add test workflow - closes #237

Signed-off-by: Marcin Fabrykowski git@fabrykowski.pl

chart/templates/deployment.yaml

@@ -4,6 +4,10 @@ metadata:
   name: {{ include "chart.fullname" . }}
   labels:
     {{- include "chart.labels" . | nindent 4 }}
+  {{- with .Values.podAnnotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
 spec:
   replicas: 1
   selector:

.gitlab-ci.yml

 include:
   - https://gitlab.exphost.pl/exphost/exphost-helms/-/raw/master/common/gitlab-ci.yml
+  - https://gitlab.exphost.pl/exphost-controller/controller-helms/-/raw/master/helpers/gitlab-ci.yml
 
 stages:
   - prepare
@@ -7,6 +8,8 @@ stages:
   - build
   - push
   - deploy_to_dev
+  - deploy
+  - cleanup
   - upload
 
 
@@ -43,14 +46,13 @@ build:
   image: quay.io/podman/stable
   extends: .registry
   script:
-    - podman pull $CI_REGISTRY_IMAGE:latest || true
+    - podman pull $CI_REGISTRY_IMAGE:dev || true
     - >
       podman build 
       --pull
       --build-arg http_proxy=$http_proxy
       --build-arg https_proxy=$https_proxy
       --build-arg no_proxy=$no_proxy
-      --cache-from $CI_REGISTRY_IMAGE:latest
       --tag $CI_REGISTRY_IMAGE:dev
       .
 
@@ -97,3 +99,13 @@ upload:
     refs:
       - tags
       - master
+
+deploy branch:
+  extends: .deploy branch
+  variables:
+    APP: usersservice
+
+delete_app:
+  extends: .delete_app
+  variables:
+    APP: usersservice

gitlab-ci-values-dex.yml

+rbac:
+  create: false
+ingress:
+  enabled: true
+  hosts:
+    - host: auth.__DOMAIN__
+      paths:
+        - path: /dex
+          pathType: ImplementationSpecific
+  tls:
+    - hosts:
+        - auth.__DOMAIN__
+      secretName: dex-acme.tls
+  annotations:
+    cert-manager.io/cluster-issuer: acme-issuer
+    nginx.ingress.kubernetes.io/enable-cors: "true"
+    nginx.ingress.kubernetes.io/cors-allow-methods: "PUT, GET, POST, OPTIONS"
+    nginx.ingress.kubernetes.io/cors-allow-origin: "*"
+    nginx.ingress.kubernetes.io/cors-allow-credentials: "true"
+config:
+  web:
+    allowedOrigins: ['*']
+  connectors:
+  - type: ldap
+    id: ldap
+    name: LDAP
+    config:
+      host: ldap-openldap:389
+      insecureNoSSL: true
+      bindDN: uid=dex,ou=sa,dc=example,dc=com
+      bindPW: dex123
+      usernamePrompt: SSO Username
+      userSearch:
+        baseDN: ou=users,dc=example,dc=com
+        filter: "(objectClass=inetOrgPerson)"
+        username: cn
+        idAttr: cn
+        emailAttr: mail
+        nameAttr: cn
+      groupSearch:
+        baseDN: ou=groups,dc=example,dc=com
+        filter: "(objectClass=groupOfNames)"
+        userMatchers:
+          - userAttr: DN
+            groupAttr: member
+        nameAttr: cn
+  storage:
+    type: sqlite3
+    #type: kubernetes
+    config:
+      file: /var/dex/dex.db
+      #inCluster: true
+  issuer: https://auth.__DOMAIN__/dex
+  staticClients:
+  - id: exphost-controller
+    name: exphost-controller
+    redirectURIs:
+    - https://__DOMAIN__/oauth2/callback
+    secret: Yp4fGf79FutdBDJArQqxhUiVbufVxjzu

gitlab-ci-values-usersservice.yml

+image:
+  tag: dev
+ldap:
+  uri: "ldap://ldap-openldap"
+  dn: "cn=admin,dc=example,dc=com"
+  password:
+    password: pass123

gitlab-ci-values.yml

+usersservice:
+  enabled: false
+webui:
+  enabled: true
+  endpoints:
+    authendpoint:
+      url: https://auth.__DOMAIN__/dex
+      secret: Yp4fGf79FutdBDJArQqxhUiVbufVxjzu
+gateway:
+  image:
+    tag: dev
+  endpoints:
+    authendpoint: "https://auth.__DOMAIN__/dex"
+    usersservice: "http://test-controller-usersservice:5000/users/"
+
+adminPassword:
+  password: "pass123"
+configAdminPassword:
+  password: "pass123"
+initialDB:
+  serviceaccounts:
+  - name: dex
+    password: dex123