Support running e2e on macOS

Author: NickCao

.github/workflows/selftest.yml

@@ -8,6 +8,7 @@ jobs:
         os:
           - ubuntu-24.04
           - ubuntu-24.04-arm
+          - macos-13 # arm-based macOS runners does not support nested virt
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@v4

action.yml

@@ -27,6 +27,12 @@ runs:
         repository: jumpstarter-dev/jumpstarter
         ref: ${{ inputs.jumpstarter-ref }}
         path: jumpstarter
+    - name: Install Docker and Kind (macOS)
+      if: runner.os == 'macOS'
+      shell: bash
+      run: |
+        brew install colima docker kind go kubectl helm gnu-sed
+        colima start --network-address --cpu 4 --memory 8 --mount-type virtiofs
     - name: Deploy dex
       shell: bash
       run: |
@@ -54,12 +60,20 @@ runs:
          --group=system:unauthenticated
 
         helm repo add dex https://charts.dexidp.io
-        helm install --namespace dex --wait -f "$GITHUB_ACTION_PATH"/dex.values.yaml dex dex/dex
+        helm install --namespace dex --wait --timeout 20m -f "$GITHUB_ACTION_PATH"/dex.values.yaml dex dex/dex
+
+        if [[ "$(uname)" == "Darwin" ]]; then
+          echo "192.168.65.2 dex.dex.svc.cluster.local" | sudo tee -a /etc/hosts
+          gsed -i 's|$("${SCRIPT_DIR}"/get_ext_ip.sh)|192.168.65.2|' ./controller/hack/deploy_with_helm.sh
+          gsed -i 's|RETRIES=60|RETRIES=600|' ./controller/hack/deploy_with_helm.sh
 
-        sudo cp ca.pem /usr/local/share/ca-certificates/dex.crt
-        sudo update-ca-certificates
+          sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ca.pem
+        else
+          echo "127.0.0.1 dex.dex.svc.cluster.local" | sudo tee -a /etc/hosts
 
-        echo "127.0.0.1 dex.dex.svc.cluster.local" | sudo tee -a /etc/hosts
+          sudo cp ca.pem /usr/local/share/ca-certificates/dex.crt
+          sudo update-ca-certificates
+        fi
     - name: Deploy jumpstarter controller
       shell: bash
       run: |
@@ -85,6 +99,7 @@ runs:
         . .venv/bin/activate
 
         export JUMPSTARTER_GRPC_INSECURE=1
+        export JUMPSTARTER_FORCE_SYSTEM_CERTS=1
 
         kubectl create -n default sa test-client-sa
         kubectl create -n default sa test-exporter-sa