Move tests passing on a FIPS system #2322
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: | |
| pull_request: | |
| env: | |
| QUARKUS_CXF_MTOM_LARGE_ATTACHMENT_INCREMENT_KB: 512 | |
| concurrency: | |
| group: ${{ github.ref }}-${{ github.workflow }} | |
| cancel-in-progress: true | |
| jobs: | |
| build-and-run-jvm-tests: | |
| if: startsWith(github.head_ref, 'trigger-release-') == false | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v4 | |
| with: | |
| distribution: temurin | |
| java-version: 17 | |
| - name: Cache local Maven repository | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/.m2/repository | |
| key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }} | |
| restore-keys: | | |
| ${{ runner.os }}-maven- | |
| - name: Build CXF | |
| if: github.ref == 'refs/heads/cxf-main' || github.base_ref == 'cxf-main' || github.head_ref == 'cxf-main' | |
| run: | | |
| cd ~ | |
| git clone --depth 1 --branch main https://github.com/apache/cxf.git \ | |
| && cd cxf \ | |
| && echo "Current CXF commit:" $(git rev-parse HEAD) \ | |
| && sed -i 's|3.0.3-SNAPSHOT|3.0.3|' rt/ws/security/pom.xml \ | |
| && mvn clean install -DskipTests -Dcheckstyle.skip -ntp | |
| - name: Build Quarkus | |
| if: github.ref == 'refs/heads/quarkus-main' || github.base_ref == 'quarkus-main' || github.head_ref == 'quarkus-main' | |
| run: | | |
| cd ~ | |
| git clone --depth 1 --branch main https://github.com/quarkusio/quarkus.git \ | |
| && cd quarkus \ | |
| && echo "Current Quarkus commit:" $(git rev-parse HEAD) \ | |
| && sed -i '/<module>integration-tests<\/module>/d' pom.xml \ | |
| && ./mvnw ${CQ_MAVEN_ARGS} clean install -Dquickly -ntp | |
| - name: Ensure mvn cq:sync-versions -N causes no changes | |
| shell: bash | |
| run: | | |
| ./mvnw cq:sync-versions -Dcq.simpleElementWhitespace=AUTODETECT_PREFER_SPACE -N | |
| [[ -z $(git status --porcelain | grep -v antora.yml) ]] || { echo 'There are uncommitted changes'; git status; git diff; exit 1; } | |
| - name: mvn -B formatter:validate install | |
| run: ./mvnw -B formatter:validate install -fae | |
| - name: 'Upload generated Antora docs site' | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: docs | |
| path: docs/target/site | |
| - name: Fail if there are uncommitted changes | |
| shell: bash | |
| run: | | |
| [[ -z $(git status --porcelain | grep -v antora.yml) ]] || { echo 'There are uncommitted changes'; git status; git diff; exit 1; } | |
| - name: Tar Maven Repo | |
| shell: bash | |
| run: | | |
| tar -czf ${{ runner.temp }}/maven-repo.tgz -C ~ .m2/repository | |
| # Avoid caching our own artifacts | |
| rm -Rf ~/.m2/repository/io/quarkiverse/cxf | |
| - name: Persist Maven Repo | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: maven-repo | |
| path: ${{ runner.temp }}/maven-repo.tgz | |
| retention-days: 1 | |
| native-tests: | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| testModule: ['client', 'client-server', 'fastinfoset', 'hc5', 'metrics', 'mtls', 'mtls -Djks', 'mtom', 'mtom-awt', 'opentelemetry', 'santuario-xmlsec', 'server', 'ws-rm-client', 'ws-security', 'ws-security -Djks', 'ws-security-policy', 'ws-security-policy -Djks', 'ws-security-policy-fips', 'ws-security-policy-fips -Djks', 'ws-trust', 'wsdl2java', 'wsdl2java-no-config'] | |
| name: ${{matrix.testModule}} native tests | |
| needs: build-and-run-jvm-tests | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v4 | |
| with: | |
| distribution: temurin | |
| java-version: 17 | |
| - name: Download Maven Repo | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: maven-repo | |
| path: .. | |
| - name: Extract Maven Repo | |
| shell: bash | |
| run: | | |
| tar -xzf ../maven-repo.tgz -C ~ | |
| - name: Run integration test ${{matrix.testModule}} | |
| # Skip native tests for CodeQL Security Scans | |
| if: "${{ env.SKIP_NATIVE_TESTS != 'true' }}" | |
| run: | | |
| array=(${{matrix.testModule}}) | |
| if [ "${array[0]}" == "ws-rm-client" ]; then | |
| # ws-rm-client requires test-ws-rm-server-native executable | |
| cd test-util-parent/test-ws-rm-server-native && ../../mvnw -B clean install -Pnative | |
| cd ../.. | |
| fi | |
| if [ "${#array[@]}" -gt "1" ]; then | |
| additionalArgs=("${array[@]:1}") | |
| cd integration-tests/${array[0]} && ../../mvnw -B verify -Pnative -Dquarkus.native.container-build=true "${additionalArgs[@]}" | |
| else | |
| cd integration-tests/${array[0]} && ../../mvnw -B verify -Pnative -Dquarkus.native.container-build=true | |
| fi |