ci-config-crud-e2e.yml

name: CI - E2E tests
on:
  pull_request: {}
  workflow_dispatch:
    inputs:
      log-level:
        description: 'Set log level for verbosity'
        required: false
        default: 'info'
        type: choice
        options:
        - 'info'
        - 'debug'

jobs:
  validate-config-crud:
    name: Validate Config CRUD

    runs-on: ubuntu-latest

    services:
      vault:
        image: vault:1.9.1
        ports:
          - 8200:8200
        options: >-
          --name=vault
          --cap-add=IPC_LOCK
        env:
          VAULT_DEV_ROOT_TOKEN_ID: e2e_tests

    env:
      GO_VERSION: 1.19.2
      VAULT_TOKEN: 'e2e_tests'
      VAULT_ADDR: 'http://0.0.0.0:8200'
      VAULT_LOG_FILE: 'vault.log'
      BANK_VAULTS_LOG_FILE: 'bank-vaults.log'
      BANK_VAULTS_CONFIG_FILE: '/tmp/vault-config.yml'
      # The input value changes according to the workflow context.
      LOG_LEVEL: "${{ github.event.inputs.log-level || inputs.log-level }}"

    steps:
      - name: Copy Vault binary
        run: |
          docker cp vault:/bin/vault /usr/local/bin/vault

      - name: Checkout code
        uses: actions/checkout@v3

      - name: Set up Go
        uses: actions/setup-go@v4
        with:
          go-version: ${{ env.GO_VERSION }}

      - uses: actions/cache@v3
        with:
          path: |
            ~/.cache/go-build
            ~/go/pkg/mod
          key: ${{ runner.os }}-go-${{ hashFiles('go.sum') }}
          restore-keys: |
            ${{ runner.os }}-go-

      - name: Build bank-vaults binary
        run: |
          go install ./cmd/bank-vaults/...

      - name: Run bank-vaults
        run: |
          touch "${BANK_VAULTS_CONFIG_FILE}"
          bank-vaults configure \
            --mode dev \
            --vault-config-file "${BANK_VAULTS_CONFIG_FILE}" \
            &> "${BANK_VAULTS_LOG_FILE}" & disown

      - name: Test group - Audit
        if: always()
        run: |
          bash scripts/validate-config-crud/validate-config-crud.sh "audit"

      - name: Test group - Auth
        if: always()
        run: |
          bash scripts/validate-config-crud/validate-config-crud.sh "auth"

      - name: Test group - Groups
        if: always()
        run: |
          bash scripts/validate-config-crud/validate-config-crud.sh "groups"

      - name: Test group - Group-Aliases
        if: always()
        run: |
          bash scripts/validate-config-crud/validate-config-crud.sh "group-aliases"

      - name: Test group - Policies
        if: always()
        run: |
          bash scripts/validate-config-crud/validate-config-crud.sh "policies"

      - name: Test group - StartupSecrets
        if: always()
        run: |
          bash scripts/validate-config-crud/validate-config-crud.sh "startupSecrets"

      - name: Test group - Secrets
        if: always()
        run: |
          bash scripts/validate-config-crud/validate-config-crud.sh "secrets"

      - name: Print logs
        if: always()
        run: |
          echo -e "\nVaults logs ..."
          docker logs vault &> "${VAULT_LOG_FILE}"
          cat "${VAULT_LOG_FILE}"

          echo -e "\nBank-Vaults logs ..."
          cat "${BANK_VAULTS_LOG_FILE}"

      - name: Store log files
        if: always()
        uses: actions/upload-artifact@v3
        with:
          name: logs
          path: |
            ${{ env.VAULT_LOG_FILE }}
            ${{ env.BANK_VAULTS_LOG_FILE }}