ci: add swiftv2 Linux scenario to acn pr checks #3042
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,27 @@ | ||
| #!/bin/bash | ||
|
|
||
| set -ex | ||
|
|
||
| az storage file download --account-name acnshared -s aksdev -p ./azureconfig-$SCENARIO.yaml --auth-mode login --enable-file-backup-request-intent | ||
| az storage file download --account-name acnshared -s aksdev -p ./aksdev --auth-mode login --enable-file-backup-request-intent | ||
|
|
||
| chmod +x ./aksdev | ||
| az aks get-credentials -g $RG --name $1 --file ~/.kube/config | ||
|
|
||
| cat azureconfig-$SCENARIO.yaml | ||
|
|
||
| # run e2e with vars | ||
| ./aksdev e2e run -n "CNI Swift v2" --azureconfig azureconfig-$SCENARIO.yaml \ | ||
| --var resource_group=$RG \ | ||
| --var aks_cluster=$PODSUBNET_CLUSTER_NAME \ | ||
| --var vnet_name=$VNET \ | ||
| --var vnet_nodesubnet_name=$NODE_SUBNET_NAME \ | ||
| --var vnet_podsubnet_name=$POD_SUBNET_NAME \ | ||
| --var subnet_token=$SUBNET_TOKEN \ | ||
| --var storage_account_name=$STORAGE_ACC \ | ||
| --var nat_gateway_name=$NAT_GW_NAME \ | ||
| --var public_ip_name=$PODSUBNET_CLUSTER_NAME-ip \ | ||
| --var aks_multitenant_cluster=$1 \ | ||
| --var service_ip=$SERVICE_IP \ | ||
| --var client_id=$USER_ASSIGNED_CLIENT_ID \ | ||
| --var keep_env=$KEEP_ENV |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,60 @@ | ||
| #!/bin/bash | ||
|
|
||
| source ./.pipelines/multitenancy/scripts/utils.sh | ||
|
|
||
| function main() { | ||
| # parse the arguments | ||
| while [[ $# -gt 0 ]]; do | ||
| key="$1" | ||
| case $key in | ||
| --service-principal) | ||
| shift | ||
| service_principal="$1" | ||
| ;; | ||
| --id-token) | ||
| shift | ||
| idtoken="$1" | ||
| ;; | ||
| --tenant) | ||
| shift | ||
| tenant="$1" | ||
| ;; | ||
| *) | ||
| echo 1>&2 "unknown argument: $1" | ||
| return 1 | ||
| ;; | ||
| esac | ||
| shift | ||
| done | ||
| export AZURE_CLIENT_ID="$service_principal" | ||
| export AZURE_TENANT_ID="$tenant" | ||
| if [[ -z "$tokenid" ]]; then | ||
| echo >&2 "Password Auth Disabled. Please convert to workload identity." | ||
| else | ||
| workload_login "$service_principal" "$tenantid" "$idtoken" | ||
| fi | ||
| } | ||
|
|
||
| # gets the service principal infomation for an app id | ||
| function get_sp_info() { | ||
| local sp_appid | ||
| sp_appid="${1}" | ||
| utils::log az ad show --id "$sp_appid" --query id -otsv | ||
| sp_oid="$cmd_out" | ||
| utils::log az ad show --id "$sp_appid" --query name -otsv | ||
| sp_name="$cmd_out" | ||
| } | ||
|
|
||
| function workload_login() { | ||
| #export AZURE_AUTHORITY_HOST="$2" | ||
| utils::setsecret AZURE_RESOURCE_BOOTSTRAP_CLIENT_ID "$1" | ||
| utils::setvar AZURE_RESOURCE_BOOTSTRAP_CLIENT_TENANT_ID "$2" | ||
|
|
||
| get_sp_info "$1" | ||
| utils::setvar AZURE_RESOURCE_BOOTSTRAP_CLIENT_NAME "$sp_name" | ||
|
|
||
| echo "$3" > wfi-token-file | ||
| local wfi_filepath | ||
| wfi_filepath=$(realpath wfi-token-file) | ||
| export AZURE_FEDERATED_TOKEN_FILE="$wfi_filepath" | ||
| } | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,81 @@ | ||
| #!/bin/bash | ||
|
|
||
| set -ex | ||
| source ./.pipelines/multitenancy/scripts/utils.sh | ||
|
|
||
| function main() { | ||
| # parse the arguments | ||
| while [[ $# -gt 0 ]]; do | ||
| key="$1" | ||
| case "$key" in | ||
| --test-dir) | ||
| shift | ||
| test_dir="$1" | ||
| ;; | ||
| --mt-test-cluster) | ||
| shift | ||
| mt_test_cluster="$1" | ||
| ;; | ||
| --scenario) | ||
| shift | ||
| scenario="$1" | ||
| ;; | ||
| *) | ||
| echo 1>&2 "unknown argument: $1" | ||
| return 1 | ||
| ;; | ||
| esac | ||
| shift | ||
| done | ||
| run_tests "$test_dir" "$mt_test_cluster" "$scenario" | ||
| } | ||
|
|
||
| function run_tests() { | ||
| local test_dir | ||
| test_dir="${1}" | ||
| local mt_test_cluster | ||
| mt_test_cluster="${2}" | ||
| local scenario | ||
| scenario="${3}" | ||
|
|
||
| STEP="runAKSe2e" | ||
| cd $test_dir | ||
|
|
||
| #get configvars | ||
| export_envVars $scenario | ||
|
|
||
| if [[ "$ENABLED" == "false" ]]; then | ||
| echo "scenario: $scenario skipped" | ||
| return 0 | ||
| fi | ||
|
|
||
| # Get the OIDC Issuer URL | ||
| export AKS_OIDC_ISSUER="$(az aks show -n "$mt_test_cluster" -g "$RG" --query "oidcIssuerProfile.issuerUrl" -otsv)" | ||
|
|
||
| # Federate the identity | ||
| az identity federated-credential create \ | ||
| --name "$FEDERATED_IDENTITY_CREDENTIAL_PREFIX-$mt_test_cluster" \ | ||
| --identity-name "$USER_ASSIGNED_IDENTITY_NAME" \ | ||
| --resource-group "$RG" \ | ||
| --issuer "$AKS_OIDC_ISSUER" \ | ||
| --subject system:serviceaccount:mtpod-to-service-endpoint:workload-identity-sa | ||
|
|
||
| # Get identity client ID | ||
| export USER_ASSIGNED_CLIENT_ID=$(az identity show --resource-group "$RG" --name "$USER_ASSIGNED_IDENTITY_NAME" --query 'clientId' -o tsv) | ||
|
|
||
| # Run aks e2e test suite | ||
| chmod +x ./akse2e.sh | ||
| ./akse2e.sh $mt_test_cluster && passed="true" || passed="false" | ||
|
|
||
| #Clean up user-assigned identity | ||
| az identity federated-credential delete --name "$FEDERATED_IDENTITY_CREDENTIAL_PREFIX-$mt_test_cluster" --identity-name "$USER_ASSIGNED_IDENTITY_NAME" --resource-group "$RG" --yes | ||
|
|
||
| if [[ "$passed" == "true" ]]; then | ||
| echo "Tests passed" | ||
| else | ||
| echo "Tests failed" | ||
| return 1 | ||
| fi | ||
| } | ||
|
|
||
| main $@ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,58 @@ | ||
| #!/bin/bash | ||
|
|
||
| export_envVars() { | ||
| az storage file download --account-name acnshared -s aksdev -p ./swiftv2runnerconfigvars-$1.env --auth-mode login --enable-file-backup-request-intent | ||
| export $(xargs < ./swiftv2runnerconfigvars-$1.env) | ||
| } | ||
|
|
||
| utils::gen_pass() { | ||
| local pass_len | ||
| pass_len="${1:-48}" | ||
|
|
||
| if [ -o xtrace ]; then | ||
| set +x | ||
| trap 'set -x' RETURN ERR | ||
| fi | ||
| base64_pass=$(openssl rand -base64 "${pass_len}") | ||
| return 0 | ||
| } | ||
|
|
||
| utils::setvar() { | ||
| local var_name | ||
| var_name="${1}" | ||
| local value | ||
| value="${@:2}" | ||
|
|
||
| local hide="#" | ||
| local taskns="vso" | ||
| echo >&2 "${hide}${hide}${taskns}[task.setvariable name=${var_name};isoutput=true;]$value" | ||
| eval "export "$var_name"="$value"" | ||
| } | ||
|
|
||
| utils::setsecret() { | ||
| local var_name | ||
| var_name="${1}" | ||
| local value | ||
| value="${@:2}" | ||
|
|
||
| local hide="#" | ||
| local taskns="vso" | ||
| echo >&2 "${hide}${hide}${taskns}[task.setvariable name=${var_name};isoutput=true;issecret=true;]$value" | ||
| eval "export "$var_name"="$value"" | ||
| } | ||
|
|
||
| utils::log() { | ||
| local cmd | ||
| cmd=("${@}") | ||
| echo "${@}" | ||
| local outreader | ||
| outreader=$(touch out.log && echo "out.log") | ||
| local errreader | ||
| errreader=$(touch err.log && echo "err.log") | ||
|
|
||
| "${cmd[@]}" > >(tee ${outreader}) 2> >(tee ${errreader} >&2) | ||
| cmd_code="${PIPESTATUS[0]}" | ||
| cmd_out=$(cat $outreader) | ||
| cmd_err=$(cat $errreader) | ||
| return $cmd_code | ||
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.