Provision resources for service introspection test (#196)

Author: edaena

tests/README.md

@@ -107,8 +107,8 @@ If you wish to run these tests locally, skip ahead to
    - AZDO_ORG (e.g. `epicstuff`)
    - AZDO_PAT (e.g. Personal Access Token with **read/write/manage** access to
      AZDO_PROJECT) <-- 🔒
-   - AZ_RESOURCE_GROUP - The name of an Azure resource group (for
-     `introspection-validations.sh`)
+   - AZ_RESOURCE_GROUP - The name of an Azure resource group
+   - AZ_STORAGE_ACCOUNT - The name of an Azure storage account
    - SP_APP_ID (e.g Service Principal App Id)
    - SP_PASS (e.g Service Principal Password) <-- 🔒
    - SP_TENANT (e.g Service Principal Tenant Id)
@@ -163,7 +163,8 @@ pipeline. Instead run these steps:
    export SP_PASS=<b>REPLACE_ME</b>
    export SP_APP_ID=<b>REPLACE_ME</b>
    export SP_TENANT=<b>REPLACE_ME</b>
-   export AZ_SUBSCRIPTION_ID=<b>REPLACE_ME</b>
+   export AZ_RESOURCE_GROUP=<b>REPLACE_ME</b>
+   export AZ_STORAGE_ACCOUNT=<b>REPLACE_ME</b>
    </pre>
 4. Navigate to this directory in shell
 5. RUN --> `$ sh validations.sh`

tests/functions.sh

@@ -150,6 +150,22 @@ function variable_group_exists () {
     fi
 }
 
+function variable_group_variable_create () {
+    id=$1
+    org=$2
+    p=$3
+    n=$4
+    v=$5
+    s=$6
+    
+    echo "Create variable '$n' in variable group"
+    if [ "$s" = "secret" ]; then
+        result=$(az pipelines variable-group variable create --id $id --org $org -p $p --name $n --value $v --secret)
+    else
+        result=$(az pipelines variable-group variable create --id $id --org $org -p $p --name $n --value $v)
+    fi
+}
+
 function storage_account_exists () {
     sa_name=$1
     rg=$2
@@ -168,6 +184,10 @@ function storage_account_exists () {
         if [ "$action" == "fail" ]; then
             exit 1
         fi
+        if [ "$action" == "create" ]; then
+            echo "Create storage account '$sa_name'"
+            az storage account create -n $sa_name -g $rg
+        fi
     fi
 }
 
@@ -185,6 +205,67 @@ function storage_account_table_exists () {
         if [ "$action" == "fail" ]; then
             exit 1
         fi
+        if [ "$action" == "create" ]; then
+            echo "Create table $t"
+            az storage table create -n $t --account-name $sa_name
+            total_wait_seconds=20
+            start=0
+            wait_seconds=5
+            while [ $start -lt $total_wait_seconds ]; do
+                sat_result=$(az storage table exists -n $t --account-name $sa_name)
+                sat_exists=$(echo $sat_result | jq '.exists | . == true')
+                if [ "$sat_exists" = "true"  ]; then
+                    echo "The table '$t' was created"
+                    break
+                fi
+                echo "Wait $wait_seconds seconds..."
+                sleep $wait_seconds
+                az storage table create -n $t --account-name $sa_name
+                start=$((start + wait_seconds))
+            done
+            if [ "$sat_exists" != "true" ]; then
+                echo "The table '$t' could not be created"
+                exit 1
+            fi
+        fi
+    fi
+}
+
+function storage_account_cors_enabled () {
+    sa_name=$1
+    action=$2
+    cors_enabled_result=$(az storage cors list --services t --account-name $sa_name | jq '.[] | select((.Service=="table") and (.AllowedMethods=="GET") and (.AllowedOrigins=="http://localhost:4040")) != null')
+
+    if [ "$cors_enabled_result" = "true" ]; then
+        echo "The storage account '$sa_name' has cors enabled"
+    else
+        echo "The storage account '$sa_name' does not have cors enabled"
+        if [ "$action" == "fail" ]; then
+            exit 1
+        fi
+        if [ "$action" == "enable" ]; then
+            echo "Enable cors in storage account '$sa_name'"
+            az storage cors add --methods "GET" --origins "http://localhost:4040" --services t --allowed-headers "*" --exposed-headers "*" --account-name $sa_name
+        fi
+        if [ "$action" == "wait" ]; then
+            total_wait_seconds=25
+            start=0
+            wait_seconds=5
+            while [ $start -lt $total_wait_seconds ]; do
+                cors_enabled_result=$(az storage cors list --services t --account-name $sa_name | jq '.[] | select((.Service=="table") and (.AllowedMethods=="GET") and (.AllowedOrigins=="http://localhost:4040")) != null')
+                if [ "$cors_enabled_result" = "true" ]; then
+                    echo "The storage account '$sa_name' has cors enabled"
+                    break
+                fi
+                echo "Wait $wait_seconds seconds..."
+                sleep $wait_seconds
+                start=$((start + wait_seconds))
+            done
+            if [ "$cors_enabled_result" != "true" ]; then
+                echo "The storage account '$sa_name' does not have cors enabled"
+                exit 1
+            fi
+        fi
     fi
 }
 

tests/validations.sh

@@ -15,15 +15,18 @@ TEST_WORKSPACE="$(pwd)/spk-env"
 [ ! -z "$SP_APP_ID" ] || { echo "Provide SP_APP_ID"; exit 1;}
 [ ! -z "$SP_PASS" ] || { echo "Provide SP_PASS"; exit 1;}
 [ ! -z "$SP_TENANT" ] || { echo "Provide SP_TENANT"; exit 1;}
+[ ! -z "$AZ_RESOURCE_GROUP" ] || { echo "Provide AZ_RESOURCE_GROUP"; exit 1;}
+[ ! -z "$AZ_STORAGE_ACCOUNT" ] || { echo "Provide AZ_STORAGE_ACCOUNT"; exit 1;}
 AZDO_ORG_URL="${AZDO_ORG_URL:-"https://dev.azure.com/$AZDO_ORG"}"
 
-
 echo "TEST_WORKSPACE: $TEST_WORKSPACE"
 echo "SPK_LOCATION: $SPK_LOCATION"
 echo "AZDO_PROJECT: $AZDO_PROJECT"
 echo "AZDO_ORG: $AZDO_ORG"
 echo "AZDO_ORG_URL: $AZDO_ORG_URL"
 echo "ACR_NAME: $ACR_NAME"
+echo "AZ_RESOURCE_GROUP: $AZ_RESOURCE_GROUP"
+echo "AZ_STORAGE_ACCOUNT: $AZ_STORAGE_ACCOUNT"
 
 branchName=myFeatureBranch
 FrontEnd=fabrikam.acme.frontend
@@ -50,6 +53,17 @@ fi
 
 cd $TEST_WORKSPACE
 
+# Introspection Storage Account Setup
+sat_name=fabrikamdeployments
+sa_partition_key="integration-test"
+
+storage_account_exists $AZ_STORAGE_ACCOUNT $AZ_RESOURCE_GROUP "fail"
+storage_account_cors_enabled $AZ_STORAGE_ACCOUNT "enable"
+storage_account_cors_enabled $AZ_STORAGE_ACCOUNT "wait"
+storage_account_table_exists $sat_name $AZ_STORAGE_ACCOUNT "create"
+storage_account_table_exists $sat_name $AZ_STORAGE_ACCOUNT "fail"
+sa_access_key=$(az storage account keys list -n $AZ_STORAGE_ACCOUNT -g $AZ_RESOURCE_GROUP | jq '.[0].value')
+
 # Manifest Repo Setup ------------------
 mkdir $manifests_dir
 cd $manifests_dir
@@ -153,6 +167,13 @@ spk project create-variable-group $vg_name -r $ACR_NAME -d $hld_repo_url -u $SP_
 # Verify the variable group was created. Fail if not
 variable_group_exists $AZDO_ORG_URL $AZDO_PROJECT $vg_name "fail"
 
+# Add introspection variables to variable group
+variable_group_id=$(az pipelines variable-group list --org $AZDO_ORG_URL -p $AZDO_PROJECT | jq '.[] | select(.name=="fabrikam-vg") | .id')
+variable_group_variable_create $variable_group_id $AZDO_ORG_URL $AZDO_PROJECT "ACCOUNT_KEY" $sa_access_key "secret"
+variable_group_variable_create $variable_group_id $AZDO_ORG_URL $AZDO_PROJECT "ACCOUNT_NAME" $AZ_STORAGE_ACCOUNT
+variable_group_variable_create $variable_group_id $AZDO_ORG_URL $AZDO_PROJECT "PARTITION_KEY" $sa_partition_key
+variable_group_variable_create $variable_group_id $AZDO_ORG_URL $AZDO_PROJECT "TABLE_NAME" $sat_name
+
 spk service create $FrontEnd -d $services_dir >> $TEST_WORKSPACE/log.txt
 directory_to_check="$services_full_dir/$FrontEnd"
 file_we_expect=(".gitignore" "azure-pipelines.yaml" "Dockerfile" )