kubescape/build/goreleaser-post-e2e.sh

#!/usr/bin/env sh
#
# goreleaser-post-e2e.sh
#
# A small, robust POSIX shell script intended to be called from the goreleaser
# `builds[].hooks.post` entry. It is responsible for optionally running the
# repository smoke tests against the artifact produced in `dist/`.
#
# Usage:
#   RUN_E2E=true        -> enable running smoke tests
#   E2E_FAIL_ON_ERROR=1 -> (default) treat test failures as fatal (exit non-zero)
#   E2E_FAIL_ON_ERROR=0 -> treat test failures as non-fatal (log, but exit 0)
#
# The script is written to be defensive and to work under /bin/sh on CI runners.
# Use POSIX-safe flags only.
set -eu

# Helper for logging
_now() {
  date --iso-8601=seconds 2>/dev/null || date
}
log() {
  printf '%s [goreleaser-post-e2e] %s\n' "$(_now)" "$*"
}

# GitHub Actions log grouping helpers (no-op outside Actions)
gha_group_start() {
  if [ "${GITHUB_ACTIONS:-}" = "true" ]; then
    # Titles must be on a single line
    printf '::group::%s\n' "$*"
  fi
}
gha_group_end() {
  if [ "${GITHUB_ACTIONS:-}" = "true" ]; then
    printf '::endgroup::\n'
  fi
}

# Small helper to interpret various truthy forms (1/true/yes/y)
is_true() {
  case "${1:-}" in
    1|true|TRUE|yes|YES|y|Y) return 0 ;;
    *) return 1 ;;
  esac
}

# Determine repo root relative to this script (script is expected to live in kubescape/build/)
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"

: "${RUN_E2E:=false}"
# Default to fatal E2E failures.
: "${E2E_FAIL_ON_ERROR:=1}"

log "Starting goreleaser post-build e2e script"
log "RUN_E2E=${RUN_E2E}"
log "E2E_FAIL_ON_ERROR=${E2E_FAIL_ON_ERROR}"

# Only run on linux/amd64 to avoid running multiple times (once per build)
# and to ensure we can run the binary on the current host (assuming host is amd64).
if [ -n "${GOARCH:-}" ] && [ "${GOARCH}" != "amd64" ]; then
  log "Skipping smoke tests for non-amd64 build (GOARCH=${GOARCH})."
  exit 0
fi

if ! is_true "${RUN_E2E}"; then
  log "RUN_E2E is not enabled. Skipping smoke tests. (RUN_E2E=${RUN_E2E})"
  exit 0
fi

# Locate the amd64 artifact in dist/.
# Goreleaser v2 puts binaries in dist/<id>_<os>_<arch>_<version>/<binary>
# Example: dist/cli_linux_amd64_v1/kubescape
ART_PATH=""
if [ -d "$REPO_ROOT/dist" ]; then
  # Find any file named 'kubescape' inside a directory containing 'linux_amd64' inside 'dist'
  # We use 'find' for robustness against varying directory names
  ART_PATH=$(find "$REPO_ROOT/dist" -type f -name "kubescape" -path "*linux_amd64*" | head -n 1)
fi

if [ -z "$ART_PATH" ] || [ ! -f "$ART_PATH" ]; then
  log "No kubescape artifact found in dist/ matching *linux_amd64*/kubescape. Skipping smoke tests."
  # If we are supposed to run E2E, not finding the artifact is probably an error.
  if is_true "${E2E_FAIL_ON_ERROR}"; then
     log "E2E_FAIL_ON_ERROR enabled -> failing because artifact was not found."
     exit 1
  fi
  exit 0
fi

log "Using artifact: $ART_PATH"
# Make binary executable if it is a binary
chmod +x "$ART_PATH" >/dev/null 2>&1 || true

# Locate python runner
PYTHON=""
if command -v python3 >/dev/null 2>&1; then
  PYTHON=python3
elif command -v python >/dev/null 2>&1; then
  PYTHON=python
fi

if [ -z "$PYTHON" ]; then
  log "python3 (or python) not found in PATH."
  if is_true "${E2E_FAIL_ON_ERROR}"; then
    log "E2E_FAIL_ON_ERROR enabled -> failing the release because python is missing."
    exit 2
  else
    log "E2E_FAIL_ON_ERROR disabled -> continuing without running tests."
    exit 0
  fi
fi

# Check for smoke test runner
SMOKE_RUNNER="$REPO_ROOT/smoke_testing/init.py"
if [ ! -f "$SMOKE_RUNNER" ]; then
  log "Smoke test runner not found at $SMOKE_RUNNER"
  if is_true "${E2E_FAIL_ON_ERROR}"; then
    log "E2E_FAIL_ON_ERROR enabled -> failing the release because smoke runner is missing."
    exit 3
  else
    log "E2E_FAIL_ON_ERROR disabled -> continuing without running tests."
    exit 0
  fi
fi

gha_group_start "Smoke tests"
log "Running smoke tests with $PYTHON $SMOKE_RUNNER \"$ART_PATH\""
# Run the test runner, propagate exit code
set +e
"$PYTHON" "$SMOKE_RUNNER" "$ART_PATH"
rc=$?
set -e

if [ $rc -eq 0 ]; then
  log "Smoke tests passed (exit code 0)."
fi

log "Smoke tests exited with code: $rc"
gha_group_end

if [ $rc -ne 0 ]; then
  if is_true "${E2E_FAIL_ON_ERROR}"; then
    log "E2E_FAIL_ON_ERROR enabled -> failing the release (exit code $rc)."
    exit $rc
  else
    log "E2E_FAIL_ON_ERROR disabled -> continuing despite test failures."
  fi
fi

exit 0