63df49b440
Locally, always run integration tests using amd64, even if running on an arm mac. This ensures the architecture locally always matches the CI/CD environment. In addition: * Use consul:local for envoy integration and upgrade tests. Previously, consul:local was used for upgrade tests and consul-dev for integration tests. I didn't see a reason to use separate images as it's more confusing. * By default, disable the requirement that aws credentials are set. These are only needed for the lambda tests and make it so you can't run any tests locally, even if you're not running the lambda tests. Now they'll only run if the LAMBDA_TESTS_ENABLED env var is set. * Split out the building of the Docker image for integration tests into its own target from `dev-docker`. This allows us to always use an amd64 image without messing up the `dev-docker` target. * Add support for passing GO_TEST_FLAGs to `test-envoy-integ` target. * Add a wait_for_leader function because tests were failing locally without it.
45 lines
1.1 KiB
Bash
Executable file
45 lines
1.1 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
# initialize the outputs for each dc
|
|
for dc in primary secondary; do
|
|
rm -rf "workdir/${dc}/tls"
|
|
mkdir -p "workdir/${dc}/tls"
|
|
done
|
|
|
|
container="consul-envoy-integ-tls-init--${CASE_NAME}"
|
|
|
|
scriptlet="
|
|
mkdir /out ;
|
|
cd /out ;
|
|
consul tls ca create ;
|
|
consul tls cert create -dc=primary -server -node=pri ;
|
|
consul tls cert create -dc=secondary -server -node=sec
|
|
"
|
|
|
|
docker rm -f "$container" &>/dev/null || true
|
|
docker run -i --net=none --name="$container" consul:local sh -c "${scriptlet}"
|
|
|
|
# primary
|
|
for f in \
|
|
consul-agent-ca.pem \
|
|
primary-server-consul-0-key.pem \
|
|
primary-server-consul-0.pem \
|
|
; do
|
|
docker cp "${container}:/out/$f" workdir/primary/tls
|
|
done
|
|
|
|
# secondary
|
|
for f in \
|
|
consul-agent-ca.pem \
|
|
secondary-server-consul-0-key.pem \
|
|
secondary-server-consul-0.pem \
|
|
; do
|
|
docker cp "${container}:/out/$f" workdir/secondary/tls
|
|
done
|
|
|
|
# Private keys have 600 perms but tests are run as another user
|
|
chmod 666 workdir/primary/tls/primary-server-consul-0-key.pem
|
|
chmod 666 workdir/secondary/tls/secondary-server-consul-0-key.pem
|
|
|
|
docker rm -f "$container" >/dev/null || true
|