Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updates testinfra tests to run cleanly in production from an Admin Workstation #6032

Merged
merged 1 commit into from
Jul 6, 2021

Conversation

zenmonkeykstop
Copy link
Contributor

@zenmonkeykstop zenmonkeykstop commented Jul 5, 2021

Status

Ready for review

Description of Changes

Fixes #6022.

  • Overrides default variables with values from production site-specific file
  • Generalizes nightly update/upgrade/reboot checks
  • Sets expected repo URL based on workstation ansible defaults

Testing

prod

  • Provision a production system based on the latest tag (2.0.0) (VMs or HW). Set a non-standard value for the reboot time. If practical, use non-standard IPs (ie other than 10.20.2.2 and 10.20.3.2) for the app and mon servers.
  • install the testinfra dependencies with ./securedrop-admin setup -t
  • run the testinfra suite with `./securedrop-admin verify
  • verify that multiple test errors are seen relating to OSSEC, IP addresses, and update scheduling
  • check out this branch on the Admin Workstation
  • run testinfra again with ./securedrop-admin --force verify
  • verify that all tests pass.

staging

  • provision a staging environment, run make testinfra, and verify that tests pass.

Deployment

(No deployment issues)

Checklist

If you made changes to the server application code:

  • Linting (make lint) and tests (make test) pass in the development container

If you made non-trivial code changes:

  • I have written a test plan and validated it for this PR

Choose one of the following:

  • I have opened a PR in the docs repo for these changes, or will do so later
  • I would appreciate help with the documentation
  • These changes do not require documentation

…rkstation:

- Overrides default variables with values from production site-specific file
- Generalizes nightly update/upgrade/reboot checks
- Sets expected repo URL based on workstation ansible defaults
@zenmonkeykstop zenmonkeykstop requested a review from a team as a code owner July 5, 2021 23:11
@zenmonkeykstop zenmonkeykstop added this to the 2.0.1 milestone Jul 6, 2021
Copy link
Contributor

@rmol rmol left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

prod

  • Provision a production system based on the latest tag (2.0.0) (VMs or HW). Set a non-standard value for the reboot time. If practical, use non-standard IPs (ie other than 10.20.2.2 and 10.20.3.2) for the app and mon servers.
    • I did set a different reboot time, and used different IP addresses.
  • install the testinfra dependencies with ./securedrop-admin setup -t
  • run the testinfra suite with ./securedrop-admin verify
  • verify that multiple test errors are seen relating to OSSEC, IP addresses, and update scheduling
  • check out this branch on the Admin Workstation
  • run testinfra again with ./securedrop-admin --force verify
  • verify that all tests pass.

@zenmonkeykstop zenmonkeykstop merged commit 2882d1e into develop Jul 6, 2021
@rmol rmol mentioned this pull request Jul 7, 2021
22 tasks
@zenmonkeykstop zenmonkeykstop deleted the 6022-testinfra-use-prod branch July 21, 2021 23:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

QA: Automate basic server testing
2 participants