WIP

.github/workflows/pki-ca-test.yml

@@ -4,6 +4,7 @@ on: workflow_call
 
 env:
   NAMESPACE: ${{ vars.REGISTRY_NAMESPACE || 'dogtagpki' }}
+  DS_IMAGE: ${{ vars.DS_IMAGE || 'quay.io/389ds/dirsrv' }}
 
 jobs:
   test:
@@ -27,6 +28,16 @@ jobs:
       - name: Create network
         run: docker network create example
 
+      - name: Set up DS container
+        run: |
+          tests/bin/ds-create.sh \
+              --image=${{ env.DS_IMAGE }} \
+              --hostname=ds.example.com \
+              --password=Secret.123 \
+              --network=example \
+              --network-alias=ds.example.com \
+              ds
+
       - name: Set up server container
         run: |
           tests/bin/runner-init.sh \
@@ -68,7 +79,6 @@ jobs:
       - name: Install packages
         run: |
           # install packages on server
-          docker exec pki dnf install -y 389-ds-base
           docker cp /tmp/RPMS/. pki:/root/RPMS/
           docker exec pki bash -c "dnf localinstall -y /root/RPMS/*"
 
@@ -80,14 +90,12 @@ jobs:
           docker cp /tmp/RPMS/. client2:/root/RPMS/
           docker exec client2 bash -c "dnf localinstall -y /root/RPMS/*"
 
-      - name: Install DS
-        run: docker exec pki ${SHARED}/tests/bin/ds-create.sh
-
       - name: Install CA
         run: |
           docker exec pki pkispawn \
               -f /usr/share/pki/server/examples/installation/ca.cfg \
               -s CA \
+              -D pki_ds_url=ldap://ds.example.com:3389 \
               -v
 
           # set buffer size to 0 so that revocation takes effect immediately
@@ -520,13 +528,15 @@ jobs:
       - name: Remove CA
         run: docker exec pki pkidestroy -i pki-tomcat -s CA -v
 
-      - name: Remove DS
-        run: docker exec pki ${SHARED}/tests/bin/ds-remove.sh
-
       - name: Check DS server systemd journal
         if: always()
         run: |
-          docker exec pki journalctl -x --no-pager -u [email protected]
+          docker exec ds journalctl -x --no-pager -u [email protected]
+
+      - name: Check DS container logs
+        if: always()
+        run: |
+          docker logs ds
 
       - name: Check PKI server systemd journal
         if: always()
@@ -541,7 +551,7 @@ jobs:
       - name: Gather artifacts
         if: always()
         run: |
-          tests/bin/ds-artifacts-save.sh pki
+          tests/bin/ds-artifacts-save.sh ds
           tests/bin/pki-artifacts-save.sh pki
         continue-on-error: true
 

.github/workflows/pki-tps-test.yml

@@ -4,6 +4,7 @@ on: workflow_call
 
 env:
   NAMESPACE: ${{ vars.REGISTRY_NAMESPACE || 'dogtagpki' }}
+  DS_IMAGE: ${{ vars.DS_IMAGE || 'quay.io/389ds/dirsrv' }}
 
 jobs:
   test:
@@ -24,10 +25,25 @@ jobs:
       - name: Load JSS images
         run: docker load --input jss-images.tar
 
-      - name: Set up JSS container
+      - name: Create network
+        run: docker network create example
+
+      - name: Set up DS container
+        run: |
+          tests/bin/ds-create.sh \
+              --image=${{ env.DS_IMAGE }} \
+              --hostname=ds.example.com \
+              --password=Secret.123 \
+              --network=example \
+              --network-alias=ds.example.com \
+              ds
+
+      - name: Set up PKI container
         run: |
           tests/bin/runner-init.sh \
               --hostname=pki.example.com \
+              --network=example \
+              --network-alias=pki.example.com \
               pki
 
       - name: Import LDAP SDK packages
@@ -44,38 +60,32 @@ jobs:
 
       - name: Install packages
         run: |
-          docker exec pki dnf install -y 389-ds-base
           docker cp /tmp/RPMS/. pki:/root/RPMS/
           docker exec pki bash -c "dnf localinstall -y /root/RPMS/*"
 
-      - name: Install DS
-        run: docker exec pki ${SHARED}/tests/bin/ds-create.sh
-
       - name: Install CA
         run: |
           docker exec pki pkispawn \
               -f /usr/share/pki/server/examples/installation/ca.cfg \
               -s CA \
-              -D pki_cert_id_generator=random \
-              -D pki_request_id_generator=random \
+              -D pki_ds_url=ldap://ds.example.com:3389 \
               -v
 
-          docker exec pki pki-server cert-find
-
       - name: Install TKS
         run: |
           docker exec pki pkispawn \
               -f /usr/share/pki/server/examples/installation/tks.cfg \
               -s TKS \
+              -D pki_ds_url=ldap://ds.example.com:3389 \
               -v
 
-          docker exec pki pki-server cert-find
-
       - name: Install TPS
         run: |
           docker exec pki pkispawn \
               -f /usr/share/pki/server/examples/installation/tps.cfg \
               -s TPS \
+              -D pki_ds_url=ldap://ds.example.com:3389 \
+              -D pki_authdb_url=ldap://ds.example.com:3389 \
               -v
 
       - name: Check TPS admin
@@ -97,10 +107,12 @@ jobs:
         run: |
           # import sample TPS users
           docker exec pki ldapadd \
+              -H ldap://ds.example.com:3389 \
               -D "cn=Directory Manager" \
               -w Secret.123 \
               -f /usr/share/pki/tps/auth/ds/create.ldif
           docker exec pki ldapadd \
+              -H ldap://ds.example.com:3389 \
               -D "cn=Directory Manager" \
               -w Secret.123 \
               -f /usr/share/pki/tps/auth/ds/example.ldif
@@ -167,7 +179,12 @@ jobs:
       - name: Check DS server systemd journal
         if: always()
         run: |
-          docker exec pki journalctl -x --no-pager -u [email protected]
+          docker exec ds journalctl -x --no-pager -u [email protected]
+
+      - name: Check DS container logs
+        if: always()
+        run: |
+          docker logs ds
 
       - name: Check PKI server systemd journal
         if: always()
@@ -192,7 +209,7 @@ jobs:
       - name: Gather artifacts
         if: always()
         run: |
-          tests/bin/ds-artifacts-save.sh pki
+          tests/bin/ds-artifacts-save.sh ds
           tests/bin/pki-artifacts-save.sh pki
         continue-on-error: true