAGE_PASSWORD }} - AUTO_GENERATE_POLICY: "yes" - steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - with: - ref: ${{ inputs.commit-hash }} - fetch-depth: 0 - persist-credentials: false + # run-k8s-tests-sev-snp: + # strategy: + # fail-fast: false + # matrix: + # vmm: + # - qemu-snp + # snapshotter: + # - nydus + # pull-type: + # - guest-pull + # runs-on: sev-snp + # env: + # DOCKER_REGISTRY: ${{ inputs.registry }} + # DOCKER_REPO: ${{ inputs.repo }} + # DOCKER_TAG: ${{ inputs.tag }} + # GH_PR_NUMBER: ${{ inputs.pr-number }} + # KATA_HYPERVISOR: ${{ matrix.vmm }} + # KUBECONFIG: /home/kata/.kube/config + # KUBERNETES: "vanilla" + # USING_NFD: "false" + # KBS: "true" + # KBS_INGRESS: "nodeport" + # K8S_TEST_HOST_TYPE: "baremetal" + # SNAPSHOTTER: ${{ matrix.snapshotter }} + # PULL_TYPE: ${{ matrix.pull-type }} + # AUTHENTICATED_IMAGE_USER: ${{ vars.AUTHENTICATED_IMAGE_USER }} + # AUTHENTICATED_IMAGE_PASSWORD: ${{ secrets.AUTHENTICATED_IMAGE_PASSWORD }} + # AUTO_GENERATE_POLICY: "yes" + # steps: + # - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + # with: + # ref: ${{ inputs.commit-hash }} + # fetch-depth: 0 + # persist-credentials: false - - name: Rebase atop of the latest target branch - run: | - ./tests/git-helper.sh "rebase-atop-of-the-latest-target-branch" - env: - TARGET_BRANCH: ${{ inputs.target-branch }} + # - name: Rebase atop of the latest target branch + # run: | + # ./tests/git-helper.sh "rebase-atop-of-the-latest-target-branch" + # env: + # TARGET_BRANCH: ${{ inputs.target-branch }} - - name: Deploy Snapshotter - timeout-minutes: 5 - run: bash tests/integration/kubernetes/gha-run.sh deploy-snapshotter + # - name: Deploy Snapshotter + # timeout-minutes: 5 + # run: bash tests/integration/kubernetes/gha-run.sh deploy-snapshotter - - name: Deploy Kata - timeout-minutes: 10 - run: bash tests/integration/kubernetes/gha-run.sh deploy-kata-snp + # - name: Deploy Kata + # timeout-minutes: 10 + # run: bash tests/integration/kubernetes/gha-run.sh deploy-kata-snp - - name: Uninstall previous `kbs-client` - timeout-minutes: 10 - run: bash tests/integration/kubernetes/gha-run.sh uninstall-kbs-client + # - name: Uninstall previous `kbs-client` + # timeout-minutes: 10 + # run: bash tests/integration/kubernetes/gha-run.sh uninstall-kbs-client - - name: Deploy CoCo KBS - timeout-minutes: 10 - run: bash tests/integration/kubernetes/gha-run.sh deploy-coco-kbs + # - name: Deploy CoCo KBS + # timeout-minutes: 10 + # run: bash tests/integration/kubernetes/gha-run.sh deploy-coco-kbs - - name: Install `kbs-client` - timeout-minutes: 10 - run: bash tests/integration/kubernetes/gha-run.sh install-kbs-client + # - name: Install `kbs-client` + # timeout-minutes: 10 + # run: bash tests/integration/kubernetes/gha-run.sh install-kbs-client - - name: Deploy CSI driver - timeout-minutes: 5 - run: bash tests/integration/kubernetes/gha-run.sh deploy-csi-driver + # - name: Deploy CSI driver + # timeout-minutes: 5 + # run: bash tests/integration/kubernetes/gha-run.sh deploy-csi-driver - - name: Run tests - timeout-minutes: 50 - run: bash tests/integration/kubernetes/gha-run.sh run-tests + # - name: Run tests + # timeout-minutes: 50 + # run: bash tests/integration/kubernetes/gha-run.sh run-tests - - name: Delete kata-deploy - if: always() - run: bash tests/integration/kubernetes/gha-run.sh cleanup-snp + # - name: Delete kata-deploy + # if: always() + # run: bash tests/integration/kubernetes/gha-run.sh cleanup-snp - - name: Delete Snapshotter - if: always() - run: bash tests/integration/kubernetes/gha-run.sh cleanup-snapshotter + # - name: Delete Snapshotter + # if: always() + # run: bash tests/integration/kubernetes/gha-run.sh cleanup-snapshotter - - name: Delete CoCo KBS - if: always() - run: bash tests/integration/kubernetes/gha-run.sh delete-coco-kbs + # - name: Delete CoCo KBS + # if: always() + # run: bash tests/integration/kubernetes/gha-run.sh delete-coco-kbs - - name: Delete CSI driver - timeout-minutes: 5 - run: bash tests/integration/kubernetes/gha-run.sh delete-csi-driver + # - name: Delete CSI driver + # timeout-minutes: 5 + # run: bash tests/integration/kubernetes/gha-run.sh delete-csi-driver # Generate jobs for testing CoCo on non-TEE environments run-k8s-tests-coco-nontee: