ci: add workflow_dispatch trigger for manual runs #14

Workflow file for this run

	name: CI

	on:
	push:
	branches: [main, develop, 'feature/', 'bugfix/']
	pull_request:
	branches: [main, develop]
	workflow_dispatch:

	permissions:
	contents: read
	security-events: write

	jobs:
	validate:
	name: Validate Configuration
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Validate Docker Compose files
	run: \|
	for f in docker/docker-compose.*.yml; do
	echo "Validating: $f"
	docker compose -f "$f" config --no-interpolate -q
	done

	- name: ShellCheck — lab test scripts
	run: \|
	sudo apt-get install -y shellcheck -qq
	shellcheck --severity=error tests/labs/*.sh

	- name: Validate module manifest
	run: \|
	python3 -c "
	import sys, re
	with open('it-stack-mattermost.yml') as f:
	content = f.read()
	required = ['module:', 'version:', 'phase:', 'category:', 'ports:']
	missing = [k for k in required if k not in content]
	if missing:
	print('Missing fields:', missing); sys.exit(1)
	print('Manifest valid')
	"

	security-scan:
	name: Security Scan
	runs-on: ubuntu-latest
	needs: validate
	steps:
	- uses: actions/checkout@v4

	- name: Trivy — scan Dockerfile
	uses: aquasecurity/trivy-action@0.28.0
	with:
	scan-type: config
	scan-ref: .
	exit-code: '0'
	severity: CRITICAL,HIGH

	- name: Trivy — SARIF output
	uses: aquasecurity/trivy-action@0.28.0
	with:
	scan-type: config
	scan-ref: .
	format: sarif
	output: trivy-results.sarif

	- name: Upload SARIF to GitHub Security
	uses: github/codeql-action/upload-sarif@v3
	if: always()
	with:
	sarif_file: trivy-results.sarif

	lab-01-smoke:
	name: Lab 01 — Mattermost standalone (API ping, team, channel, post)
	runs-on: ubuntu-latest
	needs: validate
	continue-on-error: true
	steps:
	- uses: actions/checkout@v4

	- name: Install tools
	run: sudo apt-get install -y curl

	- name: Validate standalone compose
	run: \|
	docker compose -f docker/docker-compose.standalone.yml config -q
	echo "Standalone compose valid"

	- name: Start standalone stack
	run: docker compose -f docker/docker-compose.standalone.yml up -d

	- name: Wait for PostgreSQL
	run: timeout 60 bash -c 'until docker compose -f docker/docker-compose.standalone.yml exec -T db pg_isready -U mmuser; do sleep 3; done'

	- name: Wait for Mattermost API
	run: timeout 120 bash -c 'until curl -sf http://localhost:8065/api/v4/system/ping \| grep -q OK; do sleep 5; done'

	- name: Run Lab 07-01 test script
	run: bash tests/labs/test-lab-07-01.sh

	- name: Collect logs on failure
	if: failure()
	run: docker compose -f docker/docker-compose.standalone.yml logs

	- name: Cleanup
	if: always()
	run: docker compose -f docker/docker-compose.standalone.yml down -v

	lab-02-smoke:
	name: Lab 02 — Mattermost LAN (PG, Redis, mailhog SMTP)
	runs-on: ubuntu-latest
	needs: validate
	continue-on-error: true
	steps:
	- uses: actions/checkout@v4

	- name: Install tools
	run: sudo apt-get install -y curl

	- name: Validate LAN compose
	run: docker compose -f docker/docker-compose.lan.yml config -q && echo "LAN compose valid"

	- name: Start LAN stack
	run: docker compose -f docker/docker-compose.lan.yml up -d

	- name: Wait for PostgreSQL
	run: timeout 60 bash -c 'until docker compose -f docker/docker-compose.lan.yml exec -T db pg_isready -U mmuser -d mattermost; do sleep 3; done'

	- name: Wait for Redis
	run: timeout 30 bash -c 'until docker compose -f docker/docker-compose.lan.yml exec -T redis redis-cli ping \| grep -q PONG; do sleep 2; done'

	- name: Wait for Mattermost API
	run: timeout 120 bash -c 'until curl -sf http://localhost:8065/api/v4/system/ping \| grep -q status; do sleep 5; done'

	- name: Run Lab 07-02 test script
	run: bash tests/labs/test-lab-07-02.sh

	- name: Collect logs on failure
	if: failure()
	run: docker compose -f docker/docker-compose.lan.yml logs

	- name: Cleanup
	if: always()
	run: docker compose -f docker/docker-compose.lan.yml down -v

	lab-03-smoke:
	name: Lab 03 - Mattermost Advanced (resource limits, file size, perf tuning)
	runs-on: ubuntu-latest
	needs: validate
	continue-on-error: true
	steps:
	- uses: actions/checkout@v4
	- name: Install tools
	run: sudo apt-get install -y curl
	- name: Validate advanced compose
	run: docker compose -f docker/docker-compose.advanced.yml config -q && echo "Advanced compose valid"
	- name: Start advanced stack
	run: docker compose -f docker/docker-compose.advanced.yml up -d
	- name: Wait for PostgreSQL
	run: timeout 60 bash -c 'until docker compose -f docker/docker-compose.advanced.yml exec -T db pg_isready -U mmuser -d mattermost; do sleep 3; done'
	- name: Wait for Mattermost API
	run: timeout 120 bash -c 'until curl -sf http://localhost:8065/api/v4/system/ping \| grep -q status; do sleep 5; done'
	- name: Run Lab 07-03 test script
	run: bash tests/labs/test-lab-07-03.sh
	- name: Collect logs on failure
	if: failure()
	run: docker compose -f docker/docker-compose.advanced.yml logs
	- name: Cleanup
	if: always()
	run: docker compose -f docker/docker-compose.advanced.yml down -v
	lab-04-smoke:
	name: Lab 04 — Mattermost SSO Integration (Keycloak OIDC)
	runs-on: ubuntu-latest
	needs: validate
	continue-on-error: true
	steps:
	- uses: actions/checkout@v4
	- name: Install tools
	run: sudo apt-get install -y curl
	- name: Validate SSO compose
	run: docker compose -f docker/docker-compose.sso.yml config -q && echo "SSO compose valid"
	- name: Start SSO stack
	run: docker compose -f docker/docker-compose.sso.yml up -d
	- name: Wait for Keycloak
	run: timeout 120 bash -c 'until curl -sf http://localhost:8085/health/ready \| grep -q UP; do sleep 5; done'
	- name: Wait for PostgreSQL
	run: timeout 60 bash -c 'until docker compose -f docker/docker-compose.sso.yml exec -T db pg_isready -U mmuser -d mattermost; do sleep 3; done'
	- name: Wait for Mattermost API
	run: timeout 120 bash -c 'until curl -sf http://localhost:8065/api/v4/system/ping \| grep -q status; do sleep 5; done'
	- name: Run Lab 07-04 test script
	run: bash tests/labs/test-lab-07-04.sh
	- name: Collect logs on failure
	if: failure()
	run: docker compose -f docker/docker-compose.sso.yml logs
	- name: Cleanup
	if: always()
	run: docker compose -f docker/docker-compose.sso.yml down -v
	lab-05-smoke:
	name: Lab 05 — INT-03 Mattermost↔Keycloak OIDC (LDAP seed + federation + token flow)
	runs-on: ubuntu-latest
	needs: validate
	continue-on-error: true
	steps:
	- uses: actions/checkout@v4
	- name: Install tools
	run: sudo apt-get install -y curl ldap-utils python3
	- name: Validate integration compose
	run: docker compose -f docker/docker-compose.integration.yml config -q && echo "Integration compose valid"
	- name: Start integration stack
	run: docker compose -f docker/docker-compose.integration.yml up -d
	- name: Wait for OpenLDAP
	run: timeout 120 bash -c 'until docker exec mm-int-ldap ldapsearch -x -H ldap://localhost -b dc=lab,dc=local -D cn=admin,dc=lab,dc=local -w LdapAdmin05! > /dev/null 2>&1; do sleep 5; done'
	- name: Wait for LDAP seed to complete
	run: timeout 60 bash -c 'until [ "$(docker inspect --format={{.State.Status}} mm-int-ldap-seed 2>/dev/null)" = "exited" ]; do sleep 3; done'
	- name: Wait for Keycloak
	run: timeout 240 bash -c 'until curl -sf http://localhost:8106/health/ready \| grep -q UP; do sleep 5; done'
	- name: Wait for MinIO
	run: timeout 120 bash -c 'until curl -sf http://localhost:9100/minio/health/live; do sleep 5; done'
	- name: Wait for Mattermost
	run: timeout 300 bash -c 'until curl -sf http://localhost:8105/api/v4/system/ping \| grep -q "\"status\":\"OK\""; do sleep 10; done'
	- name: Run Lab 07-05 test script
	run: bash tests/labs/test-lab-07-05.sh --no-cleanup
	- name: Collect logs on failure
	if: failure()
	run: docker compose -f docker/docker-compose.integration.yml logs
	- name: Cleanup
	if: always()
	run: docker compose -f docker/docker-compose.integration.yml down -v


	lab-06-smoke:
	name: Lab 06 -- Mattermost Production Deployment (resource limits + metrics)
	runs-on: ubuntu-latest
	needs: validate
	continue-on-error: true
	steps:
	- uses: actions/checkout@v4
	- name: Install tools
	run: sudo apt-get install -y curl ldap-utils
	- name: Validate production compose
	run: docker compose -f docker/docker-compose.production.yml config -q && echo "Production compose valid"
	- name: Start production stack
	run: docker compose -f docker/docker-compose.production.yml up -d
	- name: Wait for Keycloak
	run: timeout 240 bash -c 'until curl -sf http://localhost:8206/health/ready \| grep -q UP; do sleep 5; done'
	- name: Wait for OpenLDAP
	run: timeout 120 bash -c 'until docker exec mm-prod-ldap ldapsearch -x -H ldap://localhost -b dc=lab,dc=local -D cn=admin,dc=lab,dc=local -w LdapProd06! > /dev/null 2>&1; do sleep 5; done'
	- name: Wait for MinIO
	run: timeout 120 bash -c 'until curl -sf http://localhost:9110/minio/health/live; do sleep 5; done'
	- name: Wait for Mattermost
	run: timeout 300 bash -c 'until curl -sf http://localhost:8205/api/v4/system/ping \| grep -q "\"status\":\"OK\""; do sleep 10; done'
	- name: Run Lab 07-06 test script
	run: bash tests/labs/test-lab-07-06.sh --no-cleanup
	- name: Collect logs on failure
	if: failure()
	run: docker compose -f docker/docker-compose.production.yml logs
	- name: Cleanup
	if: always()
	run: docker compose -f docker/docker-compose.production.yml down -v

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ci: add workflow_dispatch trigger for manual runs #14

Workflow file

ci: add workflow_dispatch trigger for manual runs #14

Uh oh!

Workflow file for this run