cilium

1
name: Conformance Kind Envoy DaemonSet
2

3
# Any change in triggers needs to be reflected in the concurrency group.
4
on:
5
  pull_request:
6
    paths-ignore:
7
      - 'Documentation/**'
8
      - 'test/**'
9
  push:
10
    branches:
11
      - main
12
      - ft/main/**
13
    paths-ignore:
14
      - 'Documentation/**'
15
      - 'test/**'
16

17
permissions: read-all
18

19
concurrency:
20
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.event.after }}
21
  cancel-in-progress: true
22

23
env:
24
  # renovate: datasource=github-releases depName=kubernetes-sigs/kind
25
  kind_version: v0.22.0
26
  kind_config: .github/kind-config.yaml
27
  cilium_cli_ci_version:
28
  CILIUM_CLI_MODE: helm
29

30
jobs:
31
  installation-and-connectivity:
32
    name: "Installation and Connectivity Test"
33
    runs-on: ubuntu-latest
34
    timeout-minutes: 45
35
    env:
36
      job_name: "Installation and Connectivity Test"
37
    steps:
38
      - name: Checkout main branch to access local actions
39
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
40
        with:
41
          ref: ${{ github.event.repository.default_branch }}
42
          persist-credentials: false
43
      - name: Set Environment Variables
44
        uses: ./.github/actions/set-env-variables
45

46
      - name: Get Cilium's default values
47
        id: default_vars
48
        uses: ./.github/actions/helm-default
49
        with:
50
          image-tag: ${{ github.event.pull_request.head.sha }}
51

52
      - name: Set up job variables
53
        id: vars
54
        run: |
55
          # Note: On Kind, we install Cilium with HostPort (portmap CNI chaining) enabled,
56
          # to ensure coverage of that feature in cilium connectivity test
57
          CILIUM_INSTALL_DEFAULTS="${{ steps.default_vars.outputs.cilium_install_defaults }} \
58
            --helm-set=hubble.relay.enabled=true
59
            --helm-set=cni.chainingMode=portmap \
60
            --helm-set-string=kubeProxyReplacement=true \
61
            --helm-set=loadBalancer.l7.backend=envoy \
62
            --helm-set=tls.secretsBackend=k8s \
63
            --helm-set=envoy.enabled=true \
64
            --wait=false"
65
          CONNECTIVITY_TEST_DEFAULTS="--flow-validation=disabled --hubble=false --collect-sysdump-on-failure"
66
          echo cilium_install_defaults=${CILIUM_INSTALL_DEFAULTS} >> $GITHUB_OUTPUT
67
          echo connectivity_test_defaults=${CONNECTIVITY_TEST_DEFAULTS} >> $GITHUB_OUTPUT
68
          echo sha=${{ steps.default_vars.outputs.sha }} >> $GITHUB_OUTPUT
69

70
      - name: Install Cilium CLI
71
        uses: cilium/cilium-cli@7306e3cdc6caee738157f08e3e1ba26179f104e5 # v0.15.23
72
        with:
73
          repository: ${{ env.CILIUM_CLI_RELEASE_REPO }}
74
          release-version: ${{ env.CILIUM_CLI_VERSION }}
75
          ci-version: ${{ env.cilium_cli_ci_version }}
76

77
      - name: Checkout code
78
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
79
        with:
80
          ref: ${{ steps.vars.outputs.sha }}
81
          persist-credentials: false
82

83
      - name: Create kind cluster
84
        uses: helm/kind-action@99576bfa6ddf9a8e612d83b513da5a75875caced # v1.9.0
85
        with:
86
          version: ${{ env.kind_version }}
87
          config: ${{ env.kind_config }}
88

89
      - name: Wait for images to be available
90
        timeout-minutes: 30
91
        shell: bash
92
        run: |
93
          for image in cilium-ci operator-generic-ci hubble-relay-ci ; do
94
            until docker manifest inspect quay.io/${{ env.QUAY_ORGANIZATION_DEV }}/$image:${{ steps.vars.outputs.sha }} &> /dev/null; do sleep 45s; done
95
          done
96

97
      - name: Install Cilium
98
        id: install-cilium
99
        run: |
100
          cilium install ${{ steps.vars.outputs.cilium_install_defaults }}
101

102
      - name: Wait for Cilium status to be ready
103
        run: |
104
          cilium status --wait
105
          kubectl -n kube-system get pods
106

107
      - name: Port forward Relay
108
        run: |
109
          cilium hubble port-forward&
110
          sleep 10s
111
          [[ $(pgrep -f "cilium.*hubble.*port-forward|kubectl.*port-forward.*hubble-relay" | wc -l) == 2 ]]
112

113
      - name: Make JUnit report directory
114
        run: |
115
          mkdir -p cilium-junits
116

117
      - name: Run connectivity test
118
        run: |
119
          cilium connectivity test ${{ steps.vars.outputs.connectivity_test_defaults }} \
120
          --junit-file "cilium-junits/${{ env.job_name }}.xml" --junit-property github_job_step="Run connectivity test"
121

122
      - name: Post-test information gathering
123
        if: ${{ !success() && steps.install-cilium.outcome != 'skipped' }}
124
        run: |
125
          kubectl get pods --all-namespaces -o wide
126
          cilium status
127
          cilium sysdump --output-filename cilium-sysdump-final
128
        shell: bash {0} # Disable default fail-fast behaviour so that all commands run independently
129

130
      - name: Upload artifacts
131
        if: ${{ !success() }}
132
        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
133
        with:
134
          name: cilium-sysdumps
135
          path: cilium-sysdump-*.zip
136
          retention-days: 5
137

138
      - name: Upload JUnits [junit]
139
        if: ${{ always() }}
140
        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
141
        with:
142
          name: cilium-junits
143
          path: cilium-junits/*.xml
144
          retention-days: 5
145

146
      - name: Publish Test Results As GitHub Summary
147
        if: ${{ always() }}
148
        uses: aanm/junit2md@332ebf0fddd34e91b03a832cfafaa826306558f9 # v0.0.3
149
        with:
150
          junit-directory: "cilium-junits"
151