44 Commits

Author SHA1 Message Date
Bassem Dghaidi
2e9cddfa69 Use wernight/squid (permissive proxy) and fix verification tests
- Switch from ubuntu/squid to wernight/squid which allows all HTTPS CONNECT
- Fix verification tests to explicitly use -x flag to prove proxy works
- Tests now verify:
  1. Proxy accepts and forwards requests (using curl -x)
  2. Direct blob storage access is blocked by iptables
  3. Blob storage access through proxy succeeds

The cache action should now fail because it doesn't use the proxy,
not because the proxy rejects the connection.
2026-01-29 09:41:44 -08:00
Bassem Dghaidi
34472f2415 Add explicit iptables rules to block blob storage IPs
The previous firewall setup relied on a catch-all REJECT rule for blob
storage, but it wasn't blocking traffic. Now we explicitly resolve and
block the IPs for productionresultssa0-3.blob.core.windows.net using
iptables -I OUTPUT 1 to insert rules at the top of the chain.
2026-01-29 09:31:15 -08:00
Bassem Dghaidi
e0d51ac399 Switch to sameersbn/squid image and simplify verification
- Replace ubuntu/squid with sameersbn/squid:latest (more reliable)
- Remove shared volume mounts that may cause permission issues
- Simplify verification steps since we can't access service container logs
- The test validates proxy works by verifying cache operations succeed
  when direct access is blocked by iptables
2026-01-29 09:27:29 -08:00
Bassem Dghaidi
26cd8c103b Add wait loop for squid-proxy service to be resolvable 2026-01-29 09:22:42 -08:00
Bassem Dghaidi
0d4af5e74f Remove proxy env from Fetch GitHub meta step - must run before firewall setup 2026-01-29 09:20:18 -08:00
Bassem Dghaidi
56cc052f4d Use shared volume between job container and squid service for log access 2026-01-29 09:13:07 -08:00
Bassem Dghaidi
ef4c2110b5 Actually verify that the traffic and calls went through the proxy 2026-01-29 08:33:17 -08:00
Bassem Dghaidi
c5ddd32390 Fix what gets blocked and what passes through 2026-01-29 08:23:41 -08:00
Bassem Dghaidi
6bfa66432f Fix proxy integration tests 2026-01-29 07:56:38 -08:00
Bassem Dghaidi
b56bb3a202 Fix permissions for workflows/workflow.yml 2026-01-29 02:11:09 -08:00
Salman Muin Kayser Chishti
1285d7de7c chore: update actions/checkout to v5 in workflow files 2025-12-11 18:15:27 +00:00
Salman Chishti
94b8944262 update to node24 2025-07-24 20:07:06 +00:00
dependabot[bot]
255c8ff306
Bump actions/setup-node from 3 to 4
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-22 11:12:37 +00:00
dependabot[bot]
5d692d65f4
Bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-22 11:04:20 +00:00
Tatyana Kostromskaya
2001ca4114 Update action to node20 2023-11-20 13:30:40 +00:00
jongwooo
04b13caea4 chore: Use built-in cache action to cache dependencies
Signed-off-by: jongwooo <jongwooo.han@gmail.com>
2022-12-05 15:31:51 +09:00
Bishal Prasad
d0af8a3ecc
Change datadog/squid to Ubuntu/squid in CI check (#976) 2022-11-07 13:22:00 +05:30
Vipul
27c0af5532
Remove .md files skip condition from test workflow 2022-08-25 16:52:00 +05:30
Peter Mescalchin
8f1e2e0286
Bump GitHub actions actions/checkout and actions/setup-node (#763)
* Bump GitHub actions

* Bump Node.js version used to `16.x` in workflows

* Bump `actions/upload-artifact@v3`
2022-04-12 00:06:07 +05:30
Ashwin Sangem
7799d864d9
Updated the usage and docs to the major version release. (#770) 2022-03-21 14:31:26 +05:30
Aparna Ravindra
eb0698d1c5
Bumping up @actions/cache version to 1.0.8 (#682)
* bumping up @actions/cache version to 1.0.8
* Remove ubuntu-16.04
2021-11-23 08:44:41 +05:30
Brian Cristante
6bbe742add
Use existing check-dist implementation (#618) 2021-08-09 09:10:47 -04:00
Dave Hadka
24fb121989 Bump cache module to version 1.0.0 2020-07-16 12:35:30 -05:00
Aiqiao Yan
0065ae9713 Remove master from the branch list 2020-07-15 14:02:17 -04:00
Aiqiao Yan
4aa79d91d3 Rename master to main 2020-07-15 10:36:12 -04:00
Aiqiao Yan
bcc23b930f React to feeback and change to use 0.2.0 cache package 2020-05-19 15:53:25 -04:00
Aiqiao Yan
249a22026d Update workflow.yml 2020-05-18 11:32:03 -04:00
David Hadka
5d8c995f20
Detect uncommitted changes to the dist/ folder (#302)
* Update workflow.yml

* Update workflow.yml

* Run build

* Update workflow.yml

* Update workflow.yml

* Update workflow.yml
2020-05-11 09:53:08 -04:00
Josh Gross
e5370355e6
Combine relative jobs into main test jobs 2020-04-08 10:52:52 -04:00
David Hadka
0e86d5c038
Update workflow.yml 2020-04-07 23:41:38 -04:00
David Hadka
2ba9edf492
Fix job names v2 2020-04-07 23:37:50 -04:00
David Hadka
f15bc7a0d9
Fix job names 2020-04-07 23:33:13 -04:00
David Hadka
b6b8aa78d8
Update workflow.yml 2020-04-07 23:31:27 -04:00
David Hadka
4a724707e9
Add test for relative paths 2020-04-07 23:28:05 -04:00
eric sciple
4944275b95
test e2e during workflow (#185) 2020-02-13 12:38:56 -05:00
Josh Gross
23e301d35c
Disable fail-fast to get full coverage of failures 2020-01-29 20:34:56 -05:00
Josh Gross
f0cbadd748
Use cache in workflows (#90) 2019-11-12 17:48:19 -05:00
Josh Gross
4657a5f525
Fix lint on Windows (#89) 2019-11-12 17:01:15 -05:00
BSKY
fb50aa45ec Add initial eslint setup (#88) 2019-11-12 16:48:02 -05:00
Josh Gross
bde557aefd
Fix PR filters 2019-11-07 20:02:06 -05:00
Josh Gross
0e86554410
Ignore all .md files 2019-11-01 10:22:36 -04:00
Josh Gross
aae1376422
Exclude documentation from CI tests (#28) 2019-10-31 17:22:35 -04:00
Josh Gross
889c603691
Update workflow (#1)
* Run workflow on linux, mac, and windows

* Add status badge

* Use npm install instead

* Bump typescript version

* Use node 12.x
2019-10-31 10:37:00 -04:00
Josh Gross
37c45447e4 Initial commit 2019-10-30 14:48:49 -04:00