Skip to content

ci: add IRIS database mTLS integration test with Cosmian KMS #965

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
p0wline wants to merge 3 commits into
base: develop
Choose a base branch
from
Draft

ci: add IRIS database mTLS integration test with Cosmian KMS #965

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
1398ada
ci: add IRIS database mTLS integration test with Cosmian KMS
p0wline May 27, 2026
377f82e
Merge branch 'develop' into CI/irisdb-test
p0wline May 27, 2026
beb800d
ci(iris): fix secrets context in workflow
p0wline May 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 14 additions & 1 deletion .github/scripts/nix.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,6 +38,7 @@ usage() {
luks Run LUKS disk-encryption PKCS#11 integration tests
otel_export Run OTEL export tests (requires Docker)
Alias: 'otel' (backward-compatible)
iris_mtls Run IRIS ↔ KMS mTLS integration tests (requires Docker + IRIS image)
hsm [backend] Run HSM tests (Linux + macOS for softhsm2)
backend: softhsm2 | utimaco | proteccio | all (default)
ui Run UI E2E tests with Playwright (non-FIPS only)
Expand Down Expand Up @@ -287,6 +288,13 @@ resolve_command_args() {
export WITH_CURL=1
fi

# IRIS mTLS tests need Docker (to pull and run the IRIS container) and curl
# (for the KMS HTTP readiness probe).
if [ "$COMMAND" = "test" ] && [ "${TEST_TYPE:-}" = "iris_mtls" ]; then
export WITH_CURL=1
export WITH_DOCKER=1
fi

# In strict mode (`set -u`), expanding an unset array triggers an error.
# Use the nounset-safe idiom so CI invocations without trailing args work.
COMMAND_ARGS=("${args[@]+"${args[@]}"}")
Expand Down Expand Up @@ -483,6 +491,9 @@ test_command() {
jose)
SCRIPT="$REPO_ROOT/.github/scripts/test/test_jose.sh"
;;
iris_mtls)
SCRIPT="$REPO_ROOT/.github/scripts/test/test_iris_mtls.sh"
;;
gcp_cmek)
SCRIPT="$REPO_ROOT/.github/scripts/test/test_gcp_cmek.sh"
;;
Expand Down Expand Up @@ -547,7 +558,7 @@ test_command() {
;;
*)
echo "Error: Unknown test type '$TEST_TYPE'" >&2
echo "Valid types: aws_xks, sqlite, mysql, percona, mariadb, psql, redis, google_cse, gcp_cmek, pykmip, openssh, luks, otel_export, jose, hsm [softhsm2|utimaco|proteccio|all], ui" >&2
echo "Valid types: aws_xks, sqlite, mysql, percona, mariadb, psql, redis, google_cse, gcp_cmek, pykmip, openssh, luks, otel_export, iris_mtls, jose, hsm [softhsm2|utimaco|proteccio|all], ui" >&2
usage
;;
esac
Expand Down Expand Up @@ -607,6 +618,8 @@ test_command() {
--keep WITH_PYTHON \
--keep WITH_OPENSSH \
--keep WITH_LUKS \
--keep IRIS_DOCKER_IMAGE \
--keep IRIS_LICENSE_KEY \
--keep VARIANT \
--keep LINK \
--keep RELEASE_FLAG \
Expand Down
Loading
Loading