68fdc0a2b6
To improve support for Git >=v2.41.0. Signed-off-by: Hidde Beydals <hidde@hhh.computer> |
2 years ago | |
|---|---|---|
| .. | ||
| terraform | 2 years ago | |
| README.md | 2 years ago | |
| azure_test.go | 2 years ago | |
| go.mod | 2 years ago | |
| go.sum | 2 years ago | |
| util_test.go | 2 years ago | |
README.md
Azure E2E
The test suite goal is to verify that Flux integration with Azure services are working properly.
Architecture
The tests are run with the help of pre-configured Azure subscriptions and Azure DevOps organization. Access to those accounts are currently limited to Flux maintainers.
All infrastructure is and should be created with Terraform. There are two separate Terraform states. All state should be configured to use remote state in Azure. They should all be placed in the same container but use different keys.
The shared Terraform creates long running cheaper infrastructure that is used across all tests. This includes a Key Vault which contains an ssh key and Azure DevOps Personal Access Token which cannot be created automatically. It also includes an Azure Container Registry which the forked podinfo repository pushes a Helm Chart and Docker image to.
The aks Terraform creates the AKS cluster and related resources to run the tests. It creates the AKS cluster, Azure DevOps repositories, Key Vault Key for Sops, and Azure EventHub. The resources should be created and destroyed before and after every test run. Currently, the same state is reused between runs to make sure that resources are left running after each test run.
Tests
Each test run is initiated by running terraform apply on the aks Terraform, it does this by using the library
terraform-exec. It then reads the output of the Terraform to get
credentials and ssh keys, this means that a lot of the communication with the Azure API is offset to
Terraform instead of requiring it to be implemented in the test.
The following tests are currently implemented:
- Flux can be successfully installed on AKS using the CLI e.g.:
- source-controller can clone Azure DevOps repositories (https+ssh)
- image-reflector-controller can list tags from Azure Container Registry image repositories
- kustomize-controller can decrypt secrets using SOPS and Azure Key Vault
- image-automation-controller can create branches and push to Azure DevOps repositories (https+ssh)
- notification-controller can send commit status to Azure DevOps
- notification-controller can forward events to Azure Event Hub
- source-controller can pull charts from Azure Container Registry Helm repositories
Give User Access
There are a couple of steps required when adding a new user to get access to the Azure portal and Azure DevOps. To begin with add the new user toAzure AD, and add the user to the Azure AD group flux-contributors. The new users should now go through the invite process, and be able to sign in to both the Azure Portal and Azure DevOps.
After the new user has signed into Azure DevOps you will need to modify the users permissions. This cannot be done before the user has signed in a first time. In the organization users page chose "Manage User" and set the "Access Level" to basic and make the user "Project Contributor" of the "e2e" Azure DevOps project.