Extend gitlab-qa Airgapped tests to run against GitalyCluster
Overview
Currently the airgapped scenario only runs against a single Gitlab node. We would like these airgapped tests to be run against Gitaly Cluster node while Gitaly and Praefect networks are completely isolated.
Approach
As a first iteration - we will work towards only running against the smaller subset of smoke tests with Run airgapped smoke tests on gitaly cluster (!1098 - merged)
As a follow up we will extend to run against a broader suite of tests Extend airgap to use gitaly cluster for a broad... (!1092 - merged) and reintroduce the use of iptables
on the Gitlab instance to restrict network access and give the ability to access registry.gitlab.com
to download runner images for tests that make use of runners.
We're planning to have all E2E tests initially running in the nightly jobs, except for a small subset that are flagged as gitlab
and skip_live_environment
. Once that is proven stable, we can consider moving it into further pipelines.
Tasks
-
Modify the Airgapped scenario to run against the Gitaly Cluster Scenario -
Run airgapped smoke tests on Gitaly cluster -
Extend airgap to use gitaly cluster for a broad... (!1092 - merged) is in maintainer review - This change will run the majority of the E2E tests except a subset marked as
skip_live_environment
andgitlab
as these tests appear to have a number of valid requirements to reach out to the internet - An exception to allow connection to registry.gitlab.com will allow tests reliant on runners run. Identify mechanism to allow 'offline container ... (#700) is a follow up issue to identify how this exception can be removed
- This change will run the majority of the E2E tests except a subset marked as
-
Bump version of gitlab-qa include changes in the above MR Bump version to 8.14.1 (!1103 - merged) -
Update https://gitlab.com/gitlab-org/quality/pipeline-common/-/blob/master/ci/base.gitlab-ci.yml#L4 to bumped version Update GITLAB_QA_VERSION to 8.14.1 (gitlab-org/quality/pipeline-common!255 - merged) -
Update pipeline-common version https://gitlab.com/gitlab-org/quality/nightly/-/blob/master/.gitlab-ci.yml#L3 (looks like a bot may do this for us) -
Update nightly job to run wider suite of tests Update nightly pipeline to run airgapped to run... (gitlab-org/quality/pipeline-common!254 - merged)