dbb17b39ba
Rely on services.jenkins-job-builder to reload the configuration instead of doing that manually in the test. (If this had been implemented already, it would have caught the bug fixed by the parent commit, that services.jenkins-job-builder failed to reload jenkins config from disk.)
129 lines
4.4 KiB
Nix
129 lines
4.4 KiB
Nix
# verifies:
|
|
# 1. jenkins service starts on master node
|
|
# 2. jenkins user can be extended on both master and slave
|
|
# 3. jenkins service not started on slave node
|
|
# 4. declarative jobs can be added and removed
|
|
|
|
import ./make-test-python.nix ({ pkgs, ...} : {
|
|
name = "jenkins";
|
|
meta = with pkgs.lib.maintainers; {
|
|
maintainers = [ bjornfor coconnor domenkozar eelco ];
|
|
};
|
|
|
|
nodes = {
|
|
|
|
master =
|
|
{ ... }:
|
|
{ services.jenkins = {
|
|
enable = true;
|
|
jobBuilder = {
|
|
enable = true;
|
|
accessUser = "admin";
|
|
accessTokenFile = "/var/lib/jenkins/secrets/initialAdminPassword";
|
|
nixJobs = [
|
|
{ job = {
|
|
name = "job-1";
|
|
builders = [
|
|
{ shell = ''
|
|
echo "Running job-1"
|
|
'';
|
|
}
|
|
];
|
|
};
|
|
}
|
|
|
|
{ job = {
|
|
name = "folder-1";
|
|
project-type = "folder";
|
|
};
|
|
}
|
|
|
|
{ job = {
|
|
name = "folder-1/job-2";
|
|
builders = [
|
|
{ shell = ''
|
|
echo "Running job-2"
|
|
'';
|
|
}
|
|
];
|
|
};
|
|
}
|
|
];
|
|
};
|
|
};
|
|
|
|
specialisation.noJenkinsJobs.configuration = {
|
|
services.jenkins.jobBuilder.nixJobs = pkgs.lib.mkForce [];
|
|
};
|
|
|
|
# should have no effect
|
|
services.jenkinsSlave.enable = true;
|
|
|
|
users.users.jenkins.extraGroups = [ "users" ];
|
|
|
|
systemd.services.jenkins.serviceConfig.TimeoutStartSec = "6min";
|
|
};
|
|
|
|
slave =
|
|
{ ... }:
|
|
{ services.jenkinsSlave.enable = true;
|
|
|
|
users.users.jenkins.extraGroups = [ "users" ];
|
|
};
|
|
|
|
};
|
|
|
|
testScript = { nodes, ... }:
|
|
let
|
|
configWithoutJobs = "${nodes.master.config.system.build.toplevel}/specialisation/noJenkinsJobs";
|
|
jenkinsPort = nodes.master.config.services.jenkins.port;
|
|
jenkinsUrl = "http://localhost:${toString jenkinsPort}";
|
|
in ''
|
|
start_all()
|
|
|
|
master.wait_for_unit("jenkins")
|
|
|
|
assert "Authentication required" in master.succeed("curl http://localhost:8080")
|
|
|
|
for host in master, slave:
|
|
groups = host.succeed("sudo -u jenkins groups")
|
|
assert "jenkins" in groups
|
|
assert "users" in groups
|
|
|
|
slave.fail("systemctl is-enabled jenkins.service")
|
|
|
|
slave.succeed("java -fullversion")
|
|
|
|
with subtest("jobs are declarative"):
|
|
# Check that jobs are created on disk.
|
|
master.wait_for_unit("jenkins-job-builder")
|
|
master.wait_until_fails("systemctl is-active jenkins-job-builder")
|
|
master.wait_until_succeeds("test -f /var/lib/jenkins/jobs/job-1/config.xml")
|
|
master.wait_until_succeeds("test -f /var/lib/jenkins/jobs/folder-1/config.xml")
|
|
master.wait_until_succeeds("test -f /var/lib/jenkins/jobs/folder-1/jobs/job-2/config.xml")
|
|
|
|
# Verify that jenkins also sees the jobs.
|
|
out = master.succeed("${pkgs.jenkins}/bin/jenkins-cli -s ${jenkinsUrl} -auth admin:$(cat /var/lib/jenkins/secrets/initialAdminPassword) list-jobs")
|
|
jobs = [x.strip() for x in out.splitlines()]
|
|
# Seeing jobs inside folders requires the Folders plugin
|
|
# (https://plugins.jenkins.io/cloudbees-folder/), which we don't have
|
|
# in this vanilla jenkins install, so limit ourself to non-folder jobs.
|
|
assert jobs == ['job-1'], f"jobs != ['job-1']: {jobs}"
|
|
|
|
master.succeed(
|
|
"${configWithoutJobs}/bin/switch-to-configuration test >&2"
|
|
)
|
|
|
|
# Check that jobs are removed from disk.
|
|
master.wait_for_unit("jenkins-job-builder")
|
|
master.wait_until_fails("systemctl is-active jenkins-job-builder")
|
|
master.wait_until_fails("test -f /var/lib/jenkins/jobs/job-1/config.xml")
|
|
master.wait_until_fails("test -f /var/lib/jenkins/jobs/folder-1/config.xml")
|
|
master.wait_until_fails("test -f /var/lib/jenkins/jobs/folder-1/jobs/job-2/config.xml")
|
|
|
|
# Verify that jenkins also sees the jobs as removed.
|
|
out = master.succeed("${pkgs.jenkins}/bin/jenkins-cli -s ${jenkinsUrl} -auth admin:$(cat /var/lib/jenkins/secrets/initialAdminPassword) list-jobs")
|
|
jobs = [x.strip() for x in out.splitlines()]
|
|
assert jobs == [], f"jobs != []: {jobs}"
|
|
'';
|
|
})
|