Skip to content
Test

Fix Database Role Grants #387

Sign in to view logs

Fix Database Role Grants

Fix Database Role Grants #387

Workflow file for this run

.github/workflows/test.yml at 0eb4509
name: Test
permissions:
contents: read
on:
push:
branches:
- main
- release
- release/*
pull_request:
branches:
- main
- release
- release/*
paths:
- 'Dockerfile'
- '.github/workflows/**'
- 'src/**'
- 'dfence'
- 'pom.xml'
jobs:
test:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Set up JDK
uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
with:
java-version: '17'
distribution: 'temurin'
cache: maven
- name: Maven verify (code quality checks)
run: mvn -B verify -DskipTests --file pom.xml
- name: Build with Maven (regular JAR for unit tests)
run: mvn -B package --file pom.xml
- name: Validate Javadoc Build
run: mvn javadoc:javadoc
build-docker-jar:
runs-on: ubuntu-latest
outputs:
jar-path: ${{ steps.build.outputs.jar-path }}
steps:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Set up JDK
uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
with:
java-version: '17'
distribution: 'temurin'
cache: maven
- name: Maven verify (code quality checks)
run: mvn -B verify -DskipTests --file pom.xml
- name: Build JAR for Docker (assembly profile)
id: build
run: |
mvn -B package -P assembly --file pom.xml
echo "jar-path=target/zoom-data-fence-jar-with-dependencies.jar" >> $GITHUB_OUTPUT
- name: Upload JAR artifact
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
with:
name: zoom-data-fence-jar
path: target/zoom-data-fence-jar-with-dependencies.jar
retention-days: 1
docker-test:
needs: build-docker-jar
runs-on: ubuntu-latest
strategy:
matrix:
variant: [standard, aws-cli]
steps:
- name: Checkout code
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Download JAR artifact
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
with:
name: zoom-data-fence-jar
path: target/
- name: Verify JAR exists
run: |
echo "Checking if JAR file exists..."
ls -la target/
echo "JAR file should be: target/zoom-data-fence-jar-with-dependencies.jar"
test -f target/zoom-data-fence-jar-with-dependencies.jar
- name: Build Docker image (no push)
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
with:
context: .
file: ./Dockerfile
push: false
tags: test-image:${{ matrix.variant }}
build-args: |
JAR_PATH=target/zoom-data-fence-jar-with-dependencies.jar
INSTALL_AWS_CLI=${{ matrix.variant == 'aws-cli' }}
- name: Validate basic functionality
run: |
echo "Testing basic dfence functionality..."
docker run --rm test-image:${{ matrix.variant }} --help
- name: Validate dfence command execution
run: |
echo "Testing dfence command execution..."
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "dfence --help"
- name: Validate AWS CLI (aws-cli variant only)
if: matrix.variant == 'aws-cli'
run: |
echo "Testing AWS CLI installation..."
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "aws --version"
- name: Validate tar command (aws-cli variant only)
if: matrix.variant == 'aws-cli'
run: |
echo "Testing tar command availability..."
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "tar --help > /dev/null && echo 'tar is working'"
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "command -v tar"
- name: Validate tar command not available (standard variant only)
if: matrix.variant == 'standard'
run: |
echo "Testing tar command is NOT available in standard variant..."
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "! command -v tar" || (echo "tar should not be available in standard variant" && exit 1)
- name: Validate file permissions
run: |
echo "Testing file permissions..."
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "ls -la /app/"
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "ls -la /usr/bin/dfence"
- name: Validate user context
run: |
echo "Testing user context..."
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "whoami"
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "id"
- name: Validate home directory and working directory
run: |
echo "Testing home directory and working directory..."
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "echo 'HOME: '\$HOME"
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "echo 'PWD: '\$PWD"
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "test \$HOME = '/home/app' && echo 'Home directory is correct: /home/app'"
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "test \$PWD = '/app' && echo 'Working directory is correct: /app'"
- name: Validate JAR file integrity
run: |
echo "Testing JAR file integrity..."
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "java -jar /app/app.jar --help"
- name: Validate environment variables
run: |
echo "Testing environment variables..."
docker run --rm --entrypoint bash test-image:${{ matrix.variant }} -c "env | grep DFENCE"