samples-server/.github/workflows/tls.yaml at 7a08606df1203d1fc34291f44afff53ce73ac6df · temporalio/samples-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
name: Test TLS examples

on:
  pull_request:
  push:
    branches:
      - main
    paths:
      - 'tls/**'
      - '.github/workflows/tls.yaml'

permissions:
  contents: read

jobs:
  tls-simple-test:
    name: Test tls-simple
    runs-on: ubuntu-latest
    timeout-minutes: 15
    env:
      TEMPORAL_TLS_CERTS_DIR: /etc/temporal/config/certs
      TEMPORAL_LOCAL_CERT_DIR: ./certs
    steps:
      - uses: actions/checkout@v6

      - name: Generate TLS certificates
        working-directory: tls/tls-simple
        run: bash generate-test-certs.sh

      - name: Start compose stack
        working-directory: tls/tls-simple
        run: docker compose up -d

      - name: Wait for namespace creation
        working-directory: tls/tls-simple
        run: |
          for i in $(seq 1 60); do
            if docker compose logs temporal-create-namespace 2>&1 | grep -q "Namespace 'default' created\|already exists"; then
              echo "Namespace ready"
              exit 0
            fi
            echo "Waiting for namespace creation... ($i/60)"
            sleep 5
          done
          echo "Namespace creation did not complete"
          exit 1

      - name: Validate Temporal is functional
        working-directory: tls/tls-simple
        run: |
          docker compose exec temporal-admin-tools temporal operator cluster health
          docker compose exec temporal-admin-tools temporal operator namespace describe -n default

      - name: Print all logs on failure
        if: failure()
        working-directory: tls/tls-simple
        run: |
          echo "=== Printing all container logs ==="
          docker compose ps -a
          docker compose logs

      - name: Cleanup
        if: always()
        working-directory: tls/tls-simple
        run: |
          docker compose down -v
          rm -rf certs

  tls-full-test:
    name: Test tls-full
    runs-on: ubuntu-latest
    timeout-minutes: 15
    env:
      TEMPORAL_TLS_CERTS_DIR: /certs
      TEMPORAL_LOCAL_CERT_DIR: ./certs
    steps:
      - uses: actions/checkout@v6

      - name: Generate TLS certificates
        working-directory: tls/tls-full
        run: bash generate-certs.sh

      - name: Start compose stack
        working-directory: tls/tls-full
        run: docker compose up -d

      - name: Wait for namespace creation
        working-directory: tls/tls-full
        run: |
          for i in $(seq 1 60); do
            if docker compose logs temporal-create-namespace 2>&1 | grep -q "Namespace 'default' created\|already exists"; then
              echo "Namespace ready"
              exit 0
            fi
            echo "Waiting for namespace creation... ($i/60)"
            sleep 5
          done
          echo "Namespace creation did not complete"
          exit 1

      - name: Validate Temporal is functional
        working-directory: tls/tls-full
        run: |
          docker compose exec temporal-cli-admin temporal operator cluster health
          docker compose exec temporal-cli-admin temporal operator namespace describe -n default

      - name: Print all logs on failure
        if: failure()
        working-directory: tls/tls-full
        run: |
          echo "=== Printing all container logs ==="
          docker compose ps -a
          docker compose logs

      - name: Cleanup
        if: always()
        working-directory: tls/tls-full
        run: |
          docker compose down -v
          rm -rf certs