add basic test checking deployment status

.abs/main.yaml

@@ -1,8 +1,7 @@
+chart-dir: ./helm/linkerd-viz
 replace-chart-version-with-git: true
+replace-app-version-with-git: false
 generate-metadata: true
-chart-dir: ./helm/linkerd-viz
-destination: ./build
-# CI overwrites this, check .circleci/config.yaml
 catalog-base-url: https://giantswarm.github.io/giantswarm-catalog/
 # until we support custom template helper filenames
 disable-giantswarm-helm-validator: true

.ats/main.yaml

@@ -0,0 +1,5 @@
+app-tests-skip-app-deploy: true
+
+smoke-tests-cluster-config-file: tests/kind_config.yaml
+smoke-tests-cluster-type: kind
+skip-steps: [functional, upgrade]

.circleci/config.yml

@@ -8,11 +8,23 @@ workflows:
       - architect/push-to-app-catalog:
           name: push-to-giantswarm-app-catalog
           context: architect
-          executor: app-build-suite
+          executor: "app-build-suite"
           app_catalog: "giantswarm-catalog"
           app_catalog_test: "giantswarm-test-catalog"
           chart: "linkerd-viz"
+          persist_chart_archive: true
           filters:
             # Trigger the job also on git tag.
             tags:
               only: /^v.*/
+
+      - architect/run-tests-with-ats:
+          name: execute chart tests
+          app-test-suite_container_tag: "0.2.3"
+          filters:
+            # Do not trigger the job on merge to main.
+            branches:
+              ignore:
+                - main
+          requires:
+            - push-to-giantswarm-app-catalog

.github/.gitleaks.toml

@@ -0,0 +1,8 @@
+[allowlist]
+    description = "Allowlisted files"
+    files = [
+        '''^cert-default-values.yaml$''',
+        '''^\.?gitleaks.toml$''',
+        '''(.*?)(png|jpg|gif|doc|docx|pdf|bin|xls|pyc|zip)$''',
+        '''(go.mod|go.sum)$'''
+   ]

.gitignore

@@ -1,2 +1,10 @@
+linkerd-viz*.tgz
+linkerd-viz*.tgz-meta/
+*.kube.config
+test_results_*.xml
+.pytest_cache
+linkerd-cli
+__pycache__
+**/.idea/
 vendor
 build

CHANGELOG.md

@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- Add basic tests.
+
 ### Changed
 
 - Add PSS flag for PSP->PSS migration.

tests/ats/Pipfile

@@ -0,0 +1,18 @@
+[[source]]
+name = "pypi"
+url = "https://pypi.org/simple"
+verify_ssl = true
+
+[packages]
+pytest-helm-charts = ">=0.7.0"
+pytest = ">=6.2.5"
+pykube-ng = ">=21.10.0"
+pyyaml = "~=6.0"
+pytest-rerunfailures = ">=10.2"
+requests = "~=2.31.0"
+
+[requires]
+python_version = "3.9"
+
+[pipenv]
+allow_prereleases = true

tests/ats/test-values.yaml

@@ -0,0 +1,35 @@
+identity:
+  issuer:
+    crtExpiry: "2121-07-22T19:15:01Z"
+    tls:
+      crtPEM: |
+        -----BEGIN CERTIFICATE-----
+        MIIBtjCCAVugAwIBAgIRAKihbxILFs3NPt1ML68yD0QwCgYIKoZIzj0EAwIwJTEj
+        MCEGA1UEAxMacm9vdC5saW5rZXJkLmNsdXN0ZXIubG9jYWwwIBcNMjEwNzIyMTMx
+        NTAxWhgPMjEyMTA3MjIxOTE1MDFaMCkxJzAlBgNVBAMTHmlkZW50aXR5Lmxpbmtl
+        cmQuY2x1c3Rlci5sb2NhbDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABCqkyBMN
+        EqSMJKr5uY20w7OpmQLoRGk2XPTfZnRIglXVzjFSwEkjGEgaxo2s7cWNcU0JBJcM
+        tFVM6sJTz1xwYLejZjBkMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/
+        AgEAMB0GA1UdDgQWBBRHOIrJqz+w/XK9FGTyu5Wu/IUkBzAfBgNVHSMEGDAWgBTR
+        P4FlGwC//efqZbQTaon7TuhySDAKBggqhkjOPQQDAgNJADBGAiEAjAKhV9fVsp4K
+        bqw0XjbyBFbhqaM/utq9O0655MiCk8sCIQC0bep2j/sbBLDBzcb01BbQMfqKHeSx
+        McctkQ7UY7noFQ==
+        -----END CERTIFICATE-----
+      keyPEM: |
+        -----BEGIN EC PRIVATE KEY-----
+        MHcCAQEEIIWoQAD21+J3S+lQNVmPQ+dJvJzfX5lQoRoWx0dzWxEAoAoGCCqGSM49
+        AwEHoUQDQgAEKqTIEw0SpIwkqvm5jbTDs6mZAuhEaTZc9N9mdEiCVdXOMVLASSMY
+        SBrGjaztxY1xTQkElwy0VUzqwlPPXHBgtw==
+        -----END EC PRIVATE KEY-----
+identityTrustAnchorsPEM: |
+  -----BEGIN CERTIFICATE-----
+  MIIBjjCCATWgAwIBAgIQSW0BwPxz+ittQJlk+GXLKTAKBggqhkjOPQQDAjAlMSMw
+  IQYDVQQDExpyb290LmxpbmtlcmQuY2x1c3Rlci5sb2NhbDAgFw0yMTA3MjIxMzEz
+  MzlaGA8yMTIxMDcyMjE5MTMzOVowJTEjMCEGA1UEAxMacm9vdC5saW5rZXJkLmNs
+  dXN0ZXIubG9jYWwwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARq202TSDnonkAh
+  NDwT+2RBvuJwx7nN3YjPo3H1Qva0IUFIa+EzcIqGlxNOzS4FJpLxN795J6GKp4BI
+  4QUfBbbIo0UwQzAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBATAd
+  BgNVHQ4EFgQU0T+BZRsAv/3n6mW0E2qJ+07ockgwCgYIKoZIzj0EAwIDRwAwRAIg
+  DQGa1wW0lD/EAv7mnh54IUsRj43CPIVSKUzIfStk6McCIFcpO1LpTnYv5cBHvJ6F
+  V9XOhNjW6B2KtjtZ+P+VLlhJ
+  -----END CERTIFICATE-----