James Wampler
8fc0ebb724
Existing coverage was one integration test and zero e2e tests. Adds the thin, high-value integration/e2e layer unit tests can't reach (real Postgres wire contract, real browser flows) and wires it as a post-deploy smoke gate. - Seed a deterministic dev/QA admin user and fixed Development env key so HTTP-only tests can authenticate without per-run registration. - Expand the API integration suite: disabled-flag, unauthorized access, environment-document bootstrap, identity-override precedence, and auth login scenarios, reusing the existing black-box HTTP+Npgsql harness. - Add a Playwright suite for the admin SPA: login, nav, project/environment context selection, and feature create/toggle, against the real API. - Bind QA Postgres to 127.0.0.1 for direct seeding, add smoke-qa.sh and an ensure_node() bootstrap (the qa runner has no Node today), and wire a new smoke-qa CI job after deploy-qa.
86 lines
3.1 KiB
Bash
Executable File
86 lines
3.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Shared helpers for scripts/ci/*.sh.
|
|
# Every script in this directory is meant to run identically in CI and on a
|
|
# developer's machine - no Gitea/GitHub-specific built-in actions, just bash.
|
|
set -euo pipefail
|
|
|
|
log() {
|
|
echo "[$(date -u +'%Y-%m-%dT%H:%M:%SZ')] $*"
|
|
}
|
|
|
|
fail() {
|
|
echo "[$(date -u +'%Y-%m-%dT%H:%M:%SZ')] ERROR: $*" >&2
|
|
exit 1
|
|
}
|
|
|
|
# Repo root, regardless of caller's cwd.
|
|
CI_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
|
|
|
|
# Registry configuration. All values come from the environment (CI secrets or
|
|
# a developer's shell) - nothing is hardcoded, per project convention.
|
|
REGISTRY="${REGISTRY:-}"
|
|
REGISTRY_OWNER="${REGISTRY_OWNER:-}"
|
|
REGISTRY_USER="${REGISTRY_USER:-}"
|
|
REGISTRY_TOKEN="${REGISTRY_TOKEN:-}"
|
|
|
|
GIT_SHA="$(git -C "$CI_ROOT" rev-parse --short HEAD)"
|
|
|
|
require_registry_vars() {
|
|
[[ -n "$REGISTRY" ]] || fail "REGISTRY env var is required (e.g. gitea.example.com)"
|
|
[[ -n "$REGISTRY_OWNER" ]] || fail "REGISTRY_OWNER env var is required (e.g. your gitea org/user)"
|
|
}
|
|
|
|
# Populates API_IMAGE / ADMIN_IMAGE, e.g. gitea.example.com/james/miccheck-api
|
|
image_names() {
|
|
require_registry_vars
|
|
API_IMAGE="$REGISTRY/$REGISTRY_OWNER/miccheck-api"
|
|
ADMIN_IMAGE="$REGISTRY/$REGISTRY_OWNER/miccheck-admin"
|
|
}
|
|
|
|
# Installs .NET into $CI_ROOT/.dotnet via the vendored dotnet-install.sh if
|
|
# `dotnet` isn't already on PATH, then prepends it to PATH for this process.
|
|
# Keeps bare runners (no SDK preinstalled) working the same as a dev machine.
|
|
ensure_dotnet() {
|
|
if command -v dotnet > /dev/null 2>&1; then
|
|
return 0
|
|
fi
|
|
|
|
local install_dir="$CI_ROOT/.dotnet"
|
|
if [[ ! -x "$install_dir/dotnet" ]]; then
|
|
log "dotnet not found on PATH; installing .NET SDK via dotnet-install.sh"
|
|
bash "$CI_ROOT/dotnet-install.sh" --channel LTS --install-dir "$install_dir"
|
|
fi
|
|
export PATH="$install_dir:$PATH"
|
|
export DOTNET_ROOT="$install_dir"
|
|
}
|
|
|
|
# Installs Node.js into $CI_ROOT/.node from the official prebuilt tarball if
|
|
# `npm` isn't already on PATH, then prepends it to PATH for this process.
|
|
# Mirrors ensure_dotnet() above - keeps bare runners (no Node preinstalled,
|
|
# e.g. the self-hosted qa runner) working the same as a dev machine.
|
|
ensure_node() {
|
|
if command -v npm > /dev/null 2>&1; then
|
|
return 0
|
|
fi
|
|
|
|
local node_version="22.14.0"
|
|
local install_dir="$CI_ROOT/.node"
|
|
if [[ ! -x "$install_dir/bin/node" ]]; then
|
|
log "node not found on PATH; installing Node.js v$node_version"
|
|
local tarball="node-v${node_version}-linux-x64"
|
|
curl -fsSL "https://nodejs.org/dist/v${node_version}/${tarball}.tar.xz" -o "/tmp/${tarball}.tar.xz"
|
|
mkdir -p "$install_dir"
|
|
tar -xJf "/tmp/${tarball}.tar.xz" -C "$install_dir" --strip-components=1
|
|
rm -f "/tmp/${tarball}.tar.xz"
|
|
fi
|
|
export PATH="$install_dir/bin:$PATH"
|
|
}
|
|
|
|
registry_login() {
|
|
require_registry_vars
|
|
[[ -n "$REGISTRY_USER" ]] || fail "REGISTRY_USER env var is required to push images"
|
|
[[ -n "$REGISTRY_TOKEN" ]] || fail "REGISTRY_TOKEN env var is required to push images"
|
|
log "Logging in to $REGISTRY as $REGISTRY_USER"
|
|
echo "$REGISTRY_TOKEN" | docker login "$REGISTRY" -u "$REGISTRY_USER" --password-stdin
|
|
}
|