mirror of
https://github.com/hashicorp/vault-action.git
synced 2025-11-08 23:56:55 +00:00
* changing something in another feature branch
This commit is contained in:
parent
cbd47afa26
commit
1eeea988c1
1 changed files with 0 additions and 91 deletions
91
.github/workflows/build.yml
vendored
91
.github/workflows/build.yml
vendored
|
|
@ -171,97 +171,6 @@ jobs:
|
||||||
env:
|
env:
|
||||||
OTHER_SECRET_OUTPUT: ${{ steps.kv-secrets.outputs.otherSecret }}
|
OTHER_SECRET_OUTPUT: ${{ steps.kv-secrets.outputs.otherSecret }}
|
||||||
|
|
||||||
e2e-tls:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@v3
|
|
||||||
|
|
||||||
- name: Run docker-compose
|
|
||||||
run: docker-compose up -d vault-tls
|
|
||||||
|
|
||||||
- uses: actions/setup-node@v3
|
|
||||||
with:
|
|
||||||
node-version: '16.14.0'
|
|
||||||
|
|
||||||
- name: Setup NPM Cache
|
|
||||||
uses: actions/cache@v1
|
|
||||||
with:
|
|
||||||
path: ~/.npm
|
|
||||||
key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
|
|
||||||
restore-keys: |
|
|
||||||
${{ runner.os }}-node-
|
|
||||||
|
|
||||||
- name: NPM Install
|
|
||||||
run: npm ci
|
|
||||||
|
|
||||||
- name: NPM Build
|
|
||||||
run: npm run build
|
|
||||||
|
|
||||||
- name: Setup Vault
|
|
||||||
run: node ./integrationTests/e2e-tls/setup.js
|
|
||||||
env:
|
|
||||||
VAULT_HOST: localhost
|
|
||||||
VAULT_PORT: 8200
|
|
||||||
VAULTCA: ${{ secrets.VAULTCA }}
|
|
||||||
VAULT_CLIENT_CERT: ${{ secrets.VAULT_CLIENT_CERT }}
|
|
||||||
VAULT_CLIENT_KEY: ${{ secrets.VAULT_CLIENT_KEY }}
|
|
||||||
|
|
||||||
- name: Test Vault Action (default KV V2)
|
|
||||||
uses: ./
|
|
||||||
id: kv-secrets
|
|
||||||
with:
|
|
||||||
url: https://localhost:8200
|
|
||||||
token: ${{ env.VAULT_TOKEN }}
|
|
||||||
caCertificate: ${{ secrets.VAULTCA }}
|
|
||||||
clientCertificate: ${{ secrets.VAULT_CLIENT_CERT }}
|
|
||||||
clientKey: ${{ secrets.VAULT_CLIENT_KEY }}
|
|
||||||
secrets: |
|
|
||||||
secret/data/test secret ;
|
|
||||||
secret/data/test secret | NAMED_SECRET ;
|
|
||||||
secret/data/nested/test otherSecret ;
|
|
||||||
|
|
||||||
- name: Test Vault Action (tlsSkipVerify)
|
|
||||||
uses: ./
|
|
||||||
with:
|
|
||||||
url: https://localhost:8200
|
|
||||||
token: ${{ env.VAULT_TOKEN }}
|
|
||||||
tlsSkipVerify: true
|
|
||||||
clientCertificate: ${{ secrets.VAULT_CLIENT_CERT }}
|
|
||||||
clientKey: ${{ secrets.VAULT_CLIENT_KEY }}
|
|
||||||
secrets: |
|
|
||||||
secret/data/tlsSkipVerify skip ;
|
|
||||||
|
|
||||||
- name: Test Vault Action (default KV V1)
|
|
||||||
uses: ./
|
|
||||||
with:
|
|
||||||
url: https://localhost:8200
|
|
||||||
token: ${{ env.VAULT_TOKEN }}
|
|
||||||
caCertificate: ${{ secrets.VAULTCA }}
|
|
||||||
clientCertificate: ${{ secrets.VAULT_CLIENT_CERT }}
|
|
||||||
clientKey: ${{ secrets.VAULT_CLIENT_KEY }}
|
|
||||||
secrets: |
|
|
||||||
my-secret/test altSecret ;
|
|
||||||
my-secret/test altSecret | NAMED_ALTSECRET ;
|
|
||||||
my-secret/nested/test otherAltSecret ;
|
|
||||||
|
|
||||||
- name: Test Vault Action (cubbyhole)
|
|
||||||
uses: ./
|
|
||||||
with:
|
|
||||||
url: https://localhost:8200
|
|
||||||
token: ${{ env.VAULT_TOKEN }}
|
|
||||||
secrets: |
|
|
||||||
/cubbyhole/test foo ;
|
|
||||||
/cubbyhole/test zip | NAMED_CUBBYSECRET ;
|
|
||||||
caCertificate: ${{ secrets.VAULTCA }}
|
|
||||||
clientCertificate: ${{ secrets.VAULT_CLIENT_CERT }}
|
|
||||||
clientKey: ${{ secrets.VAULT_CLIENT_KEY }}
|
|
||||||
|
|
||||||
- name: Verify Vault Action Outputs
|
|
||||||
run: npm run test:e2e-tls
|
|
||||||
env:
|
|
||||||
OTHER_SECRET_OUTPUT: ${{ steps.kv-secrets.outputs.otherSecret }}
|
|
||||||
|
|
||||||
# Removing publish step for now.
|
# Removing publish step for now.
|
||||||
# publish:
|
# publish:
|
||||||
# if: github.event_name == 'push' && contains(github.ref, 'main')
|
# if: github.event_name == 'push' && contains(github.ref, 'main')
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue