74 lines
2.6 KiB
Bash
74 lines
2.6 KiB
Bash
#!/usr/bin/env bats
|
|
|
|
load _helpers
|
|
|
|
@test "server/telemetry: prometheusOperator" {
|
|
cd `chart_dir`
|
|
helm --namespace acceptance uninstall $(name_prefix) || :
|
|
helm --namespace acceptance uninstall prometheus || :
|
|
kubectl delete namespace acceptance --ignore-not-found=true
|
|
kubectl create namespace acceptance
|
|
kubectl config set-context --current --namespace=acceptance
|
|
|
|
# Install prometheus-operator and friends.
|
|
helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
|
|
helm repo update
|
|
helm upgrade --install \
|
|
--wait \
|
|
--version 58.3.1 \
|
|
prometheus prometheus-community/kube-prometheus-stack
|
|
|
|
# Install Vault with telemetry config now that the prometheus CRDs are applied.
|
|
helm upgrade --install \
|
|
--wait \
|
|
--values ./test/acceptance/server-test/vault-server.yaml \
|
|
--values ./test/acceptance/server-test/vault-telemetry.yaml \
|
|
"$(name_prefix)" .
|
|
|
|
wait_for_ready "$(name_prefix)-0"
|
|
|
|
echo 'path "sys/metrics" {capabilities = ["read"]}' | kubectl exec -i "$(name_prefix)-0" -- vault policy write metrics -
|
|
|
|
# Store Vault's dev TLS CA and a token in a secret for prometheus to use.
|
|
kubectl create secret generic vault-metrics-client \
|
|
--from-literal="ca.crt=$(kubectl exec "$(name_prefix)-0" -- cat /var/run/tls/vault-ca.pem)" \
|
|
--from-literal="token=$(kubectl exec "$(name_prefix)-0" -- vault token create -policy=metrics -field=token)"
|
|
|
|
# unfortunately it can take up to 2 minutes for the vault prometheus job to appear
|
|
# TODO: investigate how reduce this.
|
|
local job_labels
|
|
local tries=0
|
|
until [ $tries -ge 240 ]
|
|
do
|
|
job_labels=$( (kubectl exec -n acceptance svc/prometheus-kube-prometheus-prometheus \
|
|
-c prometheus \
|
|
-- wget -q -O - http://127.0.0.1:9090/api/v1/label/job/values) | tee /dev/stderr )
|
|
|
|
# Ensure the expected job label was picked up by Prometheus
|
|
[ "$(echo "${job_labels}" | jq 'any(.data[]; . == "vault-internal")')" = "true" ] && break
|
|
|
|
((++tries))
|
|
sleep .5
|
|
done
|
|
|
|
|
|
# Ensure the expected job is "up"
|
|
local job_up=$( ( kubectl exec -n acceptance svc/prometheus-kube-prometheus-prometheus \
|
|
-c prometheus \
|
|
-- wget -q -O - 'http://127.0.0.1:9090/api/v1/query?query=up{job="vault-internal"}' ) | \
|
|
tee /dev/stderr )
|
|
[ "$(echo "${job_up}" | jq '.data.result[0].value[1]')" = \"1\" ]
|
|
}
|
|
|
|
# Clean up
|
|
teardown() {
|
|
if [[ ${CLEANUP:-true} == "true" ]]
|
|
then
|
|
echo "helm/pvc teardown"
|
|
helm uninstall $(name_prefix)
|
|
helm uninstall prometheus
|
|
kubectl delete --all pvc
|
|
kubectl delete namespace acceptance --ignore-not-found=true
|
|
fi
|
|
}
|