omni-infra-provider-bare-metal/.kres.yaml at main · siderolabs/omni-infra-provider-bare-metal · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
---
kind: auto.CommandConfig
name: qemu-up
spec:
  disableImage: true
---
kind: custom.Step
name: ipxe
spec:
  docker:
    enabled: true
    stages:
      - name: ipxe-linux-amd64
        from: ghcr.io/siderolabs/ipxe:v1.14.0-alpha.0-3-ge4d0113
        platform: linux/amd64
      - name: ipxe-linux-arm64
        from: ghcr.io/siderolabs/ipxe:v1.14.0-alpha.0-3-ge4d0113
        platform: linux/arm64
---
kind: auto.CustomSteps
spec:
  steps:
    - name: ipxe
      toplevel: true
    - name: run-integration-test
      toplevel: true
---
kind: common.Image
name: image-provider
spec:
  imageName: omni-infra-provider-bare-metal
  pushLatest: false
  extraEnvironment:
    PLATFORM: linux/amd64,linux/arm64
  copyFrom:
    - stage: ghcr.io/siderolabs/musl:v1.14.0-alpha.0-3-ge4d0113 # required by zbin
      source: /
      destination: /
      name: musl
    - stage: ghcr.io/siderolabs/liblzma:v1.14.0-alpha.0-3-ge4d0113 # required by zbin
      source: /
      destination: /
      name: liblzma
    - stage: ghcr.io/siderolabs/ipxe:v1.14.0-alpha.0-3-ge4d0113
      source: /usr/libexec/zbin
      destination: /usr/bin/zbin
      name: ipxe
    - stage: ipxe-linux-amd64
      source: /usr/libexec/
      destination: /var/lib/ipxe/amd64
      name: ipxe-linux-amd64
    - stage: ipxe-linux-arm64
      source: /usr/libexec/
      destination: /var/lib/ipxe/arm64
      name: ipxe-linux-arm64
    -
      stage: ghcr.io/utkuozdemir/talos-metal-agent-boot-assets:v1.13.0-alpha.2-86-g919d8c365-agent-v0.1.4-1-gc2379a7-dirty # to be used with --use-local-boot-assets for local development
      # stage: 127.0.0.1:5005/siderolabs/talos-metal-agent-boot-assets:v0.0.1-local # for local development, to be replaced with the line above and rekres-ed
      source: /
      destination: /assets
      name: assets
---
kind: golang.Build
spec:
  outputs:
    linux-amd64:
      GOOS: linux
      GOARCH: amd64
    linux-arm64:
      GOOS: linux
      GOARCH: arm64
---
kind: golang.Generate
spec:
  versionPackagePath: internal/version
  baseSpecPath: /api
  vtProtobufEnabled: true
  specs:
    - source: api/specs/specs.proto
      subdirectory: specs
---
kind: service.CodeCov
spec:
  enabled: false
---
kind: common.GHWorkflow
spec:
  customRunnerGroup: large  # we need large runners for QEMU/KVM to work
---
kind: custom.Step
name: run-integration-test
spec:
  sudoInCI: true
  makefile:
    enabled: true
    depends:
      - provider
      - qemu-up
    script:
      - >-
        TEMP_REGISTRY=$(TEMP_REGISTRY)
        OMNI_IMAGE=$(OMNI_IMAGE)
        OMNI_INTEGRATION_TEST_IMAGE=$(OMNI_INTEGRATION_TEST_IMAGE)
        SKIP_CLEANUP=$(SKIP_CLEANUP)
        hack/test/integration.sh
    variables:
      - name: TEMP_REGISTRY
        defaultValue: 127.0.0.1:5005 # local development registry
      - name: OMNI_IMAGE
        defaultValue: ghcr.io/siderolabs/omni:latest
      - name: OMNI_INTEGRATION_TEST_IMAGE
        defaultValue: ghcr.io/siderolabs/omni-integration-test:latest
      - name: SKIP_CLEANUP
        defaultValue: "false"
  ghaction:
    enabled: true
    sops: true
    parallelJob:
      name: integration-test
      runnerGroup: large
      needsOverride: [default, lint, unit-tests]
    environment:
      TEMP_REGISTRY: registry.dev.siderolabs.io
    artifacts:
      enabled: true
      extraPaths:
        - "!_out/omni/"
      additional:
        - name: integration-test
          always: true
          continueOnError: true
          paths:
            - ${{ github.workspace }}/integration-test
    jobs:
      - name: e2e
        needsOverride: [ integration-test ]
        crons:
          - "30 1 * * *"
        runnerGroup: large # we need large runners for QEMU/KVM to work
        triggerLabels:
          - integration/e2e
---
kind: common.SOPS
spec:
  enabled: true
  config: |-
    creation_rules:
      - age: age1xrpa9ujxxcj2u2gzfrzv8mxak4rts94a6y60ypurv6rs5cpr4e4sg95f0k
        # order: Andrey, Noel, Artem, Utku, Dmitriy
        pgp: >-
          15D5721F5F5BAF121495363EFE042E3D4085A811,
          CC51116A94490FA6FB3C18EB2401FCAE863A06CA,
          4919F560F0D35F80CF382D76E084A2DF1143C14D,
          11177A43C6E3752E682AC690DBD13117B0A14E93,
          AA5213AF261C1977AF38B03A94B473337258BFD5