Skip to content
Main

feat: Add Phase 1 enhanced testing for better safety #897

Sign in to view logs

feat: Add Phase 1 enhanced testing for better safety

feat: Add Phase 1 enhanced testing for better safety #897

Workflow file for this run

.github/workflows/main.yml at aa187ae
name: Main
on: [push, pull_request]
permissions:
contents: read
jobs:
syntax-check:
name: Ansible syntax check
runs-on: ubuntu-22.04
permissions:
contents: read
steps:
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
persist-credentials: false
- uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
with:
python-version: '3.11'
cache: 'pip'
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
- name: Check Ansible playbook syntax
run: ansible-playbook main.yml --syntax-check
basic-tests:
name: Basic sanity tests
runs-on: ubuntu-22.04
permissions:
contents: read
steps:
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
persist-credentials: false
- uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
with:
python-version: '3.11'
cache: 'pip'
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
pip install jinja2 # For template rendering tests
sudo apt-get update && sudo apt-get install -y shellcheck
- name: Run basic sanity tests
run: |
python tests/unit/test_basic_sanity.py
python tests/unit/test_config_validation.py
python tests/unit/test_user_management.py
python tests/unit/test_openssl_compatibility.py
python tests/unit/test_cloud_provider_configs.py
python tests/unit/test_template_rendering.py
python tests/unit/test_generated_configs.py
docker-build:
name: Docker build test
runs-on: ubuntu-22.04
permissions:
contents: read
steps:
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
persist-credentials: false
- name: Build Docker image
run: docker build -t local/algo:test .
- name: Test Docker image starts
run: |
# Just verify the image can start and show help
docker run --rm local/algo:test /algo/algo --help
config-generation:
name: Configuration generation test
runs-on: ubuntu-22.04
timeout-minutes: 10
permissions:
contents: read
steps:
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
persist-credentials: false
- uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
with:
python-version: '3.11'
cache: 'pip'
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
- name: Test configuration generation (local mode)
run: |
# Run our simplified config test
chmod +x tests/test-local-config.sh
./tests/test-local-config.sh
ansible-dry-run:
name: Ansible dry-run validation
runs-on: ubuntu-22.04
timeout-minutes: 10
permissions:
contents: read
strategy:
matrix:
provider: [local, ec2, digitalocean, gce]
steps:
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
with:
persist-credentials: false
- uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
with:
python-version: '3.11'
cache: 'pip'
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
- name: Create test configuration for ${{ matrix.provider }}
run: |
# Create provider-specific test config
cat > test-${{ matrix.provider }}.cfg << 'EOF'
users:
- testuser
cloud_providers:
${{ matrix.provider }}:
server: test-server
size: t3.micro
image: ubuntu-22.04
region: us-east-1
wireguard_enabled: true
ipsec_enabled: false
dns_adblocking: false
ssh_tunneling: false
store_pki: true
algo_provider: ${{ matrix.provider }}
algo_server_name: test-algo-vpn
server: test-server
endpoint: 10.0.0.1
ansible_ssh_user: ubuntu
ansible_ssh_port: 22
algo_ssh_port: 4160
algo_ondemand_cellular: false
algo_ondemand_wifi: false
EOF
- name: Run Ansible check mode for ${{ matrix.provider }}
run: |
# Run ansible in check mode to validate playbooks work
ansible-playbook main.yml \
-i "localhost," \
-c local \
-e @test-${{ matrix.provider }}.cfg \
-e "provider=${{ matrix.provider }}" \
--check \
--diff \
-vv \
--skip-tags "facts,tests,local,update-alternatives,cloud_api" || true
# The || true is because check mode will fail on some tasks
# but we're looking for syntax/undefined variable errors