Commit graph

10 commits

Author SHA1 Message Date
Brad White
15a0b8e4cf
[CI / FIPS] Convert smoke tests to use FIPS agent (#186858)
## Summary

Closes elastic/kibana-operations#137

- Convert FIPS daily smoke test pipeline to use FIPS agents
  - This allows the smoke tests to run in parallel now
- Removes FIPS Vagrant box from package testing
- Adds verify FIPS enabled check to pipeline 

Pipeline run: https://buildkite.com/elastic/kibana-fips/builds/90
2024-06-26 12:55:51 -07:00
Brad White
e53ff4411b
[FIPS / CI] Fix ES ML startup issues, UUID permissions, FTR tests status, OpenSSL target. Switch to Ubuntu (#182295)
Closes elastic/kibana-operations#96

[new pipeline run](https://buildkite.com/elastic/kibana-fips/builds/28)
[old pipeline run](https://buildkite.com/elastic/kibana-fips/builds/24)

- Fixes OpenSSL compilation so that it does not overwrite the OS version
and break OS functionality.
- Fixes issue where ES would not start due to ML pipe being unable to
write to Vagrant synced folder.
  - Reenabled ML in FIPS pipeline
- Fixes permission where Kibana could not write UUID file.
- Fixes smoke test exit code not reporting correctly.
- Fixes Buildkite annotation for failed tests
[example](https://buildkite.com/elastic/kibana-fips/builds/23).
- Switches the base VM image from RHEL9 to Ubuntu due to RHEL9
subscription requirements to install repo packages.
- This blocked installing Chrome, causing tests using Webdriver to fail.

---------

Co-authored-by: Dzmitry Lemechko <dzmitry.lemechko@elastic.co>
2024-05-16 08:13:57 -07:00
Jon
37412c2b6b
[artifacts/package-testing] Fix rpm install (#183143)
The version of rpm installed with almalinux 9.4 isn't able to install
from a shared folder. This downgrades to 9.3 while we wait for a fix.

https://buildkite.com/elastic/kibana-artifacts-snapshot/builds/4281
2024-05-10 10:57:53 -05:00
Brad White
306bcf6e85
[ci] Add FIPS Vagrant box and nightly testing pipeline (#176980)
## Summary

- Closes elastic/kibana-operations#26
- Adds a Vagrant box and corresponding Ansible playbook to create a test
environment for FIPS
- Adds a daily pipeline to run a subset of FTR tests in FIPS mode

### Known Issues
1. The compilation of OpenSSL in FIPS mode is breaking some of the OS
libraries and functionality (`sudo` / `dnf` likely more). Possibly due
to custom OpenSSL installation using different locations than the OS
version.
2. ES is having trouble starting, likely due to issue 1 ([Log
link](https://buildkite.com/elastic/kibana-pull-request/builds/205420#018f0c58-3dc3-41c5-a1a5-9d9a9e14aacc/265-552)).
Disabling ML is a temp workaround added in
803945c759, but we likely need it enabled
in the future anyways, so best to find a proper fix. Tracking at
https://github.com/elastic/kibana-operations/issues/96

### Reviewers
You can view a run of the new pipeline during testing
[here](https://buildkite.com/elastic/kibana-migration-pipeline-staging/builds/84).

---------

Co-authored-by: Tiago Costa <tiago.costa@elastic.co>
2024-04-26 16:41:56 -07:00
Jonathan Budzenski
7fd3beee4e
[artifacts] Stabilize package testing (#134854)
* bump ansible logging verbosity

* upgrade base os

* update base images

* add specificity to docker image glob

* limit memory

* bump base vm memory

* more cpu

* decrease verbosity

* less downloads

* disable shared symlinks

* more logging

* bump concurrency to test stability

* add concurrency group

* revert

* parallelism

* Revert "parallelism"

This reverts commit 4cc00f7144.
2022-06-30 16:00:15 -05:00
Jonathan Budzenski
a6a66381b6
[artifact testing] Use local ansible provisioner (#133047)
We've seen a number of package testing timeouts where a random command
will hang while establishing an ssh connection.  Instead of running
installation remotely, this switches to the ansible_local provisioner.
2022-06-01 11:52:41 -05:00
Jonathan Budzenski
0082e0cb06
[artifact testing] Bump VM boot timeout (#130735)
We saw a flaky `vagrant ssh` timeout in a CI run, possibly caused by a
busy host.  This doubles the VM setup timeout from 5 minutes to 10
minutes.
2022-04-20 16:13:59 -05:00
Jonathan Budzenski
ab109db73f
[package testing] Update networking profile to account for virtualbox update (#127298)
With a recent virtualbox update, we're getting failures in CI with:

> The IP address configured for the host-only network is not within the
> allowed ranges. Please update the address used to be within the allowed
> ranges and run the command again.

This updates the IP range used to be compatible.
2022-03-09 11:47:11 -06:00
Jonathan Budzenski
4cfe9d97f0
[package testing] Bump machine memory to 2GB (#126850) 2022-03-03 16:21:56 -07:00
Jonathan Budzenski
f0e11bcd1b
Automated package testing (#88900)
Co-authored-by: Tyler Smalley <tylersmalley@me.com>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2021-05-27 13:37:43 -05:00