Test in CI.

Author: Gerrit91

.github/workflows/docker.yaml

@@ -34,6 +34,9 @@ jobs:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
 
+    - name: Test
+      run: make test
+
     - name: Make tag
       run: |
         [ "${GITHUB_EVENT_NAME}" == 'pull_request' ] && echo "tag=${GITHUB_HEAD_REF##*/}" >> $GITHUB_ENV || true

Dockerfile

@@ -35,14 +35,10 @@ RUN set -x \
  && mv ct /usr/local/bin/ \
  && curl -Lo cosign https://github.com/sigstore/cosign/releases/download/v${VERSION_COSIGN}/cosign-linux-amd64 \
  && chmod +x cosign \
- && mv cosign /usr/local/bin/
-
-RUN mkdir -p /usr/share/ansible/collections/ansible_collections/metalstack/base/plugins \
- && cd /usr/share/ansible/collections/ansible_collections/metalstack/base/plugins \
- && mkdir action modules \
- && curl -Lo action/metal_stack_release_vector.py https://raw.githubusercontent.com/metal-stack/ansible-common/${METAL_ROLES_VERSION}/action_plugins/metal_stack_release_vector.py \
- && curl -Lo modules/metal_stack_release_vector.py https://raw.githubusercontent.com/metal-stack/ansible-common/${METAL_ROLES_VERSION}/library/metal_stack_release_vector.py \
- && chmod +x action/metal_stack_release_vector.py modules/metal_stack_release_vector.py
+ && mv cosign /usr/local/bin/ \
+ && bash -c 'mkdir -p /usr/share/ansible/collections/ansible_collections/metalstack/base/plugins/{action,modules}' \
+ && curl -Lo /usr/share/ansible/collections/ansible_collections/metalstack/base/plugins/action/metal_stack_release_vector.py https://raw.githubusercontent.com/metal-stack/ansible-common/${METAL_ROLES_VERSION}/action_plugins/metal_stack_release_vector.py \
+ && curl -Lo /usr/share/ansible/collections/ansible_collections/metalstack/base/plugins/modules/metal_stack_release_vector.py https://raw.githubusercontent.com/metal-stack/ansible-common/${METAL_ROLES_VERSION}/library/metal_stack_release_vector.py
 
 COPY ansible.cfg /etc/ansible/ansible.cfg
 COPY gai.conf /etc/gai.conf

Makefile

@@ -1,5 +1,5 @@
-.PHONY: run
-run:
+.PHONY: test
+test:
 	docker build -t metal-deployment-base .
 	docker build -t metal-deployment-base-test -f Dockerfile.test .
 	docker run --rm -it metal-deployment-base-test bash -c 'ansible -m metalstack.base.metal_stack_release_vector localhost && find ~/.ansible/roles -maxdepth 1 -type d -ls'

README.md

@@ -7,7 +7,7 @@ This repository builds the deployment base image that can be used for deploying
 In case your deployment depends on Ansible roles that are referenced in a metal-stack release vector (e.g. [releases](https://github.com/metal-stack/releases)), these role dependencies can be dynamically installed through the release vector OCI artifacts by running the following command before playbook execution:
 
 ```bash
-# requires the metal_stack_release_vector variable to be defined in your ansible variables
+# requires the metal_stack_release_vectors variable to be defined in your ansible variables
 $ ansible localhost -m metalstack.base.metal_stack_release_vector
 - Installing ansible-common (v0.6.13) to /root/.ansible/roles/ansible-common
 - Installing metal-ansible-modules (v0.2.10) to /root/.ansible/roles/metal-ansible-modules

test/group_vars/all/release_vector.yaml

@@ -1,16 +1,10 @@
-metal_stack_release_version: develop
-
+---
 metal_stack_release_vectors:
-  - url: oci://ghcr.io/metal-stack/releases:{{ metal_stack_release_version }}
+  - url: oci://ghcr.io/metal-stack/releases:develop
     variable_mapping_path: metal_stack_release.mapping
     include_role_defaults: metal-roles/common/roles/defaults
     oci_cosign_verify_key: |
       -----BEGIN PUBLIC KEY-----
       MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEdeAXd2namgVNDT0APmogKGwaV+Q4
       rfe4uVgmsyBbb6TrhX5Py6x1PsonDahTvdVpbSGC7QGEjxIHdi8HnJ4Okg==
       -----END PUBLIC KEY-----
-
-metal_stack_release_vector_replacements:
-    - key: name
-      old: ghcr.io/metal-stack/
-      new: r.metal-stack.io/