feat(security): activate Structurizr DSL restricted parsing #430
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Docs CI | |
| on: | |
| push: | |
| paths: | |
| - 'docs/**' | |
| branches: | |
| - main | |
| pull_request: | |
| paths: | |
| - 'docs/**' | |
| branches: | |
| - '*' | |
| workflow_dispatch: | |
| jobs: | |
| test-kind-multipod: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Kubernetes Kind | |
| run: | | |
| curl -Lo ./kind "https://kind.sigs.k8s.io/dl/v0.11.1/kind-linux-amd64" | |
| chmod +x ./kind | |
| ./kind version | |
| - name: Install kubectl | |
| run: | | |
| curl -LO https://storage.googleapis.com/kubernetes-release/release/v1.21.3/bin/linux/amd64/kubectl | |
| chmod +x ./kubectl | |
| - name: Create cluster | |
| run: ./kind create cluster | |
| - name: Install Kroki using Multiple Pods | |
| run: ./kubectl apply -f docs/modules/setup/examples/k8s-multi-pod | |
| - name: Kubectl version | |
| run: ./kubectl version | |
| - name: Wait until available | |
| run: ./kubectl wait --for=condition=available --timeout=120s --all deployments.apps | |
| - name: Check pod | |
| run: ./kubectl get pod | |
| - name: Forward port 8000 (background) | |
| run: ./kubectl port-forward service/kroki 8000:8000 & | |
| - name: Test SeqDiag | |
| run: curl -o /dev/null -s -w "%{http_code}\n" http://localhost:8000/seqdiag/svg/eNorTi1MyUxMV6jmUlBIKsovL04tUtC1UyhPTQKyyoCc6JzEpNQcBVsFJXfXEAX9zLyU1Aq9jJLcHKVYayQ9Nrq6CE3WhA0L8A8GmpaUk5-un5yfm5uaVwIxD6EWqDElsSQxKbE4FUmfp1-wa1CIAg49IFfANOFxXS0A68hQUg== | grep 200 | |
| - name: Uninstall Kroki | |
| run: ./kubectl delete -f docs/modules/setup/examples/k8s-multi-pod | |
| - name: Delete cluster | |
| run: ./kind delete cluster | |
| test-kind-singlepod: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Kubernetes Kind | |
| run: | | |
| curl -Lo ./kind "https://kind.sigs.k8s.io/dl/v0.11.1/kind-linux-amd64" | |
| chmod +x ./kind | |
| ./kind version | |
| - name: Install kubectl | |
| run: | | |
| curl -LO https://storage.googleapis.com/kubernetes-release/release/v1.21.3/bin/linux/amd64/kubectl | |
| chmod +x ./kubectl | |
| - name: Create cluster | |
| run: ./kind create cluster | |
| - name: Install Kroki using a Single Pod | |
| run: ./kubectl apply -f docs/modules/setup/examples/k8s-single-pod | |
| - name: Kubectl version | |
| run: ./kubectl version | |
| - name: Wait until available | |
| run: ./kubectl wait --for=condition=available --timeout=120s --all deployments.apps | |
| - name: Check pod | |
| run: ./kubectl get pod | |
| - name: Forward port 8000 (background) | |
| run: ./kubectl port-forward service/kroki 8000:8000 & | |
| - name: Test SeqDiag | |
| run: curl -o /dev/null -s -w "%{http_code}\n" http://localhost:8000/seqdiag/svg/eNorTi1MyUxMV6jmUlBIKsovL04tUtC1UyhPTQKyyoCc6JzEpNQcBVsFJXfXEAX9zLyU1Aq9jJLcHKVYayQ9Nrq6CE3WhA0L8A8GmpaUk5-un5yfm5uaVwIxD6EWqDElsSQxKbE4FUmfp1-wa1CIAg49IFfANOFxXS0A68hQUg== | grep 200 | |
| - name: Uninstall Kroki | |
| run: ./kubectl delete -f docs/modules/setup/examples/k8s-single-pod | |
| - name: Delete cluster | |
| run: ./kind delete cluster | |
| test-dockercompose: | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Setup Docker | |
| # taken from https://github.com/docker/github-actions/blob/0f18e2abad9a4ac2963d2516246787375b5ec917/Dockerfile#L32 | |
| run: curl -fL https://download.docker.com/linux/static/stable/x86_64/docker-20.10.21.tgz | tar xzO docker/docker > docker && sudo mv -f docker /usr/bin/docker && sudo chmod +x /usr/bin/docker | |
| - name: docker-compose up | |
| run: docker-compose -f docs/modules/setup/examples/kroki-docker-compose.yml up -d | |
| - name: Wait until available | |
| run: | | |
| ./ci/tests/wait-for-it.sh localhost:8000 --timeout=40 | |
| sleep 20 | |
| - name: Test SeqDiag | |
| run: curl -o /dev/null -s -w "%{http_code}\n" http://localhost:8000/seqdiag/svg/eNorTi1MyUxMV6jmUlBIKsovL04tUtC1UyhPTQKyyoCc6JzEpNQcBVsFJXfXEAX9zLyU1Aq9jJLcHKVYayQ9Nrq6CE3WhA0L8A8GmpaUk5-un5yfm5uaVwIxD6EWqDElsSQxKbE4FUmfp1-wa1CIAg49IFfANOFxXS0A68hQUg== | grep 200 |