Commit Graph

44 Commits

Author SHA1 Message Date
Bassem Dghaidi 2e9cddfa69 Use wernight/squid (permissive proxy) and fix verification tests
- Switch from ubuntu/squid to wernight/squid which allows all HTTPS CONNECT
- Fix verification tests to explicitly use -x flag to prove proxy works
- Tests now verify:
  1. Proxy accepts and forwards requests (using curl -x)
  2. Direct blob storage access is blocked by iptables
  3. Blob storage access through proxy succeeds

The cache action should now fail because it doesn't use the proxy,
not because the proxy rejects the connection.
2026-01-29 09:41:44 -08:00
Bassem Dghaidi 34472f2415 Add explicit iptables rules to block blob storage IPs
The previous firewall setup relied on a catch-all REJECT rule for blob
storage, but it wasn't blocking traffic. Now we explicitly resolve and
block the IPs for productionresultssa0-3.blob.core.windows.net using
iptables -I OUTPUT 1 to insert rules at the top of the chain.
2026-01-29 09:31:15 -08:00
Bassem Dghaidi e0d51ac399 Switch to sameersbn/squid image and simplify verification
- Replace ubuntu/squid with sameersbn/squid:latest (more reliable)
- Remove shared volume mounts that may cause permission issues
- Simplify verification steps since we can't access service container logs
- The test validates proxy works by verifying cache operations succeed
  when direct access is blocked by iptables
2026-01-29 09:27:29 -08:00
Bassem Dghaidi 26cd8c103b Add wait loop for squid-proxy service to be resolvable 2026-01-29 09:22:42 -08:00
Bassem Dghaidi 0d4af5e74f Remove proxy env from Fetch GitHub meta step - must run before firewall setup 2026-01-29 09:20:18 -08:00
Bassem Dghaidi 56cc052f4d Use shared volume between job container and squid service for log access 2026-01-29 09:13:07 -08:00
Bassem Dghaidi ef4c2110b5 Actually verify that the traffic and calls went through the proxy 2026-01-29 08:33:17 -08:00
Bassem Dghaidi c5ddd32390 Fix what gets blocked and what passes through 2026-01-29 08:23:41 -08:00
Bassem Dghaidi 6bfa66432f Fix proxy integration tests 2026-01-29 07:56:38 -08:00
Bassem Dghaidi b56bb3a202 Fix permissions for workflows/workflow.yml 2026-01-29 02:11:09 -08:00
Salman Muin Kayser Chishti 1285d7de7c chore: update actions/checkout to v5 in workflow files 2025-12-11 18:15:27 +00:00
Salman Chishti 94b8944262 update to node24 2025-07-24 20:07:06 +00:00
dependabot[bot] 255c8ff306
Bump actions/setup-node from 3 to 4
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-22 11:12:37 +00:00
dependabot[bot] 5d692d65f4
Bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-22 11:04:20 +00:00
Tatyana Kostromskaya 2001ca4114 Update action to node20 2023-11-20 13:30:40 +00:00
jongwooo 04b13caea4 chore: Use built-in cache action to cache dependencies
Signed-off-by: jongwooo <jongwooo.han@gmail.com>
2022-12-05 15:31:51 +09:00
Bishal Prasad d0af8a3ecc
Change datadog/squid to Ubuntu/squid in CI check (#976) 2022-11-07 13:22:00 +05:30
Vipul 27c0af5532
Remove .md files skip condition from test workflow 2022-08-25 16:52:00 +05:30
Peter Mescalchin 8f1e2e0286
Bump GitHub actions `actions/checkout` and `actions/setup-node` (#763)
* Bump GitHub actions

* Bump Node.js version used to `16.x` in workflows

* Bump `actions/upload-artifact@v3`
2022-04-12 00:06:07 +05:30
Ashwin Sangem 7799d864d9
Updated the usage and docs to the major version release. (#770) 2022-03-21 14:31:26 +05:30
Aparna Ravindra eb0698d1c5
Bumping up @actions/cache version to 1.0.8 (#682)
* bumping up @actions/cache version to 1.0.8
* Remove ubuntu-16.04
2021-11-23 08:44:41 +05:30
Brian Cristante 6bbe742add
Use existing check-dist implementation (#618) 2021-08-09 09:10:47 -04:00
Dave Hadka 24fb121989 Bump cache module to version 1.0.0 2020-07-16 12:35:30 -05:00
Aiqiao Yan 0065ae9713 Remove master from the branch list 2020-07-15 14:02:17 -04:00
Aiqiao Yan 4aa79d91d3 Rename master to main 2020-07-15 10:36:12 -04:00
Aiqiao Yan bcc23b930f React to feeback and change to use 0.2.0 cache package 2020-05-19 15:53:25 -04:00
Aiqiao Yan 249a22026d Update workflow.yml 2020-05-18 11:32:03 -04:00
David Hadka 5d8c995f20
Detect uncommitted changes to the dist/ folder (#302)
* Update workflow.yml

* Update workflow.yml

* Run build

* Update workflow.yml

* Update workflow.yml

* Update workflow.yml
2020-05-11 09:53:08 -04:00
Josh Gross e5370355e6
Combine relative jobs into main test jobs 2020-04-08 10:52:52 -04:00
David Hadka 0e86d5c038
Update workflow.yml 2020-04-07 23:41:38 -04:00
David Hadka 2ba9edf492
Fix job names v2 2020-04-07 23:37:50 -04:00
David Hadka f15bc7a0d9
Fix job names 2020-04-07 23:33:13 -04:00
David Hadka b6b8aa78d8
Update workflow.yml 2020-04-07 23:31:27 -04:00
David Hadka 4a724707e9
Add test for relative paths 2020-04-07 23:28:05 -04:00
eric sciple 4944275b95
test e2e during workflow (#185) 2020-02-13 12:38:56 -05:00
Josh Gross 23e301d35c
Disable fail-fast to get full coverage of failures 2020-01-29 20:34:56 -05:00
Josh Gross f0cbadd748
Use cache in workflows (#90) 2019-11-12 17:48:19 -05:00
Josh Gross 4657a5f525
Fix lint on Windows (#89) 2019-11-12 17:01:15 -05:00
BSKY fb50aa45ec Add initial eslint setup (#88) 2019-11-12 16:48:02 -05:00
Josh Gross bde557aefd
Fix PR filters 2019-11-07 20:02:06 -05:00
Josh Gross 0e86554410
Ignore all .md files 2019-11-01 10:22:36 -04:00
Josh Gross aae1376422
Exclude documentation from CI tests (#28) 2019-10-31 17:22:35 -04:00
Josh Gross 889c603691
Update workflow (#1)
* Run workflow on linux, mac, and windows

* Add status badge

* Use npm install instead

* Bump typescript version

* Use node 12.x
2019-10-31 10:37:00 -04:00
Josh Gross 37c45447e4 Initial commit 2019-10-30 14:48:49 -04:00