Prepare CI for tang operator

Tang operator test will run on CI with using minikube.
Prepare .yaml file for specifying packit run and preparing
.fmf plan for run test via tmt.
Prepared setup for install and setup minukube.
Also polished tang operator test to be more structured.

Resolves: #5

.packit.yaml

@@ -0,0 +1,13 @@
+---
+- jobs:
+  - job: tests
+    trigger: pull_request
+    branch: main
+    targets:
+      - fedora-rawhide
+    skip_build: true
+    tf_extra_params:
+      environments:
+        - tmt:
+            context:
+              target_PR_branch: "main"

Sanity/main.fmf

@@ -1,4 +1,4 @@
-summary: Deployment and basic functionality of the tang operator
+summary: Basic functionality of the tang operator
 description: ''
 contact: Martin Zelený <[email protected]>
 component:
@@ -7,6 +7,13 @@ test: ./runtest.sh
 recommend:
   - tang
   - clevis
+require:
+  - jq
+  - helm
+  - clamav
+  - clamav-freshclam
+  - podman
+  - git
 duration: 30m
 enabled: true
 tag:

Sanity/reg_test/conf_test/minimal/daemons_v1alpha1_tangserver.yaml

@@ -7,4 +7,6 @@ metadata:
   finalizers:
     - finalizer.daemons.tangserver.redhat.com
 spec:
+  image: "registry.redhat.io/rhel9/tang"
+  version: "latest"
   replicas: 1

Sanity/reg_test/key_management_test/api_key_rotate.sh

@@ -44,6 +44,8 @@ metadata:
   - finalizer.daemons.tangserver.redhat.com
 spec:
   replicas: ${replicas}
+  image: "registry.redhat.io/rhel9/tang"
+  version: "latest"
   hiddenKeys:
   - sha1: ${sha1_1}
 EOF

Sanity/reg_test/key_management_test/key_delete_one_keep_one.sh

@@ -53,6 +53,8 @@ metadata:
   - finalizer.daemons.tangserver.redhat.com
 spec:
   replicas: ${replicas}
+  image: "registry.redhat.io/rhel9/tang"
+  version: "latest"
   hiddenKeys:
   - sha1: ${sha1_1}
 EOF

Sanity/reg_test/key_management_test/key_rotate_keep_existing.sh

@@ -47,6 +47,8 @@ metadata:
   - finalizer.daemons.tangserver.redhat.com
 spec:
   replicas: ${replicas}
+  image: "registry.redhat.io/rhel9/tang"
+  version: "latest"
   hiddenKeys:
   - sha1: ${sha1_1}
   - sha1: ${hsha1_1}

Sanity/reg_test/key_management_test/minimal-keyretrieve-deletehiddenkeys/daemons_v1alpha1_tangserver.yaml

@@ -8,4 +8,6 @@ metadata:
     - finalizer.daemons.tangserver.redhat.com
 spec:
   replicas: 1
+  image: "registry.redhat.io/rhel9/tang"
+  version: "latest"
   hiddenKeys: []

Sanity/reg_test/key_management_test/minimal-keyretrieve/daemons_v1alpha1_tangserver.yaml

@@ -7,4 +7,6 @@ metadata:
   finalizers:
     - finalizer.daemons.tangserver.redhat.com
 spec:
+  image: "registry.redhat.io/rhel9/tang"
+  version: "latest"
   replicas: 1

Sanity/reg_test/key_management_test/multiple-keyretrieve/daemons_v1alpha1_tangserver.yaml

@@ -7,4 +7,6 @@ metadata:
   finalizers:
     - finalizer.daemons.tangserver.redhat.com
 spec:
+  image: "registry.redhat.io/rhel9/tang"
+  version: "latest"
   replicas: 3

Sanity/reg_test/scale_test/scale_out/scale_out1/daemons_v1alpha1_tangserver.yaml

@@ -7,4 +7,7 @@ metadata:
   finalizers:
     - finalizer.daemons.tangserver.redhat.com
 spec:
+  # Add fields here
+  image: "registry.redhat.io/rhel9/tang"
+  version: "latest"
   replicas: 2

Sanity/runtest.sh

@@ -64,6 +64,7 @@ QUAY_FILE_NAME_TO_FILL_UNFILLED_MD5="db099cc0b92220feb7a38783b02df897"
 OC_DEFAULT_CLIENT="kubectl"
 TOP_SECRET_WORDS="top secret"
 DELETE_TMP_DIR="YES"
+[ -n "$TANG_IMAGE" ] || TANG_IMAGE="registry.redhat.io/rhel9/tang"
 
 test -z "${VERSION}" && VERSION="latest"
 test -z "${DISABLE_BUNDLE_INSTALL_TESTS}" && DISABLE_BUNDLE_INSTALL_TESTS="0"
@@ -778,7 +779,7 @@ getVersion() {
 analyzeVersion() {
     dumpVerbose "DETECTING MALWARE ON VERSION:[${1}]"
     "${CONTAINER_MGR}" pull "${1}"
-    dir_mount=$("${CONTAINER_MGR}" unshare ./mount_image.sh -v "${1}" -c "${CONTAINER_MGR}")
+    dir_mount=$("${CONTAINER_MGR}" unshare ./scripts/mount_image.sh -v "${1}" -c "${CONTAINER_MGR}")
     rlAssertEquals "Checking image could be mounted appropriately" "$?" "0"
     analyzed_dir=$(echo "${dir_mount}" | sed -e 's@/merged@@g')
     dumpVerbose "Analyzing directory:[${analyzed_dir}]"
@@ -791,10 +792,17 @@ analyzeVersion() {
         rlLogWarning "${infected_files} Infected Files Detected!"
         rlLogWarning "Please, review Malware Detection log file: ${tmpdir}/${prefix}_malware.log"
     fi
-    "${CONTAINER_MGR}" unshare ./umount_image.sh -v "${1}" -c "${CONTAINER_MGR}"
+    "${CONTAINER_MGR}" unshare ./scripts/umount_image.sh -v "${1}" -c "${CONTAINER_MGR}"
     rlAssertEquals "Checking image could be umounted appropriately" "$?" "0"
 }
 
+useUpstreamImages(){
+    for yaml_file in $(find . -type f -print)
+    do
+        sed -i "s~\"registry.redhat.io/rhel9/tang\"~$TANG_IMAGE~g" $yaml_file      
+    done
+}
+
 rlJournalStart
     parseAndDumpMode
     parseAndDumpClient
@@ -810,7 +818,13 @@ rlJournalStart
         rlRun "bundleStart" 0 "Installing tang-operator-bundle version:${VERSION}"
         rlRun "${OC_CLIENT} apply -f ${TEST_NAMESPACE_FILE}" 0 "Creating test namespace:${TEST_NAMESPACE}"
         rlRun "${OC_CLIENT} get namespace ${TEST_NAMESPACE}" 0 "Checking test namespace:${TEST_NAMESPACE}"
-        rlRun "installSecret" 0 "Installing secret if necessary"
+        #go through all the files and set substition for TANG_IMAGE keyword
+        if [ -n "$TANG_IMAGE" ]; then
+            useUpstreamImages
+        fi
+        if [ "$CI" != true ]; then
+            rlRun "installSecret" 0 "Installing secret if necessary"
+        fi
     rlPhaseEnd
 
     ########## CHECK CONTROLLER RUNNING #########