Skip to content

4.24.0 #289

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lbr38 merged 1 commit into from
Aug 19, 2025
Merged

4.24.0 #289

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
112 changes: 0 additions & 112 deletions .github/workflows/api-test.yml
View file
Open in desktop

This file was deleted.

259 changes: 259 additions & 0 deletions .github/workflows/test-api.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,259 @@
name: Test Repomanager API

on:
push:
branches: [ devel ]
pull_request:
push:
branches: [ main ]

jobs:
api-test:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout
uses: actions/checkout@v4

- name: Install curl
run: sudo apt-get install curl jq wget -y

# Wait for the API to be ready
# Generally after the 30 first minutes of the current hour (xx:30 to xx:59)
- name: Wait until API URL is ready
run: |
while (true); do
if $(date +%M | grep -q '^[3-5][0-9]$'); then
break
fi

sleep 60
done

- name: Check if API is reachable
run: |
RESULT=$(curl -s -q --fail-with-body ${{ secrets.API_TEST_HOST }})
if [ $? -ne 0 ]; then
echo "API is not unreachable"
exit 1
fi

#
# Download rpm and deb packages from https://packages.repomanager.net that will be used for upload testing
# To avoid an upload test failure due to the package already been uploaded (when multiple pipelines run at the same time), prefix them with the hostname of the CI runner
#
- name: Download test packages
run: |
wget -O ${HOSTNAME}_nginx-1.26.0-1.el7.ngx.x86_64.rpm https://packages.repomanager.net/repo/ci-test_prod/packages/x86_64/nginx-1.26.0-1.el7.ngx.x86_64.rpm
wget -O ${HOSTNAME}_nginx_1.26.0-1~bookworm_amd64.deb https://packages.repomanager.net/repo/ci-test/bookworm/main_prod/pool/main/nginx_1.26.0-1~bookworm_amd64.deb


#
# Run tests as admin user
#

# Register a host and retrieve the host Id and token from results
# Then retrieve and export the host ID and token as environment variables for later steps
- name: (admin) Try to register a host with an admin API key
run: |
RESULT=$(curl --fail-with-body --post301 -s -q -L -X POST -H "Authorization: Bearer ${{ secrets.API_TEST_ADMIN_API_KEY }}" -H "Content-Type: application/json" -d '{"hostname":"test.local","ip":"1.2.3.4"}' ${{ secrets.API_TEST_HOST }}/api/v2/host/registering)
if [ $? -ne 0 ]; then
echo "Failed to register host"
exit 1
fi

HOST_ID=$(echo "$RESULT" | jq .results.id | tr -d '"')
HOST_TOKEN=$(echo "$RESULT" | jq -r .results.token | tr -d '"')

if [ -z "$HOST_ID" ] || [ -z "$HOST_TOKEN" ]; then
echo "Failed to retrieve host ID or token"
exit 1
fi

echo "HOST_ID=$HOST_ID" >> $GITHUB_ENV
echo "HOST_TOKEN=$HOST_TOKEN" >> $GITHUB_ENV

# Unregister the host using the retrieved host ID and token
- name: (admin) Try to unregister a host with an admin API key
run: |
curl --fail-with-body -L -s -q -X DELETE -H "Authorization: Host $HOST_ID:$HOST_TOKEN" -H "Content-Type: application/json" ${{ secrets.API_TEST_HOST }}/api/v2/host/registering
if [ $? -ne 0 ]; then
echo "Failed to unregister host"
exit 1
fi

# Upload a deb package using the admin API key
# Generate a unique package name to avoid conflicts when multiple pipelines run at the same time
- name: (admin) Try to upload a deb package with an admin API key
run: |
RANDOM=$(date +%s)
PACKAGE_NAME="${RANDOM}-${HOSTNAME}-admin_nginx_1.26.0-1~bookworm_amd64.deb"

cp ${HOSTNAME}_nginx_1.26.0-1~bookworm_amd64.deb $PACKAGE_NAME
curl --fail-with-body -L --post301 -s -q -X POST -H "Authorization: Bearer ${{ secrets.API_TEST_ADMIN_API_KEY }}" -F "files=@${PACKAGE_NAME}" ${{ secrets.API_TEST_HOST }}/api/v2/snapshot/1/upload
if [ $? -ne 0 ]; then
echo "Failed to upload deb package"
exit 1
fi

# Upload a rpm package using the admin API key
# Generate a unique package name to avoid conflicts when multiple pipelines run at the same time
- name: (admin) Try to upload an rpm package with an admin API key
run: |
RANDOM=$(date +%s)
PACKAGE_NAME="${RANDOM}-${HOSTNAME}-admin_nginx-1.26.0-1.el7.ngx.x86_64.rpm"

cp ${HOSTNAME}_nginx-1.26.0-1.el7.ngx.x86_64.rpm $PACKAGE_NAME
curl --fail-with-body -L --post301 -s -q -X POST -H "Authorization: Bearer ${{ secrets.API_TEST_ADMIN_API_KEY }}" -F "files=@${PACKAGE_NAME}" ${{ secrets.API_TEST_HOST }}/api/v2/snapshot/2/upload
if [ $? -ne 0 ]; then
echo "Failed to upload rpm package"
exit 1
fi

# Launch a rebuild of the snapshot metadata for the deb repository
- name: (admin) Try to rebuild deb snapshot metadata with an admin API key
run: |
curl --fail-with-body -L -s -q -X PUT -H "Authorization: Bearer ${{ secrets.API_TEST_ADMIN_API_KEY }}" -d '{"gpgSign":"true"}' ${{ secrets.API_TEST_HOST }}/api/v2/snapshot/1/rebuild
if [ $? -ne 0 ]; then
echo "Failed to rebuild deb snapshot metadata"
exit 1
fi

# Launch a rebuild of the snapshot metadata for the rpm repository
- name: (admin) Try to rebuild rpm snapshot metadata with an admin API key
run: |
curl --fail-with-body -L -s -q -X PUT -H "Authorization: Bearer ${{ secrets.API_TEST_ADMIN_API_KEY }}" -d '{"gpgSign":"true"}' ${{ secrets.API_TEST_HOST }}/api/v2/snapshot/2/rebuild
if [ $? -ne 0 ]; then
echo "Failed to rebuild rpm snapshot metadata"
exit 1
fi


#
# Run tests as a regular user: test-user1
# This user has absolutely no permissions to do anything so all the tests must fail
#

# Upload a deb package using the test-user1 API key
# Generate a unique package name to avoid conflicts when multiple pipelines run at the same time
- name: (test-user1) Try to upload a deb package with test-user1 API key
run: |
RANDOM=$(date +%s)
PACKAGE_NAME="${RANDOM}-${HOSTNAME}-test-user1_nginx_1.26.0-1~bookworm_amd64.deb"

cp ${HOSTNAME}_nginx_1.26.0-1~bookworm_amd64.deb $PACKAGE_NAME
OUTPUT=$(curl --fail-with-body -L --post301 -s -q -X POST -H "Authorization: Bearer ${{ secrets.API_TEST_TEST_USER1_API_KEY }}" -F "files=@${PACKAGE_NAME}" ${{ secrets.API_TEST_HOST }}/api/v2/snapshot/3/upload) || true

if echo "$OUTPUT" | grep -q "You are not allowed to upload packages"; then
echo "Correctly failed to upload deb package with test-user1 API key"
else
echo "Failed to fail the upload deb package with test-user1 API key"
exit 1
fi

# Upload a rpm package using the test-user1 API key
# Generate a unique package name to avoid conflicts when multiple pipelines run at the same time
- name: (test-user1) Try to upload an rpm package with test-user1 API key
run: |
RANDOM=$(date +%s)
PACKAGE_NAME="${RANDOM}-${HOSTNAME}-test-user1_nginx-1.26.0-1.el7.ngx.x86_64.rpm"

cp ${HOSTNAME}_nginx-1.26.0-1.el7.ngx.x86_64.rpm $PACKAGE_NAME
OUTPUT=$(curl --fail-with-body -L --post301 -s -q -X POST -H "Authorization: Bearer ${{ secrets.API_TEST_TEST_USER1_API_KEY }}" -F "files=@${PACKAGE_NAME}" ${{ secrets.API_TEST_HOST }}/api/v2/snapshot/4/upload) || true

if echo "$OUTPUT" | grep -q "You are not allowed to upload packages"; then
echo "Correctly failed to upload deb package with test-user1 API key"
else
echo "Failed to fail the upload deb package with test-user1 API key"
exit 1
fi

# Launch a rebuild of the snapshot metadata for the deb repository
- name: (test-user1) Try to rebuild deb snapshot metadata with test-user1 API key
run: |
OUTPUT=$(curl --fail-with-body -L -s -q -X PUT -H "Authorization: Bearer ${{ secrets.API_TEST_TEST_USER1_API_KEY }}" -d '{"gpgSign":"true"}' ${{ secrets.API_TEST_HOST }}/api/v2/snapshot/3/rebuild) || true
if echo "$OUTPUT" | grep -q "You are not allowed to rebuild a repository snapshot"; then
echo "Correctly failed to rebuild deb snapshot metadata with test-user1 API key"
else
echo "Failed to fail the rebuild deb snapshot metadata with test-user1 API key"
exit 1
fi

# Launch a rebuild of the snapshot metadata for the rpm repository
- name: (test-user1) Try to rebuild rpm snapshot metadata with test-user1 API key
run: |
OUTPUT=$(curl --fail-with-body -L -s -q -X PUT -H "Authorization: Bearer ${{ secrets.API_TEST_TEST_USER1_API_KEY }}" -d '{"gpgSign":"true"}' ${{ secrets.API_TEST_HOST }}/api/v2/snapshot/4/rebuild) || true
if echo "$OUTPUT" | grep -q "You are not allowed to rebuild a repository snapshot"; then
echo "Correctly failed to rebuild rpm snapshot metadata with test-user1 API key"
else
echo "Failed to fail the rebuild rpm snapshot metadata with test-user1 API key"
exit 1
fi


#
# Run tests as a regular user: test-user2
# This user has permissions to upload packages and rebuild snapshots metadata
#

# Upload a deb package using the test-user2 API key
# Generate a unique package name to avoid conflicts when multiple pipelines run at the same time
- name: (test-user2) Try to upload a deb package with test-user2 API key
run: |
RANDOM=$(date +%s)
PACKAGE_NAME="${RANDOM}-${HOSTNAME}-test-user2_nginx_1.26.0-1~bookworm_amd64.deb"

cp ${HOSTNAME}_nginx_1.26.0-1~bookworm_amd64.deb $PACKAGE_NAME
curl --fail-with-body -L --post301 -s -q -X POST -H "Authorization: Bearer ${{ secrets.API_TEST_TEST_USER2_API_KEY }}" -F "files=@${PACKAGE_NAME}" ${{ secrets.API_TEST_HOST }}/api/v2/snapshot/5/upload
if [ $? -ne 0 ]; then
echo "Failed to upload deb package"
exit 1
fi

# Upload a rpm package using the test-user2 API key
# Generate a unique package name to avoid conflicts when multiple pipelines run at the same time
- name: (test-user2) Try to upload an rpm package with test-user2 API key
run: |
RANDOM=$(date +%s)
PACKAGE_NAME="${RANDOM}-${HOSTNAME}-test-user2_nginx-1.26.0-1.el7.ngx.x86_64.rpm"

cp ${HOSTNAME}_nginx-1.26.0-1.el7.ngx.x86_64.rpm $PACKAGE_NAME
curl --fail-with-body -L --post301 -s -q -X POST -H "Authorization: Bearer ${{ secrets.API_TEST_TEST_USER2_API_KEY }}" -F "files=@${PACKAGE_NAME}" ${{ secrets.API_TEST_HOST }}/api/v2/snapshot/6/upload
if [ $? -ne 0 ]; then
echo "Failed to upload rpm package"
exit 1
fi

# Launch a rebuild of the snapshot metadata for the deb repository
- name: (test-user2) Try to rebuild deb snapshot metadata with test-user2 API key
run: |
curl --fail-with-body -L -s -q -X PUT -H "Authorization: Bearer ${{ secrets.API_TEST_TEST_USER2_API_KEY }}" -d '{"gpgSign":"true"}' ${{ secrets.API_TEST_HOST }}/api/v2/snapshot/5/rebuild
if [ $? -ne 0 ]; then
echo "Failed to rebuild deb snapshot metadata"
exit 1
fi

# Launch a rebuild of the snapshot metadata for the rpm repository
- name: (test-user2) Try to rebuild rpm snapshot metadata with test-user2 API key
run: |
curl --fail-with-body -L -s -q -X PUT -H "Authorization: Bearer ${{ secrets.API_TEST_TEST_USER2_API_KEY }}" -d '{"gpgSign":"true"}' ${{ secrets.API_TEST_HOST }}/api/v2/snapshot/6/rebuild
if [ $? -ne 0 ]; then
echo "Failed to rebuild rpm snapshot metadata"
exit 1
fi


#
# Additional tests
#

# List all repositories
- name: List all repositories
run: |
curl --fail-with-body -s -q -X GET -H "Authorization: Bearer ${{ secrets.API_TEST_ADMIN_API_KEY }}" ${{ secrets.API_TEST_HOST }}/api/v2/repo/ | jq

# List all repositories with name "local-deb-for-admin"
- name: List repositories with specific name
run: |
curl --fail-with-body -s -q -X GET -H "Authorization: Bearer ${{ secrets.API_TEST_ADMIN_API_KEY }}" ${{ secrets.API_TEST_HOST }}/api/v2/repo/ | jq -r '.results[] | select(.Name == "local-deb-for-admin")'
Loading