Support BENCHMARK_OPERATOR_NAMESPACE for OpenShift/release CI #1701
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: PR CI - Integration/E2E | |
| on: | |
| pull_request_review: | |
| types: [submitted] | |
| # Global lock-down | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: performance-environment | |
| cancel-in-progress: false | |
| jobs: | |
| security-check: | |
| runs-on: ubuntu-latest | |
| if: > | |
| github.event.review.state == 'approved' && | |
| (github.event.review.author_association == 'MEMBER' || github.event.review.author_association == 'OWNER') | |
| outputs: | |
| safe_sha: ${{ steps.verify.outputs.sha }} | |
| steps: | |
| - name: Verify Reviewed Commit | |
| id: verify | |
| run: | | |
| REVIEWED_SHA="${{ github.event.review.commit_id }}" | |
| CURRENT_SHA="${{ github.event.pull_request.head.sha }}" | |
| # BLOCKER: If the code changed since the review, fail immediately. | |
| if [[ "$REVIEWED_SHA" != "$CURRENT_SHA" ]]; then | |
| echo "::error::Security Risk: The reviewed commit ($REVIEWED_SHA) is not the latest commit ($CURRENT_SHA). Re-review required." | |
| exit 1 | |
| fi | |
| echo "sha=$REVIEWED_SHA" >> $GITHUB_OUTPUT | |
| integration_test: | |
| name: integration_test | |
| needs: security-check | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| python-version: [ '3.14' ] | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| ref: ${{ github.event.pull_request.head.sha }} | |
| persist-credentials: false | |
| - name: Set up Python ${{ matrix.python-version }} | |
| uses: actions/setup-python@v6 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| - name: Install dependencies | |
| run: | | |
| python -m pip install --upgrade pip | |
| pip install flake8 pytest pytest-cov | |
| if [[ -f requirements.txt ]]; then pip install -r requirements.txt; fi | |
| if [[ -f tests_requirements.txt ]]; then pip install -r tests_requirements.txt; fi | |
| - name: Lint with flake8 | |
| run: | | |
| # stop the build if there are Python syntax errors or undefined names | |
| flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics | |
| # exit-zero treats all errors as warnings. The GitHub editor is 127 chars wide | |
| flake8 . --count --exit-zero --max-complexity=10 --max-line-length=127 --statistics | |
| - name: ⚙️ Set Kubeconfig and hosts | |
| env: | |
| KUBECONFIG_CONTENTS: ${{ secrets.PERF_KUBECONFIG }} | |
| RUNNER_PATH: ${{ secrets.RUNNER_PATH }} | |
| OCP_HOSTS: ${{ secrets.PERF_OCP_HOSTS }} | |
| run: | | |
| mkdir -p "$RUNNER_PATH/.kube/" | |
| echo "$KUBECONFIG_CONTENTS" > "$RUNNER_PATH/.kube/config" | |
| echo "KUBECONFIG_PATH=$RUNNER_PATH/.kube/config" >> "$GITHUB_ENV" | |
| sudo tee -a /etc/hosts <<< "$OCP_HOSTS" > /dev/null | |
| - name: 📃 Integration test with pytest | |
| env: | |
| KUBEADMIN_PASSWORD: ${{ secrets.PERF_KUBEADMIN_PASSWORD }} | |
| PIN_NODE1: ${{ secrets.PERF_PIN_NODE1 }} | |
| PIN_NODE2: ${{ secrets.PERF_PIN_NODE2 }} | |
| RUNNER_PATH: ${{ secrets.RUNNER_PATH }} | |
| ELASTICSEARCH: ${{ secrets.PERF_ELASTICSEARCH }} | |
| ELASTICSEARCH_PORT: ${{ secrets.PERF_ELASTICSEARCH_PORT }} | |
| ELASTICSEARCH_USER: ${{ secrets.PERF_ELASTICSEARCH_USER }} | |
| ELASTICSEARCH_PASSWORD: ${{ secrets.PERF_ELASTICSEARCH_PASSWORD }} | |
| IBM_REGION_NAME: ${{ secrets.IBM_REGION_NAME }} | |
| IBM_ENDPOINT_URL: ${{ secrets.IBM_ENDPOINT_URL }} | |
| IBM_ACCESS_KEY_ID: ${{ secrets.IBM_ACCESS_KEY_ID }} | |
| IBM_SECRET_ACCESS_KEY: ${{ secrets.IBM_SECRET_ACCESS_KEY }} | |
| IBM_BUCKET: ${{ secrets.IBM_BUCKET }} | |
| IBM_KEY: ${{ secrets.IBM_KEY }} | |
| RUN_ARTIFACTS_URL: ${{ secrets.PERF_RUN_ARTIFACTS_URL }} | |
| GRAFANA_URL: ${{ secrets.PERF_GRAFANA_URL }} | |
| GRAFANA_API_KEY: ${{ secrets.PERF_GRAFANA_API_KEY }} | |
| GRAFANA_JSON_PATH: ${{ secrets.PERF_GRAFANA_JSON_PATH }} | |
| OCP_CLIENT_VERSION: ${{ secrets.PERF_OCP_CLIENT_VERSION }} | |
| VIRTCTL_VERSION: ${{ secrets.PERF_VIRTCTL_VERSION }} | |
| BENCHMARK_OPERATOR_VERSION: ${{ secrets.PERF_BENCHMARK_OPERATOR_VERSION }} | |
| run: | | |
| # Install Dockerfile content for pytest | |
| # install oc/kubectl | |
| curl -L "https://mirror.openshift.com/pub/openshift-v4/clients/ocp/${OCP_CLIENT_VERSION}/openshift-client-linux-${OCP_CLIENT_VERSION}.tar.gz" -o "$RUNNER_PATH/openshift-client-linux-${OCP_CLIENT_VERSION}.tar.gz" | |
| tar -xzvf $RUNNER_PATH/openshift-client-linux-${OCP_CLIENT_VERSION}.tar.gz -C $RUNNER_PATH/ | |
| rm $RUNNER_PATH/openshift-client-linux-${OCP_CLIENT_VERSION}.tar.gz | |
| cp $RUNNER_PATH/kubectl /usr/local/bin/kubectl | |
| cp $RUNNER_PATH/oc /usr/local/bin/oc | |
| # install virtctl for VNC | |
| curl -L "https://github.com/kubevirt/kubevirt/releases/download/v${VIRTCTL_VERSION}/virtctl-v${VIRTCTL_VERSION}-linux-amd64" -o "$RUNNER_PATH/virtctl" | |
| chmod +x $RUNNER_PATH/virtctl | |
| cp $RUNNER_PATH/virtctl /usr/local/bin/virtctl | |
| rm -rf $RUNNER_PATH/virtctl | |
| # clone benchmark-operator | |
| git clone -b v${BENCHMARK_OPERATOR_VERSION} https://github.com/cloud-bulldozer/benchmark-operator $RUNNER_PATH/benchmark-operator | |
| # run pytest | |
| pytest | |
| e2e: | |
| name: e2e | |
| needs: [security-check, integration_test] | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| python-version: [ '3.14' ] | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| ref: ${{ github.event.pull_request.head.sha }} | |
| persist-credentials: false | |
| - name: Set up Python ${{ matrix.python-version }} | |
| uses: actions/setup-python@v6 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| - name: Install dependencies | |
| run: | | |
| python -m pip install --upgrade pip | |
| pip install flake8 pytest pytest-cov | |
| if [[ -f requirements.txt ]]; then pip install -r requirements.txt; fi | |
| if [[ -f tests_requirements.txt ]]; then pip install -r tests_requirements.txt; fi | |
| - name: ⚙️ Set Kubeconfig and hosts | |
| env: | |
| KUBECONFIG_CONTENTS: ${{ secrets.PERF_KUBECONFIG }} | |
| RUNNER_PATH: ${{ secrets.RUNNER_PATH }} | |
| OCP_HOSTS: ${{ secrets.PERF_OCP_HOSTS }} | |
| run: | | |
| mkdir -p "$RUNNER_PATH/.kube/" | |
| echo "$KUBECONFIG_CONTENTS" > "$RUNNER_PATH/.kube/config" | |
| echo "KUBECONFIG_PATH=$RUNNER_PATH/.kube/config" >> "$GITHUB_ENV" | |
| sudo tee -a /etc/hosts <<< "$OCP_HOSTS" > /dev/null | |
| - name: 📃 E2E test | |
| env: | |
| WORKLOAD: "stressng_pod" | |
| KUBEADMIN_PASSWORD: ${{ secrets.PERF_KUBEADMIN_PASSWORD }} | |
| PIN_NODE_BENCHMARK_OPERATOR: ${{ secrets.PERF_PIN_NODE_BENCHMARK_OPERATOR }} | |
| PIN_NODE1: ${{ secrets.PERF_PIN_NODE1 }} | |
| PIN_NODE2: ${{ secrets.PERF_PIN_NODE2 }} | |
| RUNNER_PATH: ${{ secrets.RUNNER_PATH }} | |
| ELASTICSEARCH: ${{ secrets.PERF_ELASTICSEARCH }} | |
| ELASTICSEARCH_PORT: ${{ secrets.PERF_ELASTICSEARCH_PORT }} | |
| ELASTICSEARCH_USER: ${{ secrets.PERF_ELASTICSEARCH_USER }} | |
| ELASTICSEARCH_PASSWORD: ${{ secrets.PERF_ELASTICSEARCH_PASSWORD }} | |
| OCP_CLIENT_VERSION: ${{ secrets.PERF_OCP_CLIENT_VERSION }} | |
| BENCHMARK_OPERATOR_VERSION: ${{ secrets.PERF_BENCHMARK_OPERATOR_VERSION }} | |
| run: | | |
| # Install Dockerfile content for pytest | |
| # install oc/kubectl | |
| curl -L "https://mirror.openshift.com/pub/openshift-v4/clients/ocp/${OCP_CLIENT_VERSION}/openshift-client-linux-${OCP_CLIENT_VERSION}.tar.gz" -o "$RUNNER_PATH/openshift-client-linux-${OCP_CLIENT_VERSION}.tar.gz" | |
| tar -xzvf $RUNNER_PATH/openshift-client-linux-${OCP_CLIENT_VERSION}.tar.gz -C $RUNNER_PATH/ | |
| rm $RUNNER_PATH/openshift-client-linux-${OCP_CLIENT_VERSION}.tar.gz | |
| cp $RUNNER_PATH/kubectl /usr/local/bin/kubectl | |
| cp $RUNNER_PATH/oc /usr/local/bin/oc | |
| # clone benchmark-operator | |
| git clone -b v${BENCHMARK_OPERATOR_VERSION} https://github.com/cloud-bulldozer/benchmark-operator $RUNNER_PATH/benchmark-operator | |
| # run main | |
| PYTHONPATH=. python benchmark_runner/main/main.py |