[Policy Assistant] Add support for dynamic workload traffic via POLA cli #50
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: policy-assistant | |
| on: | |
| push: | |
| branches: | |
| - 'main' | |
| - 'release*' | |
| tags: | |
| - 'v*' | |
| paths: | |
| - 'cmd/policy-assistant/**' | |
| - '.github/workflows/policy-assistant.yml' | |
| pull_request: | |
| branches: | |
| - 'main' | |
| - 'release*' | |
| paths: | |
| - 'cmd/policy-assistant/**' | |
| - '.github/workflows/policy-assistant.yml' | |
| workflow_dispatch: | |
| env: | |
| GO_VERSION: "1.22.0" | |
| permissions: write-all | |
| jobs: | |
| unit-tests: | |
| name: Unit Tests | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| - name: Check out code | |
| uses: actions/checkout@v4 | |
| - name: Set up Go | |
| uses: actions/setup-go@v4 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Run Unit Tests | |
| run: | | |
| cd cmd/policy-assistant/ | |
| go test ./... | |
| build: | |
| name: Build Cyclonus | |
| runs-on: ubuntu-22.04 | |
| needs: unit-tests | |
| steps: | |
| - name: Check out code | |
| uses: actions/checkout@v4 | |
| - name: Set up Go | |
| uses: actions/setup-go@v4 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Build Cyclonus | |
| run: | | |
| cd cmd/policy-assistant/ | |
| make cyclonus | |
| - name: Save Cyclonus Binary | |
| run: | | |
| mkdir -p artifacts | |
| cp cmd/policy-assistant/cmd/cyclonus/cyclonus artifacts/ | |
| - name: Upload Cyclonus Binary | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: cyclonus-binary | |
| path: artifacts/cyclonus | |
| integration-tests: | |
| name: Integration Tests | |
| runs-on: ubuntu-22.04 | |
| needs: build | |
| steps: | |
| - name: Check out code | |
| uses: actions/checkout@v4 | |
| - name: Download Cyclonus Binary | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: cyclonus-binary | |
| path: artifacts | |
| - name: Set Cyclonus Binary Permissions | |
| run: chmod u+x artifacts/cyclonus | |
| - name: Run Integration Test - Explain Mode | |
| run: | | |
| artifacts/cyclonus analyze --mode explain --policy-path cmd/policy-assistant/examples/demos/kubecon-eu-2024/policies/ | |
| - name: Run Integration Test - Probe Mode | |
| run: | | |
| artifacts/cyclonus analyze --mode probe --policy-path cmd/policy-assistant/examples/demos/kubecon-eu-2024/policies/ --probe-path cmd/policy-assistant/examples/demos/kubecon-eu-2024/demo-probe.json | |
| - name: Run Integration Test - Walkthrough Mode | |
| run: | | |
| artifacts/cyclonus analyze --mode walkthrough --policy-path cmd/policy-assistant/examples/demos/kubecon-eu-2024/policies/ |