/
pipeline_origin_bld.go
704 lines (594 loc) · 32.9 KB
/
pipeline_origin_bld.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
package builds
import (
"fmt"
"os"
"strings"
"time"
g "github.com/onsi/ginkgo"
o "github.com/onsi/gomega"
corev1 "k8s.io/api/core/v1"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
"k8s.io/apimachinery/pkg/util/wait"
e2e "k8s.io/kubernetes/test/e2e/framework"
buildv1 "github.com/openshift/api/build/v1"
buildutil "github.com/openshift/origin/pkg/build/util"
exutil "github.com/openshift/origin/test/extended/util"
"github.com/openshift/origin/test/extended/util/jenkins"
)
const (
localClientPluginSnapshotImageStream = "jenkins-client-plugin-snapshot-test"
localClientPluginSnapshotImage = "openshift/" + localClientPluginSnapshotImageStream + ":latest"
localSyncPluginSnapshotImageStream = "jenkins-sync-plugin-snapshot-test"
localSyncPluginSnapshotImage = "openshift/" + localSyncPluginSnapshotImageStream + ":latest"
clientLicenseText = "About OpenShift Client Jenkins Plugin"
syncLicenseText = "About OpenShift Sync"
clientPluginName = "openshift-client"
syncPluginName = "openshift-sync"
secretName = "secret-to-credential"
secretCredentialSyncLabel = "credential.sync.jenkins.openshift.io"
envVarsPipelineGitRepoBuildConfig = "test-build-app-pipeline"
)
var _ = g.Describe("[Feature:Builds][Slow] openshift pipeline build", func() {
defer g.GinkgoRecover()
var (
jenkinsEphemeralTemplatePath = exutil.FixturePath("..", "..", "examples", "jenkins", "jenkins-ephemeral-template.json")
jenkinsPersistentTemplatePath = exutil.FixturePath("..", "..", "examples", "jenkins", "jenkins-persistent-template.json")
envVarsPipelinePath = exutil.FixturePath("testdata", "samplepipeline-withenvs.yaml")
origPipelinePath = exutil.FixturePath("..", "..", "examples", "jenkins", "pipeline", "samplepipeline.yaml")
configMapPodTemplatePath = exutil.FixturePath("testdata", "config-map-jenkins-slave-pods.yaml")
imagestreamPodTemplatePath = exutil.FixturePath("testdata", "imagestream-jenkins-slave-pods.yaml")
imagestreamtagPodTemplatePath = exutil.FixturePath("testdata", "imagestreamtag-jenkins-slave-pods.yaml")
podTemplateSlavePipelinePath = exutil.FixturePath("testdata", "jenkins-slave-template.yaml")
secretPath = exutil.FixturePath("testdata", "openshift-secret-to-jenkins-credential.yaml")
successfulPipeline = exutil.FixturePath("testdata", "builds", "build-pruning", "successful-pipeline.yaml")
failedPipeline = exutil.FixturePath("testdata", "builds", "build-pruning", "failed-pipeline.yaml")
clientPluginPipelinePath = exutil.FixturePath("..", "..", "examples", "jenkins", "pipeline", "openshift-client-plugin-pipeline.yaml")
multiNamespaceClientPluginPipelinePath = exutil.FixturePath("testdata", "multi-namespace-pipeline.yaml")
pollingInterval = time.Second
timeout = time.Minute
oc = exutil.NewCLI("jenkins-pipeline", exutil.KubeConfigPath())
ticker *time.Ticker
j *jenkins.JenkinsRef
pvs = []*corev1.PersistentVolume{}
nfspod = &corev1.Pod{}
cleanup = func(jenkinsTemplatePath string) {
if g.CurrentGinkgoTestDescription().Failed {
exutil.DumpPodStates(oc)
exutil.DumpPodLogsStartingWith("", oc)
exutil.DumpPersistentVolumeInfo(oc)
}
if os.Getenv(jenkins.EnableJenkinsMemoryStats) != "" {
ticker.Stop()
}
client := oc.AsAdmin().KubeFramework().ClientSet
g.By("removing jenkins")
exutil.RemoveDeploymentConfigs(oc, "jenkins")
// per k8s e2e volume_util.go:VolumeTestCleanup, nuke any client pods
// before nfs server to assist with umount issues; as such, need to clean
// up prior to the AfterEach processing, to guaranteed deletion order
if jenkinsTemplatePath == jenkinsPersistentTemplatePath {
g.By("deleting PVCs")
exutil.DeletePVCsForDeployment(client, oc, "jenkins")
g.By("removing nfs pvs")
for _, pv := range pvs {
e2e.DeletePersistentVolume(client, pv.Name)
}
g.By("removing nfs pod")
e2e.DeletePodWithWait(oc.AsAdmin().KubeFramework(), client, nfspod)
}
}
setupJenkins = func(jenkinsTemplatePath string) {
exutil.PreTestDump()
// Deploy Jenkins
// NOTE, we use these tests for both a) nightly regression runs against the latest openshift jenkins image on docker hub, and
// b) PR testing for changes to the various openshift jenkins plugins we support. With scenario b), a docker image that extends
// our jenkins image is built, where the proposed plugin change is injected, overwritting the current released version of the plugin.
// Our test/PR jobs on ci.openshift create those images, as well as set env vars this test suite looks for. When both the env var
// and test image is present, a new image stream is created using the test image, and our jenkins template is instantiated with
// an override to use that images stream and test image
var licensePrefix, pluginName string
useSnapshotImage := false
err := oc.Run("create").Args("-n", oc.Namespace(), "-f", jenkinsTemplatePath).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
jenkinsTemplateName := "jenkins-ephemeral"
// create persistent volumes if running persistent jenkins
if jenkinsTemplatePath == jenkinsPersistentTemplatePath {
g.By("PV/PVC dump before setup")
exutil.DumpPersistentVolumeInfo(oc)
jenkinsTemplateName = "jenkins-persistent"
nfspod, pvs, err = exutil.SetupK8SNFSServerAndVolume(oc, 3)
o.Expect(err).NotTo(o.HaveOccurred())
}
// our pipeline jobs, between jenkins and oc invocations, need more mem than the default
newAppArgs := []string{"--template", fmt.Sprintf("%s/%s", oc.Namespace(), jenkinsTemplateName), "-p", "MEMORY_LIMIT=2Gi", "-p", "DISABLE_ADMINISTRATIVE_MONITORS=true"}
newAppArgs = jenkins.OverridePodTemplateImages(newAppArgs)
clientPluginNewAppArgs, useClientPluginSnapshotImage := jenkins.SetupSnapshotImage(jenkins.UseLocalClientPluginSnapshotEnvVarName, localClientPluginSnapshotImage, localClientPluginSnapshotImageStream, newAppArgs, oc)
syncPluginNewAppArgs, useSyncPluginSnapshotImage := jenkins.SetupSnapshotImage(jenkins.UseLocalSyncPluginSnapshotEnvVarName, localSyncPluginSnapshotImage, localSyncPluginSnapshotImageStream, newAppArgs, oc)
switch {
case useClientPluginSnapshotImage && useSyncPluginSnapshotImage:
fmt.Fprintf(g.GinkgoWriter,
"\nBOTH %s and %s for PR TESTING ARE SET. WILL NOT CHOOSE BETWEEN THE TWO SO TESTING CURRENT PLUGIN VERSIONS IN LATEST OPENSHIFT JENKINS IMAGE ON DOCKER HUB.\n",
jenkins.UseLocalClientPluginSnapshotEnvVarName, jenkins.UseLocalSyncPluginSnapshotEnvVarName)
case useClientPluginSnapshotImage:
fmt.Fprintf(g.GinkgoWriter, "\nTHE UPCOMING TESTS WILL LEVERAGE AN IMAGE THAT EXTENDS THE LATEST OPENSHIFT JENKINS IMAGE AND OVERRIDES THE OPENSHIFT CLIENT PLUGIN WITH A NEW VERSION BUILT FROM PROPOSED CHANGES TO THAT PLUGIN.\n")
licensePrefix = clientLicenseText
pluginName = clientPluginName
useSnapshotImage = true
newAppArgs = clientPluginNewAppArgs
case useSyncPluginSnapshotImage:
fmt.Fprintf(g.GinkgoWriter, "\nTHE UPCOMING TESTS WILL LEVERAGE AN IMAGE THAT EXTENDS THE LATEST OPENSHIFT JENKINS IMAGE AND OVERRIDES THE OPENSHIFT SYNC PLUGIN WITH A NEW VERSION BUILT FROM PROPOSED CHANGES TO THAT PLUGIN.\n")
licensePrefix = syncLicenseText
pluginName = syncPluginName
useSnapshotImage = true
newAppArgs = syncPluginNewAppArgs
default:
fmt.Fprintf(g.GinkgoWriter, "\nNO PR TEST ENV VARS SET SO TESTING CURRENT PLUGIN VERSIONS IN LATEST OPENSHIFT JENKINS IMAGE ON DOCKER HUB.\n")
}
g.By(fmt.Sprintf("calling oc new-app useSnapshotImage %v with license text %s and newAppArgs %#v", useSnapshotImage, licensePrefix, newAppArgs))
err = oc.Run("new-app").Args(newAppArgs...).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
if jenkinsTemplatePath == jenkinsPersistentTemplatePath {
g.By("PV/PVC dump after setup")
exutil.DumpPersistentVolumeInfo(oc)
}
g.By("waiting for jenkins deployment")
err = exutil.WaitForDeploymentConfig(oc.KubeClient(), oc.AppsClient().AppsV1(), oc.Namespace(), "jenkins", 1, false, oc)
if err != nil {
exutil.DumpApplicationPodLogs("jenkins", oc)
}
o.Expect(err).NotTo(o.HaveOccurred())
j = jenkins.NewRef(oc)
g.By("wait for jenkins to come up")
_, err = j.WaitForContent("", 200, 10*time.Minute, "")
if err != nil {
exutil.DumpApplicationPodLogs("jenkins", oc)
}
o.Expect(err).NotTo(o.HaveOccurred())
if useSnapshotImage {
g.By("verifying the test image is being used")
// for the test image, confirm that a snapshot version of the plugin is running in the jenkins image we'll test against
_, err = j.WaitForContent(licensePrefix+` ([0-9\.]+)-SNAPSHOT`, 200, 10*time.Minute, "/pluginManager/plugin/"+pluginName+"/thirdPartyLicenses")
o.Expect(err).NotTo(o.HaveOccurred())
}
// Start capturing logs from this deployment config.
// This command will terminate if the Jenkins instance crashes. This
// ensures that even if the Jenkins DC restarts, we should capture
// logs from the crash.
_, _, _, err = oc.Run("logs").Args("-f", "dc/jenkins").Background()
o.Expect(err).NotTo(o.HaveOccurred())
if os.Getenv(jenkins.EnableJenkinsMemoryStats) != "" {
ticker = jenkins.StartJenkinsMemoryTracking(oc, oc.Namespace())
}
}
debugAnyJenkinsFailure = func(br *exutil.BuildResult, name string, oc *exutil.CLI, dumpMaster bool) {
if !br.BuildSuccess {
br.LogDumper = jenkins.DumpLogs
fmt.Fprintf(g.GinkgoWriter, "\n\n START debugAnyJenkinsFailure\n\n")
j := jenkins.NewRef(oc)
jobLog, err := j.GetJobConsoleLogsAndMatchViaBuildResult(br, "")
if err == nil {
fmt.Fprintf(g.GinkgoWriter, "\n %s job log:\n%s", name, jobLog)
} else {
fmt.Fprintf(g.GinkgoWriter, "\n error getting %s job log: %#v", name, err)
}
if dumpMaster {
exutil.DumpApplicationPodLogs("jenkins", oc)
}
fmt.Fprintf(g.GinkgoWriter, "\n\n END debugAnyJenkinsFailure\n\n")
}
}
)
g.Context("jenkins-client-plugin tests", func() {
g.It("using the ephemeral template", func() {
defer cleanup(jenkinsEphemeralTemplatePath)
setupJenkins(jenkinsEphemeralTemplatePath)
g.By("Pipeline using jenkins-client-plugin")
g.By("should build and complete successfully", func() {
// instantiate the bc
g.By("create the jenkins pipeline strategy build config that leverages openshift client plugin")
err := oc.Run("create").Args("-f", clientPluginPipelinePath).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
// start the build - we run it twice because our sample pipeline exercises different paths of the client
// plugin based on whether certain resources already exist or not
for i := 0; i < 2; i++ {
g.By(fmt.Sprintf("starting the pipeline build and waiting for it to complete, pass: %d", i))
br, err := exutil.StartBuildAndWait(oc, "sample-pipeline-openshift-client-plugin")
debugAnyJenkinsFailure(br, oc.Namespace()+"-sample-pipeline-openshift-client-plugin", oc, true)
if err != nil || !br.BuildSuccess {
exutil.DumpBuilds(oc)
exutil.DumpBuildLogs("ruby", oc)
exutil.DumpDeploymentLogs("mongodb", 1, oc)
exutil.DumpDeploymentLogs("jenkins-second-deployment", 1, oc)
exutil.DumpDeploymentLogs("jenkins-second-deployment", 2, oc)
}
br.AssertSuccess()
g.By("get build console logs and see if succeeded")
_, err = j.GetJobConsoleLogsAndMatchViaBuildResult(br, "Finished: SUCCESS")
o.Expect(err).NotTo(o.HaveOccurred())
}
g.By("clean up openshift resources for next potential run")
err = oc.Run("delete").Args("bc", "sample-pipeline-openshift-client-plugin").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
err = oc.Run("delete").Args("dc", "jenkins-second-deployment").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
err = oc.Run("delete").Args("bc", "ruby").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
err = oc.Run("delete").Args("is", "ruby").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
err = oc.Run("delete").Args("is", "ruby-22-centos7").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
// doing this as admin to avoid errors like this:
// Dec 14 13:13:02.275: INFO: Error running &{/usr/bin/oc [oc delete --config=/tmp/configfile590595709 --namespace=e2e-test-jenkins-pipeline-2z82q all -l template=mongodb-ephemeral-template] [] replicationcontroller "mongodb-1" deleted
// service "mongodb" deleted
// deploymentconfig.apps.openshift.io "mongodb" deleted
// Error from server (Forbidden): clusterserviceversions.operators.coreos.com is forbidden: User "e2e-test-jenkins-pipeline-2z82q-user" cannot list clusterserviceversions.operators.coreos.com in the namespace "e2e-test-jenkins-pipeline-2z82q": no RBAC policy matched
// Error from server (Forbidden): catalogsources.operators.coreos.com is forbidden: User "e2e-test-jenkins-pipeline-2z82q-user" cannot list catalogsources.operators.coreos.com in the namespace "e2e-test-jenkins-pipeline-2z82q": no RBAC policy matched
// Error from server (Forbidden): installplans.operators.coreos.com is forbidden: User "e2e-test-jenkins-pipeline-2z82q-user" cannot list installplans.operators.coreos.com in the namespace "e2e-test-jenkins-pipeline-2z82q": no RBAC policy matched
// Error from server (Forbidden): subscriptions.operators.coreos.com is forbidden: User "e2e-test-jenkins-pipeline-2z82q-user" cannot list subscriptions.operators.coreos.com in the namespace "e2e-test-jenkins-pipeline-2z82q": no RBAC policy matched
err = oc.AsAdmin().Run("delete").Args("all", "-l", "template=mongodb-ephemeral-template").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
err = oc.Run("delete").Args("template", "mongodb-ephemeral").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
err = oc.Run("delete").Args("secret", "mongodb").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
})
g.By("should handle multi-namespace templates", func() {
g.By("create additional projects")
namespace := oc.Namespace()
namespace2 := oc.Namespace() + "-2"
namespace3 := oc.Namespace() + "-3"
err := oc.Run("new-project").Args(namespace2).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
err = oc.Run("new-project").Args(namespace3).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
// no calls to delete these two projects here; leads to timing
// issues with the framework deleting all namespaces
g.By("set up policy for jenkins jobs in " + namespace2)
err = oc.Run("policy").Args("add-role-to-user", "edit", "system:serviceaccount:"+namespace+":jenkins", "-n", namespace2).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
g.By("set up policy for jenkins jobs in " + namespace3)
err = oc.Run("policy").Args("add-role-to-user", "edit", "system:serviceaccount:"+namespace+":jenkins", "-n", namespace3).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
// instantiate the bc
g.By("instantiate the jenkins pipeline strategy build config that leverages openshift client plugin with multiple namespaces")
err = oc.Run("new-app").Args("-f", multiNamespaceClientPluginPipelinePath, "-p", "NAMESPACE="+namespace, "-p", "NAMESPACE2="+namespace2, "-p", "NAMESPACE3="+namespace3).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
// run the build
g.By("starting the pipeline build and waiting for it to complete")
br, err := exutil.StartBuildAndWait(oc, "multi-namespace-pipeline")
debugAnyJenkinsFailure(br, oc.Namespace()+"-multi-namespace-pipeline", oc, true)
if err != nil || !br.BuildSuccess {
exutil.DumpBuilds(oc)
}
br.AssertSuccess()
g.By("get build console logs and see if succeeded")
_, err = j.GetJobConsoleLogsAndMatchViaBuildResult(br, "Finished: SUCCESS")
o.Expect(err).NotTo(o.HaveOccurred())
g.By("confirm there are objects in second and third namespaces")
defer oc.SetNamespace(namespace)
oc.SetNamespace(namespace2)
output, err := oc.AsAdmin().Run("get").Args("all").Output()
o.Expect(err).NotTo(o.HaveOccurred())
o.Expect(output).To(o.ContainSubstring("deploymentconfig.apps.openshift.io/mongodb"))
oc.SetNamespace(namespace3)
output, err = oc.AsAdmin().Run("get").Args("all").Output()
o.Expect(err).NotTo(o.HaveOccurred())
o.Expect(output).To(o.ContainSubstring("service/mongodb"))
g.By("clean up openshift resources for next potential run")
oc.SetNamespace(namespace)
err = oc.Run("delete").Args("bc", "multi-namespace-pipeline").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
err = oc.AsAdmin().Run("delete").Args("all", "-l", "template=mongodb-ephemeral-template").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
err = oc.Run("delete").Args("template", "mongodb-ephemeral").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
})
})
})
g.Context("Sync plugin tests", func() {
g.It("using the ephemeral template", func() {
defer cleanup(jenkinsEphemeralTemplatePath)
setupJenkins(jenkinsEphemeralTemplatePath)
g.By("Deleted pipeline strategy buildconfigs")
g.By("should not be recreated by the sync plugin", func() {
// create the bc
g.By(fmt.Sprintf("calling oc new-app -f %q", origPipelinePath))
err := oc.Run("new-app").Args("-f", origPipelinePath).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
g.By("verify job is in jenkins")
_, err = j.WaitForContent("", 200, 30*time.Second, "job/%s/job/%s-sample-pipeline/", oc.Namespace(), oc.Namespace())
if err != nil {
exutil.DumpApplicationPodLogs("jenkins", oc)
}
o.Expect(err).NotTo(o.HaveOccurred())
g.By(fmt.Sprintf("delete pipeline strategy bc %q", origPipelinePath))
err = oc.Run("delete").Args("bc", "sample-pipeline").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
g.By("verify job is not in jenkins")
_, err = j.WaitForContent("", 404, 30*time.Second, "job/%s/job/%s-sample-pipeline/", oc.Namespace(), oc.Namespace())
if err != nil {
exutil.DumpApplicationPodLogs("jenkins", oc)
}
o.Expect(err).NotTo(o.HaveOccurred())
g.By("verify bc is still deleted")
err = oc.Run("get").Args("bc", "sample-pipeline").Execute()
o.Expect(err).To(o.HaveOccurred())
g.By("clean up openshift resources for next potential run")
// doing this as admin to avoid errors like this:
// Dec 14 13:13:02.275: INFO: Error running &{/usr/bin/oc [oc delete --config=/tmp/configfile590595709 --namespace=e2e-test-jenkins-pipeline-2z82q all -l template=mongodb-ephemeral-template] [] replicationcontroller "mongodb-1" deleted
// service "mongodb" deleted
// deploymentconfig.apps.openshift.io "mongodb" deleted
// Error from server (Forbidden): clusterserviceversions.operators.coreos.com is forbidden: User "e2e-test-jenkins-pipeline-2z82q-user" cannot list clusterserviceversions.operators.coreos.com in the namespace "e2e-test-jenkins-pipeline-2z82q": no RBAC policy matched
// Error from server (Forbidden): catalogsources.operators.coreos.com is forbidden: User "e2e-test-jenkins-pipeline-2z82q-user" cannot list catalogsources.operators.coreos.com in the namespace "e2e-test-jenkins-pipeline-2z82q": no RBAC policy matched
// Error from server (Forbidden): installplans.operators.coreos.com is forbidden: User "e2e-test-jenkins-pipeline-2z82q-user" cannot list installplans.operators.coreos.com in the namespace "e2e-test-jenkins-pipeline-2z82q": no RBAC policy matched
// Error from server (Forbidden): subscriptions.operators.coreos.com is forbidden: User "e2e-test-jenkins-pipeline-2z82q-user" cannot list subscriptions.operators.coreos.com in the namespace "e2e-test-jenkins-pipeline-2z82q": no RBAC policy matched
err = oc.AsAdmin().Run("delete").Args("all", "-l", "app=jenkins-pipeline-example").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
})
g.By("Sync secret to credential")
g.By("should map openshift secret to a jenkins credential as the secret is manipulated", func() {
g.By("create secret for jenkins credential")
err := oc.Run("create").Args("-f", secretPath).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
g.By("verify credential created since label should be there")
// NOTE, for the credential URL in Jenkins
// it returns rc 200 with no output if credential exists and a 404 if it does not exists
_, err = j.WaitForContent("", 200, 10*time.Second, "credentials/store/system/domain/_/credential/%s-%s/", oc.Namespace(), secretName)
if err != nil {
exutil.DumpApplicationPodLogs("jenkins", oc)
}
o.Expect(err).NotTo(o.HaveOccurred())
g.By("verify credential deleted when label removed")
err = oc.Run("label").Args("secret", secretName, secretCredentialSyncLabel+"-").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
_, err = j.WaitForContent("", 404, 10*time.Second, "credentials/store/system/domain/_/credential/%s-%s/", oc.Namespace(), secretName)
if err != nil {
exutil.DumpApplicationPodLogs("jenkins", oc)
}
o.Expect(err).NotTo(o.HaveOccurred())
g.By("verify credential added when label added")
err = oc.Run("label").Args("secret", secretName, secretCredentialSyncLabel+"=true").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
_, err = j.WaitForContent("", 200, 10*time.Second, "credentials/store/system/domain/_/credential/%s-%s/", oc.Namespace(), secretName)
if err != nil {
exutil.DumpApplicationPodLogs("jenkins", oc)
}
o.Expect(err).NotTo(o.HaveOccurred())
g.By("verify credential deleted when secret deleted")
err = oc.Run("delete").Args("secret", secretName).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
_, err = j.WaitForContent("", 404, 10*time.Second, "credentials/store/system/domain/_/credential/%s-%s/", oc.Namespace(), secretName)
if err != nil {
exutil.DumpApplicationPodLogs("jenkins", oc)
}
o.Expect(err).NotTo(o.HaveOccurred())
// no need to clean up, last operation above deleted the secret
})
//TODO - for these config map slave tests, as well and the imagestream/imagestreamtag
// tests ... rather than actually running the pipelines, we could just inspect the config in jenkins
// to make sure the k8s pod templates are there.
// In general, while we want at least one verification somewhere in pipeline.go that the agent
// images work, we should minimize the actually running of pipelines using them to only one
// for each maven/nodejs
g.By("Pipeline using config map slave")
g.By("should build and complete successfully", func() {
g.By("create the pod template with config map")
err := oc.Run("create").Args("-f", configMapPodTemplatePath).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
g.By(fmt.Sprintf("calling oc new-app -f %q", podTemplateSlavePipelinePath))
err = oc.Run("new-app").Args("-f", podTemplateSlavePipelinePath).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
g.By("starting the pipeline build and waiting for it to complete")
// this just does sh "mvn --version"
br, err := exutil.StartBuildAndWait(oc, "openshift-jee-sample")
if err != nil || !br.BuildSuccess {
exutil.DumpBuilds(oc)
}
debugAnyJenkinsFailure(br, oc.Namespace()+"-openshift-jee-sample", oc, true)
br.AssertSuccess()
g.By("getting job log, make sure has success message")
out, err := j.GetJobConsoleLogsAndMatchViaBuildResult(br, "Finished: SUCCESS")
o.Expect(err).NotTo(o.HaveOccurred())
g.By("making sure job log ran with our config map slave pod template")
o.Expect(out).To(o.ContainSubstring("Running on jenkins-slave"))
g.By("clean up openshift resources for next potential run")
err = oc.Run("delete").Args("configmap", "jenkins-slave").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
err = oc.Run("delete").Args("bc", "openshift-jee-sample").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
})
g.By("Pipeline using imagestream slave")
g.By("should build and complete successfully", func() {
g.By("create the pod template with imagestream")
err := oc.Run("create").Args("-f", imagestreamPodTemplatePath).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
g.By(fmt.Sprintf("calling oc new-app -f %q", podTemplateSlavePipelinePath))
err = oc.Run("new-app").Args("-f", podTemplateSlavePipelinePath).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
g.By("starting the pipeline build and waiting for it to complete")
// this just does sh "mvn --version"
br, err := exutil.StartBuildAndWait(oc, "openshift-jee-sample")
if err != nil || !br.BuildSuccess {
exutil.DumpBuilds(oc)
}
debugAnyJenkinsFailure(br, oc.Namespace()+"-openshift-jee-sample", oc, true)
br.AssertSuccess()
g.By("getting job log, making sure job log has success message")
out, err := j.GetJobConsoleLogsAndMatchViaBuildResult(br, "Finished: SUCCESS")
o.Expect(err).NotTo(o.HaveOccurred())
g.By("making sure job log ran with our config map slave pod template")
o.Expect(out).To(o.ContainSubstring("Running on jenkins-slave"))
g.By("clean up openshift resources for next potential run")
err = oc.Run("delete").Args("is", "jenkins-slave").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
err = oc.Run("delete").Args("bc", "openshift-jee-sample").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
})
g.By("Pipeline using imagestreamtag slave")
g.By("should build and complete successfully", func() {
g.By("create the pod template with imagestream")
err := oc.Run("create").Args("-f", imagestreamtagPodTemplatePath).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
g.By(fmt.Sprintf("calling oc new-app -f %q", podTemplateSlavePipelinePath))
err = oc.Run("new-app").Args("-f", podTemplateSlavePipelinePath).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
g.By("starting the pipeline build and waiting for it to complete")
// this just does sh "mvn --version"
br, err := exutil.StartBuildAndWait(oc, "openshift-jee-sample")
if err != nil || !br.BuildSuccess {
exutil.DumpBuilds(oc)
}
debugAnyJenkinsFailure(br, oc.Namespace()+"-openshift-jee-sample", oc, true)
br.AssertSuccess()
g.By("getting job log, making sure job log has success message")
out, err := j.GetJobConsoleLogsAndMatchViaBuildResult(br, "Finished: SUCCESS")
o.Expect(err).NotTo(o.HaveOccurred())
g.By("making sure job log ran with our config map slave pod template")
o.Expect(out).To(o.ContainSubstring("Running on slave-jenkins"))
g.By("clean up openshift resources for next potential run")
err = oc.Run("delete").Args("is", "slave-jenkins").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
err = oc.Run("delete").Args("bc", "openshift-jee-sample").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
})
g.By("Pipeline with env vars")
g.By("should build and complete successfully", func() {
// instantiate the bc
g.By(fmt.Sprintf("calling oc new-app -f %q", envVarsPipelinePath))
err := oc.Run("new-app").Args("-f", envVarsPipelinePath).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
// start the build
g.By("starting the pipeline build, including env var, and waiting for it to complete")
br, err := exutil.StartBuildAndWait(oc, "-e", "FOO2=BAR2", "sample-pipeline-withenvs")
if err != nil || !br.BuildSuccess {
exutil.DumpBuilds(oc)
}
debugAnyJenkinsFailure(br, oc.Namespace()+"-sample-pipeline-withenvs", oc, true)
br.AssertSuccess()
g.By("confirm all the log annotations are there")
_, err = jenkins.ProcessLogURLAnnotations(oc, br)
o.Expect(err).NotTo(o.HaveOccurred())
g.By("get build console logs and see if succeeded")
out, err := j.GetJobConsoleLogsAndMatchViaBuildResult(br, "Finished: SUCCESS")
if err != nil {
exutil.DumpApplicationPodLogs("jenkins", oc)
exutil.DumpBuilds(oc)
}
o.Expect(err).NotTo(o.HaveOccurred())
g.By("and see if env is set")
if !strings.Contains(out, "FOO2 is BAR2") {
exutil.DumpApplicationPodLogs("jenkins", oc)
exutil.DumpBuilds(oc)
o.Expect(out).To(o.ContainSubstring("FOO2 is BAR2"))
}
// start the nextbuild
g.By("starting the pipeline build and waiting for it to complete")
br, err = exutil.StartBuildAndWait(oc, "sample-pipeline-withenvs")
if err != nil || !br.BuildSuccess {
exutil.DumpApplicationPodLogs("jenkins", oc)
exutil.DumpBuilds(oc)
}
debugAnyJenkinsFailure(br, oc.Namespace()+"-sample-pipeline-withenvs", oc, true)
br.AssertSuccess()
g.By("get build console logs and see if succeeded")
out, err = j.GetJobConsoleLogsAndMatchViaBuildResult(br, "Finished: SUCCESS")
if err != nil {
exutil.DumpApplicationPodLogs("jenkins", oc)
exutil.DumpBuilds(oc)
}
o.Expect(err).NotTo(o.HaveOccurred())
g.By("and see if env FOO1 is set")
if !strings.Contains(out, "FOO1 is BAR1") {
exutil.DumpApplicationPodLogs("jenkins", oc)
exutil.DumpBuilds(oc)
o.Expect(out).To(o.ContainSubstring("FOO1 is BAR1"))
}
g.By("and see if env FOO2 is still not set")
if !strings.Contains(out, "FOO2 is null") {
exutil.DumpApplicationPodLogs("jenkins", oc)
exutil.DumpBuilds(oc)
o.Expect(out).To(o.ContainSubstring("FOO2 is null"))
}
g.By("clean up openshift resources for next potential run")
err = oc.Run("delete").Args("bc", "sample-pipeline-withenvs").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
})
g.By("delete jenkins job runs when the associated build is deleted")
g.By("should prune pipeline builds based on the buildConfig settings", func() {
g.By("creating successful test pipeline")
err := oc.Run("create").Args("-f", successfulPipeline).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
g.By("starting four test builds")
// builds only do sh 'exit 0'
for i := 0; i < 4; i++ {
br, _ := exutil.StartBuildAndWait(oc, "successful-pipeline")
br.AssertSuccess()
}
buildConfig, err := oc.BuildClient().BuildV1().BuildConfigs(oc.Namespace()).Get("successful-pipeline", metav1.GetOptions{})
if err != nil {
fmt.Fprintf(g.GinkgoWriter, "%v", err)
}
var builds *buildv1.BuildList
g.By("waiting up to one minute for pruning to complete")
err = wait.PollImmediate(pollingInterval, timeout, func() (bool, error) {
builds, err = oc.BuildClient().BuildV1().Builds(oc.Namespace()).List(metav1.ListOptions{LabelSelector: buildutil.BuildConfigSelector("successful-pipeline").String()})
if err != nil {
fmt.Fprintf(g.GinkgoWriter, "%v", err)
return false, err
}
if int32(len(builds.Items)) == *buildConfig.Spec.SuccessfulBuildsHistoryLimit {
fmt.Fprintf(g.GinkgoWriter, "%v builds exist, retrying...", len(builds.Items))
return true, nil
}
return false, nil
})
if err != nil {
fmt.Fprintf(g.GinkgoWriter, "%v", err)
}
passed := false
if int32(len(builds.Items)) == 2 || int32(len(builds.Items)) == 3 {
passed = true
}
o.Expect(passed).To(o.BeTrue(), "there should be 2-3 completed builds left after pruning, but instead there were %v", len(builds.Items))
g.By("creating failed test pipeline")
err = oc.Run("create").Args("-f", failedPipeline).Execute()
o.Expect(err).NotTo(o.HaveOccurred())
g.By("starting four test builds")
for i := 0; i < 4; i++ {
br, _ := exutil.StartBuildAndWait(oc, "failed-pipeline")
br.AssertFailure()
}
buildConfig, err = oc.BuildClient().BuildV1().BuildConfigs(oc.Namespace()).Get("failed-pipeline", metav1.GetOptions{})
if err != nil {
fmt.Fprintf(g.GinkgoWriter, "%v", err)
}
g.By("waiting up to one minute for pruning to complete")
err = wait.PollImmediate(pollingInterval, timeout, func() (bool, error) {
builds, err = oc.BuildClient().BuildV1().Builds(oc.Namespace()).List(metav1.ListOptions{LabelSelector: buildutil.BuildConfigSelector("successful-pipeline").String()})
if err != nil {
fmt.Fprintf(g.GinkgoWriter, "%v", err)
return false, err
}
if int32(len(builds.Items)) == *buildConfig.Spec.FailedBuildsHistoryLimit {
fmt.Fprintf(g.GinkgoWriter, "%v builds exist, retrying...", len(builds.Items))
return true, nil
}
return false, nil
})
if err != nil {
fmt.Fprintf(g.GinkgoWriter, "%v", err)
}
passed = false
if int32(len(builds.Items)) == 2 || int32(len(builds.Items)) == 3 {
passed = true
}
o.Expect(passed).To(o.BeTrue(), "there should be 2-3 completed builds left after pruning, but instead there were %v", len(builds.Items))
g.By("clean up openshift resources for next potential run")
err = oc.Run("delete").Args("bc", "successful-pipeline").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
err = oc.Run("delete").Args("bc", "failed-pipeline").Execute()
o.Expect(err).NotTo(o.HaveOccurred())
})
})
})
})