Merge Release 3.4.2 back into main #6193

Workflow file for this run

	name: CI

	on:
	push:
	branches:
	- 'main'
	- 'release-*'
	paths-ignore:
	- "**.md"
	- "docs/**"
	- "hugo/**"
	pull_request:
	types:
	- opened
	- reopened
	- synchronize

	permissions:
	contents: read

	env:
	NFPM_VERSION: 'v2.35.3'
	GOPROXY: "https://${{ secrets.ARTIFACTORY_USER }}:${{ secrets.ARTIFACTORY_TOKEN }}@azr.artifactory.f5net.com/artifactory/api/go/f5-nginx-go-dev"

	jobs:
	proxy-sanity-check:
	name: Proxy Sanity Check
	runs-on: ubuntu-22.04
	if: ${{ !github.event.pull_request.head.repo.fork && !startsWith(github.head_ref, 'dependabot-') }}
	env:
	GOPROXY: "https://${{ secrets.ARTIFACTORY_USER }}:${{ secrets.ARTIFACTORY_TOKEN }}@azr.artifactory.f5net.com/artifactory/api/go/f5-nginx-go-dev"
	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	with:
	fetch-tags: 'true'
	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version-file: 'go.mod'
	cache: false
	- name: run goproxy-sanity-check
	run: \|
	make build

	lint:
	name: Lint
	runs-on: ubuntu-22.04
	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version-file: 'go.mod'
	cache: false
	- name: Lint Go
	uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8.0.0
	with:
	version: v2.4.0

	unit-test:
	name: Unit Tests
	runs-on: ubuntu-22.04
	permissions:
	contents: write
	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version-file: 'go.mod'
	cache: false
	- name: Run Unit Tests
	run: make unit-test
	- name: Check Coverage
	uses: vladopajic/go-test-coverage@dd4b1f21c4e48db0425e1187d2845404b1206919
	with:
	config: ./.testcoverage.yaml
	## when token is not specified (value '') this feature is turned off
	git-token: ${{ github.ref_name == 'main' && secrets.GITHUB_TOKEN \|\| '' }}
	## name of orphaned branch where badges are stored
	git-branch: badges

	race-condition-test:
	name: Unit tests with race condition detection
	runs-on: ubuntu-22.04
	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version-file: 'go.mod'
	cache: false
	- name: Run unit tests with race condition detection
	run: make race-condition-test

	build-unsigned-snapshot:
	name: Build Unsigned Snapshot
	runs-on: ubuntu-22.04
	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	with:
	fetch-tags: 'true'
	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version-file: 'go.mod'
	cache: false
	- name: Setup Build Environment
	run: go install github.com/goreleaser/nfpm/v2/cmd/nfpm@${{ env.NFPM_VERSION }}
	- name: Build Packages
	run: \|
	make clean local-deb-package local-rpm-package local-apk-package
	- name: Upload Artifacts
	uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
	with:
	name: nginx-agent-unsigned-snapshots
	path: build
	retention-days: 1

	integration-tests:
	name: Integration Tests
	needs: build-unsigned-snapshot
	runs-on: ubuntu-22.04
	strategy:
	matrix:
	container:
	- image: "ubuntu"
	version: "24.04"
	- image: "redhatenterprise"
	version: "9"
	- image: "alpine"
	version: "3.22"
	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version-file: 'go.mod'
	cache: false
	- name: Download Packages
	uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
	with:
	name: nginx-agent-unsigned-snapshots
	path: build

	- name: Create Results Directory
	run: mkdir -p ${{ github.workspace }}/test/dashboard/logs/${{ github.job }}/${{matrix.container.image}}-${{matrix.container.version}}

	- name: Start Promtail
	uses: ./.github/actions/start-promtail
	with:
	loki_url: ${{ secrets.LOKI_DASHBOARD_URL }}

	- name: Run Integration Tests
	run: \|
	go install github.com/goreleaser/nfpm/v2/cmd/nfpm@${{ env.NFPM_VERSION }}
	OS_RELEASE="${{ matrix.container.image }}" OS_VERSION="${{ matrix.container.version }}" \
	make integration-test \| tee ${{github.workspace}}/test/dashboard/logs/${{github.job}}/${{matrix.container.image}}-${{matrix.container.version}}/raw_logs.log
	exit "${PIPESTATUS[0]}"

	- name: Format Results
	if: always()
	run: bash ./scripts/dashboard/format_results.sh ${{job.status}} ${{github.job}}/${{matrix.container.image}}-${{matrix.container.version}} ${{github.workspace}}

	upgrade-tests:
	name: Upgrade Tests
	needs: build-unsigned-snapshot
	runs-on: ubuntu-22.04
	strategy:
	matrix:
	container:
	- image: "ubuntu"
	version: "24.04"
	- image: "redhatenterprise"
	version: "9"
	- image: "alpine"
	version: "3.22"
	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version-file: 'go.mod'
	cache: false
	- name: Download Packages
	uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
	with:
	name: nginx-agent-unsigned-snapshots
	path: build

	- name: Create Results Directory
	run: mkdir -p ${{ github.workspace }}/test/dashboard/logs/${{ github.job }}/${{matrix.container.image}}-${{matrix.container.version}}

	- name: Start Promtail
	uses: ./.github/actions/start-promtail
	with:
	loki_url: ${{ secrets.LOKI_DASHBOARD_URL }}

	- name: Run Upgrade Tests
	run: \|
	go install github.com/goreleaser/nfpm/v2/cmd/nfpm@${{ env.NFPM_VERSION }}
	OS_RELEASE="${{ matrix.container.image }}" OS_VERSION="${{ matrix.container.version }}" \
	make upgrade-test \| tee ${{github.workspace}}/test/dashboard/logs/${{github.job}}/${{matrix.container.image}}-${{matrix.container.version}}/raw_logs.log
	exit "${PIPESTATUS[0]}"

	- name: Format Results
	if: always()
	run: bash ./scripts/dashboard/format_results.sh ${{job.status}} ${{github.job}}/${{matrix.container.image}}-${{matrix.container.version}} ${{github.workspace}}

	official-oss-image-integration-tests:
	name: Integration Tests - Official OSS Images
	needs: build-unsigned-snapshot
	if: ${{ !github.event.pull_request.head.repo.fork && !startsWith(github.head_ref, 'dependabot-') }}
	runs-on: ubuntu-22.04
	strategy:
	matrix:
	container:
	- image: "bookworm"
	version: "stable"
	release: "debian"
	- image: "bookworm"
	version: "mainline"
	release: "debian"
	- image: "alpine"
	version: "stable"
	release: "alpine"
	- image: "alpine"
	version: "mainline"
	release: "alpine"
	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version-file: 'go.mod'
	cache: false
	- name: Download Packages
	uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
	with:
	name: nginx-agent-unsigned-snapshots
	path: build

	- name: Create Results Directory
	run: mkdir -p ${{ github.workspace }}/test/dashboard/logs/${{ github.job }}/${{matrix.container.image}}-${{matrix.container.version}}

	- name: Start Promtail
	uses: ./.github/actions/start-promtail
	with:
	loki_url: ${{ secrets.LOKI_DASHBOARD_URL }}

	- name: Run Integration Tests
	run: \|
	go install github.com/goreleaser/nfpm/v2/cmd/nfpm@${{ env.NFPM_VERSION }}
	CONTAINER_NGINX_IMAGE_REGISTRY="docker-registry.nginx.com" \
	TAG="${{ matrix.container.version }}-${{ matrix.container.image }}" \
	OS_RELEASE="${{ matrix.container.release }}" OS_VERSION="${{ matrix.container.version }}" \
	make official-image-integration-test \| tee ${{github.workspace}}/test/dashboard/logs/${{github.job}}/${{matrix.container.image}}-${{matrix.container.version}}/raw_logs.log
	exit "${PIPESTATUS[0]}"

	- name: Format Results
	if: always()
	run: bash ./scripts/dashboard/format_results.sh ${{job.status}} ${{github.job}}/${{matrix.container.image}}-${{matrix.container.version}} ${{github.workspace}}

	official-plus-image-integration-tests:
	name: Integration Tests - Official Plus Images
	needs: build-unsigned-snapshot
	if: ${{ !github.event.pull_request.head.repo.fork && !startsWith(github.head_ref, 'dependabot-') }}
	runs-on: ubuntu-22.04
	strategy:
	matrix:
	container:
	- image: "alpine"
	version: "3.22"
	plus: "r35"
	release: "alpine"
	path: "/nginx-plus/agent"
	- image: "alpine"
	version: "3.21"
	plus: "r34"
	release: "alpine"
	path: "/nginx-plus/agent"
	- image: "debian"
	version: "bookworm"
	plus: "r35"
	release: "debian"
	path: "/nginx-plus/agent"
	- image: "debian"
	version: "bookworm"
	plus: "r34"
	release: "debian"
	path: "/nginx-plus/agent"
	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version-file: 'go.mod'
	cache: false
	- name: Download Packages
	uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
	with:
	name: nginx-agent-unsigned-snapshots
	path: build
	- name: Login to Docker Registry
	uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
	with:
	registry: ${{ secrets.TEST_REGISTRY_URL }}
	username: ${{ secrets.REGISTRY_USERNAME }}
	password: ${{ secrets.REGISTRY_PASSWORD }}

	- name: Create Results Directory
	run: mkdir -p ${{ github.workspace }}/test/dashboard/logs/${{ github.job }}/${{matrix.container.image}}-${{matrix.container.version}}

	- name: Start Promtail
	uses: ./.github/actions/start-promtail
	with:
	loki_url: ${{ secrets.LOKI_DASHBOARD_URL }}

	- name: Run Integration Tests
	run: \|
	go install github.com/goreleaser/nfpm/v2/cmd/nfpm@${{ env.NFPM_VERSION }}
	CONTAINER_NGINX_IMAGE_REGISTRY="${{ secrets.TEST_REGISTRY_URL }}" \
	TAG="${{ matrix.container.plus }}-${{ matrix.container.image }}-${{ matrix.container.version }}" \
	OS_RELEASE="${{ matrix.container.release }}" OS_VERSION="${{ matrix.container.version }}" IMAGE_PATH="${{ matrix.container.path }}" \
	NGINX_LICENSE_JWT='${{ secrets.TEST_JWT }}' \
	make official-image-integration-test \| tee ${{github.workspace}}/test/dashboard/logs/${{github.job}}/${{matrix.container.image}}-${{matrix.container.version}}/raw_logs.log
	exit "${PIPESTATUS[0]}"

	- name: Format Results
	if: always()
	run: bash ./scripts/dashboard/format_results.sh ${{job.status}} ${{github.job}}/${{matrix.container.image}}-${{matrix.container.version}} ${{github.workspace}}

	oss-metrics-tests:
	name: Metrics Integration Tests - Official OSS Images
	needs: build-unsigned-snapshot
	if: ${{ !github.event.pull_request.head.repo.fork && !startsWith(github.head_ref, 'dependabot-') }}
	runs-on: ubuntu-22.04
	strategy:
	matrix:
	container:
	- image: "bookworm"
	version: "stable"
	release: "debian"
	- image: "bookworm"
	version: "mainline"
	release: "debian"
	- image: "alpine"
	version: "stable"
	release: "alpine"
	- image: "alpine"
	version: "mainline"
	release: "alpine"
	steps:
	- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version-file: 'go.mod'
	cache: false
	- name: Download Packages
	uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
	with:
	name: nginx-agent-unsigned-snapshots
	path: build

	- name: Create Results Directory
	run: mkdir -p ${{ github.workspace }}/test/dashboard/logs/${{ github.job }}/${{matrix.container.image}}-${{matrix.container.version}}

	- name: Start Promtail
	uses: ./.github/actions/start-promtail
	with:
	loki_url: ${{ secrets.LOKI_DASHBOARD_URL }}

	- name: Run Integration Tests
	run: \|
	go install github.com/goreleaser/nfpm/v2/cmd/nfpm@${{ env.NFPM_VERSION }}
	CONTAINER_NGINX_IMAGE_REGISTRY="docker-registry.nginx.com" \
	TAG="${{ matrix.container.version }}-${{ matrix.container.image }}" \
	OS_RELEASE="${{ matrix.container.release }}" OS_VERSION="${{ matrix.container.version }}" \
	make metrics-test \| tee ${{github.workspace}}/test/dashboard/logs/${{github.job}}/${{matrix.container.image}}-${{matrix.container.version}}/raw_logs.log
	exit "${PIPESTATUS[0]}"

	- name: Format Results
	if: always()
	run: bash ./scripts/dashboard/format_results.sh ${{job.status}} ${{github.job}}/${{matrix.container.image}}-${{matrix.container.version}} ${{github.workspace}}

	plus-metrics-tests:
	name: Metrics Integration Tests - Official Plus Images
	needs: build-unsigned-snapshot
	if: ${{ !github.event.pull_request.head.repo.fork && !startsWith(github.head_ref, 'dependabot-') }}
	runs-on: ubuntu-22.04
	strategy:
	matrix:
	container:
	- image: "alpine"
	version: "3.22"
	plus: "r35"
	release: "alpine"
	path: "/nginx-plus/agent"
	- image: "alpine"
	version: "3.21"
	plus: "r34"
	release: "alpine"
	path: "/nginx-plus/agent"
	- image: "debian"
	version: "bookworm"
	plus: "r35"
	release: "debian"
	path: "/nginx-plus/agent"
	- image: "debian"
	version: "bookworm"
	plus: "r34"
	release: "debian"
	path: "/nginx-plus/agent"
	steps:
	- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version-file: 'go.mod'
	cache: false
	- name: Download Packages
	uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
	with:
	name: nginx-agent-unsigned-snapshots
	path: build
	- name: Login to Docker Registry
	uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
	with:
	registry: ${{ secrets.TEST_REGISTRY_URL }}
	username: ${{ secrets.REGISTRY_USERNAME }}
	password: ${{ secrets.REGISTRY_PASSWORD }}

	- name: Create Results Directory
	run: mkdir -p ${{ github.workspace }}/test/dashboard/logs/${{ github.job }}/${{matrix.container.image}}-${{matrix.container.version}}

	- name: Start Promtail
	uses: ./.github/actions/start-promtail
	with:
	loki_url: ${{ secrets.LOKI_DASHBOARD_URL }}

	- name: Run Integration Tests
	run: \|
	go install github.com/goreleaser/nfpm/v2/cmd/nfpm@${{ env.NFPM_VERSION }}
	CONTAINER_NGINX_IMAGE_REGISTRY="${{ secrets.TEST_REGISTRY_URL }}" \
	TAG="${{ matrix.container.plus }}-${{ matrix.container.image }}-${{ matrix.container.version }}" \
	OS_RELEASE="${{ matrix.container.release }}" OS_VERSION="${{ matrix.container.version }}" IMAGE_PATH="${{ matrix.container.path }}" \
	NGINX_LICENSE_JWT="${{ secrets.TEST_JWT }}" \
	make metrics-test \| tee ${{github.workspace}}/test/dashboard/logs/${{github.job}}/${{matrix.container.image}}-${{matrix.container.version}}/raw_logs.log
	exit "${PIPESTATUS[0]}"

	- name: Format Results
	if: always()
	run: bash ./scripts/dashboard/format_results.sh ${{job.status}} ${{github.job}}/${{matrix.container.image}}-${{matrix.container.version}} ${{github.workspace}}

	performance-tests:
	name: Performance Tests
	runs-on: ubuntu-22.04
	permissions:
	contents: write
	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version-file: 'go.mod'
	cache: false
	- name: Run Performance Tests
	run: \|
	make performance-test
	- name: Store benchmark result
	uses: benchmark-action/github-action-benchmark@4bdcce38c94cec68da58d012ac24b7b1155efe8b # v1.20.7
	with:
	name: Compare Benchmark Results
	tool: 'go'
	output-file-path: ./build/test/benchmark.txt
	benchmark-data-dir-path: ""
	# Set auto-push to false since GitHub API token is not given
	auto-push: false
	alert-threshold: '150%'
	gh-pages-branch: "benchmark-results"
	fail-on-alert: true
	- name: Push benchmark result
	if: ${{ success() && github.ref_name == 'main'}}
	run: git push 'https://github-actions:${{ secrets.GITHUB_TOKEN }}@github.com/nginx/agent.git' benchmark-results:benchmark-results
	load-tests:
	name: Load Tests
	if: ${{ !github.event.pull_request.head.repo.fork && !startsWith(github.head_ref, 'dependabot-') }}
	permissions:
	contents: write
	runs-on: ubuntu-22.04
	needs: build-unsigned-snapshot

	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version-file: 'go.mod'
	cache: false

	- name: Download Packages
	uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
	with:
	name: nginx-agent-unsigned-snapshots
	path: build

	- name: Set up Docker Build
	uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1

	- name: Set env
	run: echo "GO_VERSION=$(cat go.mod \| grep toolchain \| sed 's/toolchain //; s/go//')" >> $GITHUB_ENV

	- name: Build Docker Image
	uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
	env:
	GO_VERSION: ${{ env.GO_VERSION }}
	with:
	file: test/docker/load/Dockerfile
	tags: nginx-agent-load-test:1.0.0
	context: '.'
	push: false
	load: true
	no-cache: true
	secrets: \|
	"nginx-crt=${{ secrets.NGINX_CRT }}"
	"nginx-key=${{ secrets.NGINX_KEY }}"
	build-args: \|
	OSARCH=amd64
	GO_VERSION=${{ env.GO_VERSION }}

	- name: Run Load Tests
	run: \|
	results=$(docker run --rm nginx-agent-load-test:1.0.0)
	echo "$results" > benchmarks.json
	echo "$results"

	- name: Upload Load Test Results
	uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
	with:
	name: load-test-results
	path: benchmarks.json
	if-no-files-found: error

	- name: Store benchmark result
	uses: benchmark-action/github-action-benchmark@4bdcce38c94cec68da58d012ac24b7b1155efe8b # v1.20.7
	with:
	name: Compare Benchmark Results
	tool: 'customSmallerIsBetter'
	output-file-path: benchmarks.json
	benchmark-data-dir-path: ""
	# Set auto-push to false since GitHub API token is not given
	auto-push: false
	alert-threshold: '150%'
	gh-pages-branch: "benchmark-results"
	fail-on-alert: true

	- name: Push load test result
	if: ${{ success() && github.ref_name == 'main' }}
	run: git push 'https://github-actions:${{ secrets.GITHUB_TOKEN }}@github.com/nginx/agent.git' benchmark-results:benchmark-results

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Merge Release 3.4.2 back into main #6193

Workflow file

Merge Release 3.4.2 back into main #6193

Uh oh!

Workflow file for this run