generated from arcus-azure/arcus.github.template
-
Notifications
You must be signed in to change notification settings - Fork 2
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore: deploy storage test resources (#158)
* chore: add bicep to deploy storage test resources * pr-fix: add test variables to deploy pipeline * pr-fix: remove invalid end backtic token in storge account name param * pr-fix: param name for location typo * pr-chore: add managed identity connection as pipeline variables * pr-fix: correct param in yaml deploy pipeline * pr-fix: remove invalid end backtick in parameters * pr-fix: allow public access * Update nuget-release.yml * Update ci-build.yml * pr-fix: add smoke tests * pr-fix: correct az module loading * pr-fix: add ps credential argument * pr-fix: remove resource group param * pr-fix: pass the storage context * pr-fix: add network acl * pr-fix: place before-all before all
- Loading branch information
1 parent
3582878
commit 72ecf5c
Showing
8 changed files
with
263 additions
and
85 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,78 @@ | ||
| name: Arcus Testing - Deploy test resources | ||
|
|
||
| trigger: none | ||
| pr: none | ||
|
|
||
| parameters: | ||
| - name: azureServiceConnection | ||
| displayName: 'Azure service connection' | ||
| type: string | ||
| default: 'Azure Codit-Arcus Service Principal' | ||
| - name: resourceGroupName | ||
| displayName: 'Resource group name' | ||
| default: arcus-testing-dev-we-rg | ||
|
|
||
| variables: | ||
| - template: ./variables/build.yml | ||
| - template: ./variables/test.yml | ||
|
|
||
| resources: | ||
| repositories: | ||
| - repository: templates | ||
| type: github | ||
| name: arcus-azure/azure-devops-templates | ||
| endpoint: arcus-azure | ||
|
|
||
| stages: | ||
| - stage: Deploy | ||
| jobs: | ||
| - job: DeployBicep | ||
| displayName: 'Deploy test resources' | ||
| pool: | ||
| vmImage: $(Vm.Image) | ||
| steps: | ||
| - task: AzureCLI@2 | ||
| inputs: | ||
| azureSubscription: '${{ parameters.azureServiceConnection }}' | ||
| addSpnToEnvironment: true | ||
| scriptType: 'pscore' | ||
| scriptLocation: 'inlineScript' | ||
| inlineScript: | | ||
| $objectId = (az ad sp show --id $env:servicePrincipalId | ConvertFrom-Json).id | ||
| $deployOutput = az deployment sub create ` | ||
| --location westeurope ` | ||
| --template-file ./build/templates/test-resources.bicep ` | ||
| --parameters location=westeurope ` | ||
| --parameters resourceGroupName=${{ parameters.resourceGroupName }} ` | ||
| --parameters storageAccountName=${{ variables['Arcus.Testing.StorageAccount.Name'] }} ` | ||
| --parameters keyVaultName=${{ variables['Arcus.Testing.KeyVault.Name'] }} ` | ||
| --parameters servicePrincipal_objectId=$objectId | ||
| - stage: SmokeTests | ||
| dependsOn: Deploy | ||
| condition: succeeded() | ||
| jobs: | ||
| - job: RunSmokeTests | ||
| displayName: 'Run smoke tests' | ||
| pool: | ||
| vmImage: $(Vm.Image) | ||
| steps: | ||
| - task: AzureCLI@2 | ||
| env: | ||
| resourceGroupName: ${{ parameters.resourceGroupName }} | ||
| storageAccountName: $(Arcus.Testing.StorageAccount.Name) | ||
| inputs: | ||
| azureSubscription: '${{ parameters.azureServiceConnection }}' | ||
| addSpnToEnvironment: true | ||
| scriptType: 'pscore' | ||
| scriptLocation: 'inlineScript' | ||
| inlineScript: | | ||
| Install-Module -Name Az -Force -AllowClobber -SkipPublisherCheck | ||
| Install-Module -Name Pester -Force -SkipPublisherCheck | ||
| Invoke-Pester -Script "./build/templates/smoke-tests.ps1" -OutputFile "./pester.test.results.xml" -OutputFormat 'NUnitXML' -EnableExit | ||
| - task: PublishTestResults@2 | ||
| displayName: 'Publish test results' | ||
| inputs: | ||
| testResultsFormat: 'NUnit' | ||
| testResultsFiles: '**/pester.test.results.xml' | ||
| failTaskOnFailedTests: true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,44 @@ | ||
| parameters: | ||
| azureServiceConnection: '' | ||
|
|
||
| jobs: | ||
| - job: IntegrationTests | ||
| displayName: 'Run integration tests' | ||
| pool: | ||
| vmImage: '$(Vm.Image)' | ||
| steps: | ||
| - task: DownloadPipelineArtifact@2 | ||
| displayName: 'Download build artifacts' | ||
| inputs: | ||
| artifact: 'Build' | ||
| path: '$(Build.SourcesDirectory)' | ||
|
|
||
| - task: UseDotNet@2 | ||
| displayName: 'Import .NET SDK ($(DotNet.Sdk.VersionBC))' | ||
| inputs: | ||
| packageType: 'sdk' | ||
| version: '$(DotNet.Sdk.VersionBC)' | ||
|
|
||
| - task: AzureCLI@2 | ||
| displayName: 'Import secrets from Azure Key Vault' | ||
| env: | ||
| ARCUS_KEYVAULT_NAME: $(Arcus.Testing.KeyVault.Name) | ||
| inputs: | ||
| azureSubscription: '${{ parameters.azureServiceConnection }}' | ||
| scriptType: 'pscore' | ||
| scriptLocation: 'inlineScript' | ||
| addSpnToEnvironment: true | ||
| inlineScript: | | ||
| Set-PSRepository -Name PSGallery -InstallationPolicy Trusted | ||
| Install-Module -Name Arcus.Scripting.DevOps -AllowClobber | ||
| # TODO: get Key Vault secret and set it as secret pipeline variable. | ||
| Set-AzDevOpsVariable -Name 'Arcus.Testing.TenantId' -Value $env:tenantId | ||
| Set-AzDevOpsVariable -Name 'Arcus.Testing.ServicePrincipal.ClientId' -Value $env:servicePrincipalId | ||
| Set-AzDevOpsVariable -Name 'Arcus.Testing.ServicePrincipal.ClientSecret' -Value $env:servicePrincipalKey | ||
| - template: test/run-integration-tests.yml@templates | ||
| parameters: | ||
| dotnetSdkVersion: '$(DotNet.Sdk.Version)' | ||
| projectName: '$(Project).Tests.Integration' | ||
| includePreviewVersions: $(DotNet.Sdk.IncludePreviewVersions) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,22 @@ | ||
| BeforeAll { | ||
| $clientSecret = ConvertTo-SecureString $env:servicePrincipalKey -AsPlainText -Force | ||
| $pscredential = New-Object -TypeName System.Management.Automation.PSCredential($env:servicePrincipalId, $clientSecret) | ||
| Connect-AzAccount -ServicePrincipal -Tenant $env:tenantId -Credential $pscredential | ||
| } | ||
|
|
||
| Describe 'Storage account' { | ||
| BeforeEach { | ||
| $storageContext = New-AzStorageContext -StorageAccountName $env:storageAccountName -UseConnectedAccount | ||
| } | ||
| It 'Service principal can get blob container' { | ||
| Get-AzStorageContainer -Context $storageContext | ||
| } | ||
| It 'Service principal can create blob container' { | ||
| $containerName = 'test-container' | ||
| try { | ||
| New-AzStorageContainer -Name $containerName -Context $storageContext | ||
| } finally { | ||
| Remove-AzStorageContainer -Name $containerName -Context $storageContext -Force | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,75 @@ | ||
| // Define the location for the deployment of the components. | ||
| param location string | ||
|
|
||
| // Define the name of the resource group where the components will be deployed. | ||
| param resourceGroupName string | ||
|
|
||
| // Define the name of the storage account that will be created. | ||
| param storageAccountName string | ||
|
|
||
| // Define the name of the key vault where the necessary secrets will be stored to access the deployed test resources. | ||
| param keyVaultName string | ||
|
|
||
| // Define the Service Principal ID that needs access full access to the deployed resource group. | ||
| param servicePrincipal_objectId string | ||
|
|
||
| targetScope = 'subscription' | ||
|
|
||
| module resourceGroup 'br/public:avm/res/resources/resource-group:0.2.3' = { | ||
| name: 'resourceGroupDeployment' | ||
| params: { | ||
| name: resourceGroupName | ||
| location: location | ||
| } | ||
| } | ||
|
|
||
| resource rg 'Microsoft.Resources/resourceGroups@2021-04-01' existing = { | ||
| name: resourceGroupName | ||
| } | ||
|
|
||
| module storageAccount 'br/public:avm/res/storage/storage-account:0.9.1' = { | ||
| name: 'storageAccountDeployment' | ||
| scope: rg | ||
| params: { | ||
| name: storageAccountName | ||
| location: location | ||
| allowBlobPublicAccess: true | ||
| publicNetworkAccess: 'Enabled' | ||
| networkAcls: { | ||
| bypass: 'AzureServices' | ||
| defaultAction: 'Allow' | ||
| ipRules: [] | ||
| virtualNetworkRules: [] | ||
| } | ||
| roleAssignments: [ | ||
| { | ||
| principalId: servicePrincipal_objectId | ||
| roleDefinitionIdOrName: 'Storage Blob Data Contributor' | ||
| } | ||
| { | ||
| principalId: servicePrincipal_objectId | ||
| roleDefinitionIdOrName: 'Storage Table Data Contributor' | ||
| } | ||
| ] | ||
| } | ||
| } | ||
|
|
||
| module vault 'br/public:avm/res/key-vault/vault:0.6.1' = { | ||
| name: 'vaultDeployment' | ||
| dependsOn: [ | ||
| resourceGroup | ||
| ] | ||
| scope: rg | ||
| params: { | ||
| name: keyVaultName | ||
| location: location | ||
| roleAssignments: [ | ||
| { | ||
| principalId: servicePrincipal_objectId | ||
| roleDefinitionIdOrName: 'Key Vault Secrets officer' | ||
| } | ||
| ] | ||
| secrets: [ | ||
| ] | ||
| } | ||
| } |
Oops, something went wrong.