seaweedfs/.github/workflows/kms-tests.yml at master · 7y-9/seaweedfs · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
name: "KMS Tests"

on:
  pull_request:
    paths:
      - 'weed/kms/**'
      - 'weed/s3api/s3_sse_*.go'
      - 'weed/s3api/s3api_object_handlers.go'
      - 'weed/s3api/s3api_object_handlers_put.go'
      - 'test/kms/**'
      - '.github/workflows/kms-tests.yml'
  push:
    branches: [ master, main ]
    paths:
      - 'weed/kms/**'
      - 'weed/s3api/s3_sse_*.go'
      - 'weed/s3api/s3api_object_handlers.go'
      - 'weed/s3api/s3api_object_handlers_put.go'
      - 'test/kms/**'

concurrency:
  group: ${{ github.head_ref || github.ref }}-kms-tests
  cancel-in-progress: true

permissions:
  contents: read

defaults:
  run:
    working-directory: weed

jobs:
  kms-provider-tests:
    name: KMS Provider Integration Tests
    runs-on: ubuntu-22.04
    timeout-minutes: 20

    steps:
      - name: Check out code
        uses: actions/checkout@v6

      - name: Set up Go
        uses: actions/setup-go@v6
        with:
          go-version-file: 'go.mod'
        id: go

      - name: Install SeaweedFS
        run: |
          go install -buildvcs=false

      - name: Run KMS provider integration tests
        timeout-minutes: 15
        working-directory: test/kms
        run: |
          set -x
          echo "=== System Information ==="
          uname -a
          free -h
          docker --version

          make test-provider-ci

      - name: Show OpenBao logs on failure
        if: failure()
        run: |
          echo "=== OpenBao Container Logs ==="
          docker logs openbao-ci 2>&1 | tail -50 || echo "No OpenBao container found"
          echo "=== Setup Logs ==="
          cat /tmp/openbao-ci-setup.log 2>/dev/null || echo "No setup log found"

      - name: Cleanup
        if: always()
        working-directory: test/kms
        run: |
          make stop-openbao-ci || true

  s3-kms-e2e-tests:
    name: S3 KMS End-to-End Tests
    runs-on: ubuntu-22.04
    timeout-minutes: 25

    steps:
      - name: Check out code
        uses: actions/checkout@v6

      - name: Set up Go
        uses: actions/setup-go@v6
        with:
          go-version-file: 'go.mod'
        id: go

      - name: Install SeaweedFS
        run: |
          go install -buildvcs=false

      - name: Run S3 KMS end-to-end tests
        timeout-minutes: 20
        working-directory: test/kms
        run: |
          set -x
          echo "=== System Information ==="
          uname -a
          free -h
          docker --version
          aws --version

          make test-s3-kms-ci

      - name: Show logs on failure
        if: failure()
        working-directory: test/kms
        run: |
          echo "=== OpenBao Container Logs ==="
          cat /tmp/openbao-ci-container.log 2>/dev/null || docker logs openbao-ci 2>&1 | tail -50 || echo "No OpenBao logs found"
          echo "=== SeaweedFS Server Logs ==="
          tail -100 /tmp/seaweedfs-kms-mini.log 2>/dev/null || echo "No server log found"
          echo "=== Setup Logs ==="
          cat /tmp/weed-kms-ci-setup.log 2>/dev/null || echo "No weed setup log"
          echo "=== Process Information ==="
          ps aux | grep -E "(weed|test)" || true

      - name: Upload test logs on failure
        if: failure()
        uses: actions/upload-artifact@v7
        with:
          name: s3-kms-e2e-logs
          path: |
            /tmp/seaweedfs-kms-mini.log
            /tmp/openbao-ci-container.log
            /tmp/weed-kms-ci-setup.log
          retention-days: 3

      - name: Cleanup
        if: always()
        working-directory: test/kms
        run: |
          make stop-seaweedfs-ci || true
          make stop-openbao-ci || true
          make clean-ci || true