test_security.yml

name: Security test workflow for Anomaly Detection
on:
  push:
    branches:
      - "*"
  pull_request:
    branches:
      - "*"

jobs:
  Build-ad:
    strategy:
      matrix:
        java: [11,17,21]
      fail-fast: false

    name: Security test workflow for Anomaly Detection
    runs-on: ubuntu-latest

    steps:
      - name: Setup Java ${{ matrix.java }}
        uses: actions/setup-java@v3
        with:
          distribution: 'temurin'
          java-version: ${{ matrix.java }}

      # time-series-analytics
      - name: Checkout AD
        uses: actions/checkout@v4

      - name: Build Anomaly Detection
        run: |
          ./gradlew assemble
      # example of variables:
      # plugin = opensearch-time-series-analytics-2.10.0.0-SNAPSHOT.zip
      # version = 2.10.0, plugin_version = 2.10.0.0, qualifier = SNAPSHOT
      - name: Pull and Run Docker
        run: |
          plugin=`basename $(ls build/distributions/*.zip)`
          version=`echo $plugin|awk -F- '{print $5}'| cut -d. -f 1-3`
          plugin_version=`echo $plugin|awk -F- '{print $5}'| cut -d. -f 1-4`
          qualifier=`echo $plugin|awk -F- '{print $6}'| cut -d. -f 1-1`

          if $qualifier!=SNAPSHOT
          then
            docker_version=$version-$qualifier
          else
            docker_version=$version
          fi
          echo plugin version plugin_version qualifier docker_version
          echo "($plugin) ($version) ($plugin_version) ($qualifier) ($docker_version)"

          cd ..
          if docker pull opensearchstaging/opensearch:$docker_version
          then
            echo "FROM opensearchstaging/opensearch:$docker_version" >> Dockerfile
            echo "RUN if [ -d /usr/share/opensearch/plugins/opensearch-anomaly-detection ]; then /usr/share/opensearch/bin/opensearch-plugin remove opensearch-anomaly-detection; fi" >> Dockerfile
            echo "RUN if [ -d /usr/share/opensearch/plugins/opensearch-time-series-analytics ]; then /usr/share/opensearch/bin/opensearch-plugin remove opensearch-time-series-analytics; fi" >> Dockerfile
            echo "ADD anomaly-detection/build/distributions/$plugin /tmp/" >> Dockerfile
            echo "RUN /usr/share/opensearch/bin/opensearch-plugin install --batch file:/tmp/$plugin" >> Dockerfile
            docker build -t opensearch-ad:test .
            echo "imagePresent=true" >> $GITHUB_ENV
          else
            echo "imagePresent=false" >> $GITHUB_ENV
          fi
      - name: Run Docker Image
        if: env.imagePresent == 'true'
        run: |
          cd ..
          docker run -p 9200:9200 -d -p 9600:9600 -e "OPENSEARCH_INITIAL_ADMIN_PASSWORD=myStrongPassword123!" -e "discovery.type=single-node" opensearch-ad:test
          sleep 90
      - name: Run AD Test
        if: env.imagePresent == 'true'
        run: |
          security=`curl -XGET https://localhost:9200/_cat/plugins?v -u admin:myStrongPassword123! --insecure |grep opensearch-security|wc -l`
          if [ $security -gt 0 ]
          then
            echo "Security plugin is available"
            ./gradlew integTest -Dtests.rest.cluster=localhost:9200 -Dtests.cluster=localhost:9200 -Dtests.clustername="docker-cluster" -Dhttps=true -Duser=admin -Dpassword=myStrongPassword123!
          else
            echo "Security plugin is NOT available, skipping integration tests"
          fi