Add cron to run preflight against unstable image (#1569)

* Add cron to run preflight against unstable image * Address comments --------- Co-authored-by: David Rabkin <[email protected]>
redhat-best-practices-for-k8s · Oct 31, 2023 · 24baf2b · 24baf2b
1 parent fc0e15d
commit 24baf2b
Showing 1 changed file with 49 additions and 0 deletions.
diff --git a/.github/workflows/preflight.yml b/.github/workflows/preflight.yml
@@ -0,0 +1,49 @@
+---
+name: Preflight
+'on':
+  schedule:
+    - cron: '0 0 * * *'
+  # pull_request:
+  #   branches: [ main ]
+  workflow_dispatch:
+
+jobs:
+  preflight-unstable:
+    runs-on: ubuntu-22.04
+    env:
+      SHELL: /bin/bash
+      IMAGE_NAME: quay.io/testnetworkfunction/cnf-certification-test:unstable
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Go 1.21
+        uses: actions/setup-go@v4
+        with:
+          go-version: 1.21.3
+
+      - name: Disable default go problem matcher
+        run: echo "::remove-matcher owner=go::"
+
+      - name: Clone the preflight repository
+        uses: actions/checkout@v4
+        with:
+          repository: redhat-openshift-ecosystem/openshift-preflight
+          path: openshift-preflight
+
+      - name: Run preflight
+        working-directory: openshift-preflight
+        run: |
+          make build
+          ./preflight check container ${{ env.IMAGE_NAME }} --artifacts ${GITHUB_WORKSPACE}/openshift-preflight/artifacts
+
+          ALLOWED_FAILURES=("HasLicense" "RunAsNonRoot")
+          FAILURES=$(cat ${GITHUB_WORKSPACE}/openshift-preflight/artifacts/amd64/results.json | jq -r '.results.failed[].name')
+
+          for FAILURE in $FAILURES; do
+            FAILURE=$(echo $FAILURE | tr -d '"')
+            if [[ ! "${ALLOWED_FAILURES[@]}" =~ "${FAILURE}" ]]; then
+              echo >&2 "ERROR: $FAILURE is not an allowed failure"
+              exit 1
+            fi
+          done