ci-ha.yml

name: Test-HA
on:
  workflow_call:
jobs:
  qualif:
    runs-on: ubuntu-latest
    steps:
    - name: Check out code
      uses: actions/checkout@v1
    - name: Run custom action
      # Use the location in the repository (without action.yml)
      uses: ./.github/actions/setup
      with:
        install-chaos: true
    - name: setup certs
      shell: bash
      run: |
         kubectl apply -f $GITHUB_WORKSPACE/.bin/certificate.yaml
    - name: deploy openldap-stack-ha
      shell: bash
      run: |
        cd "$GITHUB_WORKSPACE"
        helm install openldap-stack-ha -f .bin/myval.yaml .
        kubectl rollout status sts openldap-stack-ha 
    - name: verify deployment
      shell: bash
      run: |
          echo "test access to openldap database"
          sleep 10
          LDAPTLS_REQCERT=never ldapsearch -x -D 'cn=admin,dc=example,dc=org' -w Not@SecurePassw0rd -H ldaps://localhost:30636 -b 'dc=example,dc=org'
    - name: test phpldapadmin access
      shell: bash
      run: |
          echo "test access to phpldapadmin"
          echo "127.0.0.1 phpldapadmin.example ssl-ldap2.example" | sudo tee -a /etc/hosts
          curl phpldapadmin.example:8080
    - name: test self service pwd access
      shell: bash
      run: |
          echo "test access to ssp"
          curl ssl-ldap2.example:8080
    - name: verify certs
      shell: bash
      run: |
          echo "verify certificate"
          echo | openssl s_client -showcerts -servername example.com -connect localhost:30636 2>/dev/null | openssl x509 -inform pem -noout -text > /tmp/test-cert.txt
          if ! grep -q "CN = Self-Signed CA" /tmp/test-cert.txt; then exit 1; fi
    - name: fetch logs
      shell: bash
      run: |
          echo "kubectl logs openldap-stack-ha-0"
          kubectl logs openldap-stack-ha-0
          echo "kubectl logs openldap-stack-ha-1"
          kubectl logs openldap-stack-ha-1
          echo "kubectl logs openldap-stack-ha-2"
          kubectl logs openldap-stack-ha-2
    - name: apply chaos tests
      shell: bash
      run: |
          echo "test access to openldap database"
          kubectl apply -f .bin/chaos.yaml
    - name: test write
      shell: bash
      run: |
          echo "Write test to openldap database"
          LDAPTLS_REQCERT=never ldapadd -x -D 'cn=admin,dc=example,dc=org' -w Not@SecurePassw0rd -H ldaps://localhost:30636 -f  .bin/user.ldif
          LDAPTLS_REQCERT=never ldapsearch -o nettimeout=20 -x -D 'cn=admin,dc=example,dc=org' -w Not@SecurePassw0rd -H ldaps://localhost:30636 -b 'dc=example,dc=org' > /tmp/test-write.txt
          if ! grep  "Einstein" /tmp/test-write.txt; then echo 'no Einstein entry found' ; fi
          if ! grep  "objectClass: ownCloud" /tmp/test-write.txt; then  echo 'no ownCloud entry found'; fi
    - name: test memberOf
      shell: bash
      run: |
          echo "MemberOf test to openldap database"
          LDAPTLS_REQCERT=never ldapsearch -o nettimeout=20 -x -D 'cn=admin,dc=example,dc=org' -w Not@SecurePassw0rd -H ldaps://localhost:30636 -b 'dc=example,dc=org' "(memberOf=cn=testgroup,ou=Group,dc=example,dc=org)" > /tmp/test-write.txt
          if [ $(grep "numResponses" /tmp/test-write.txt | cut -d ":" -f 2 | tr -d ' ') -ne 2 ]; then exit 1 ; fi
          if ! grep -q "uid=test1,ou=People,dc=example,dc=org" /tmp/test-write.txt; then  echo exit 1; fi
    - name: chaos tests
      shell: bash
      run: |
          echo "test access to openldap database"
          for i in {1..20}; do  LDAPTLS_REQCERT=never ldapsearch -o nettimeout=20 -x -D 'cn=admin,dc=example,dc=org' -w Not@SecurePassw0rd -H ldaps://localhost:30636 -b 'dc=example,dc=org' && sleep 60 ; done