From aaf9b54d97db5c32fba917f3d986457a80b83066 Mon Sep 17 00:00:00 2001 From: Gabriela Cervantes Date: Tue, 9 Apr 2024 18:38:40 +0000 Subject: [PATCH] gha: Add support to install KBS to k8s TDX GHA workflow This PR adds support to install KBS to k8s TDX GHA workflow in order to run confidential attestation tests. Fixes #9451 Signed-off-by: Gabriela Cervantes --- .github/workflows/run-kata-coco-tests.yaml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/.github/workflows/run-kata-coco-tests.yaml b/.github/workflows/run-kata-coco-tests.yaml index e43216a0ba..bce5408a15 100644 --- a/.github/workflows/run-kata-coco-tests.yaml +++ b/.github/workflows/run-kata-coco-tests.yaml @@ -42,7 +42,9 @@ jobs: KATA_HYPERVISOR: ${{ matrix.vmm }} KUBERNETES: "k3s" USING_NFD: "true" + KBS: "true" K8S_TEST_HOST_TYPE: "baremetal" + KBS_INGRESS: "nodeport" SNAPSHOTTER: ${{ matrix.snapshotter }} PULL_TYPE: ${{ matrix.pull-type }} steps: @@ -65,6 +67,14 @@ jobs: timeout-minutes: 10 run: bash tests/integration/kubernetes/gha-run.sh deploy-kata-tdx + - name: Deploy CoCo KBS + timeout-minutes: 10 + run: bash tests/integration/kubernetes/gha-run.sh deploy-coco-kbs + + - name: Install `kbs-client` + timeout-minutes: 10 + run: bash tests/integration/kubernetes/gha-run.sh install-kbs-client + - name: Run tests timeout-minutes: 30 run: bash tests/integration/kubernetes/gha-run.sh run-tests @@ -77,6 +87,10 @@ jobs: if: always() run: bash tests/integration/kubernetes/gha-run.sh cleanup-snapshotter + - name: Delete CoCo KBS + if: always() + run: bash tests/integration/kubernetes/gha-run.sh delete-coco-kbs + run-k8s-tests-on-sev: strategy: fail-fast: false