cyclonus-netpol-test.yaml

name: Cyclonus Network Policy Test

on:
  workflow_dispatch:
  push:
    branches:
      - main
  pull_request:
    paths:
      - 'npm/**'
      - 'github/**'
      - 'test/**'
  schedule:
    # run once a day at midnight
    - cron: '0 0 * * *'

jobs:
  cyclonus-test:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        # run cyclonus tests in parallel for NPM with the given ConfigMaps
        profile: [v1-default.yaml, v1-place-azure-chain-first.yaml, v2-default.yaml, v2-apply-on-need.yaml, v2-place-azure-after-kube-services.yaml]
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - uses: actions/setup-go@v3
        with:
          go-version: '^1.19'

      - name: Setup Kind
        uses: engineerd/setup-kind@v0.5.0
        with:
          version: "v0.11.1"
          config: ./test/kind/kind.yaml
          name: npm-kind

      - name: Check Kind
        run: |
          kubectl get po -owide -A

      - name: Make NPM image
        run: |
          make npm-image NPM_PLATFORM_TAG=cyclonus PLATFORM=linux/amd64 CONTAINER_BUILDER=docker
      
      - name: Install Azure NPM
        # set the ConfigMap based on the build matrix
        # currently have to restart the daemonset because changing the ConfigMap doesn't restart NPM
        run: |
          sed -i 's/mcr.microsoft.com\/containernetworking\/azure-npm:.*/acnpublic.azurecr.io\/azure-npm:cyclonus/' ./npm/azure-npm.yaml
          kind load docker-image acnpublic.azurecr.io/azure-npm:cyclonus --name npm-kind
          kubectl apply -f ./npm/azure-npm.yaml
          echo "Applying profile: ${{ matrix.profile }}"
          kubectl apply -f ./npm/profiles/${{ matrix.profile }}
          kubectl rollout restart ds azure-npm -n kube-system
    
      - name: Check Cluster Components
        run: |
          sleep 10
          kubectl get po -owide -A
          kubectl describe ds azure-npm -n kube-system

      - name: Run Cyclonus network policy test
        run: make test-cyclonus

      - name: Fetch logs
        if: always()
        run: |
          kubectl logs -n kube-system -l k8s-app=azure-npm --tail -1 --prefix > npm-logs_${{ matrix.profile }}.txt
          mv ./test/cyclonus/cyclonus-test.txt ./cyclonus-test_${{ matrix.profile }}.txt

      - name: 'Upload Logs'
        uses: actions/upload-artifact@v3
        if: always()
        with:
          name: logs
          path: |
            ./npm-logs_${{ matrix.profile }}.txt
            ./cyclonus-test_${{ matrix.profile }}.txt