[WIP] ipa-keycloak: Test IPA-Keycloak integration with Github Action

This Github workflow uses FreeIPA-Cluster-Test to run a simple login
test against the IPA-Keycloak integration environment.

Signed-off-by: Rafael Guterres Jeffman <[email protected]>

Author: rjeffman

.github/workflows/test-ipa-keycloak.yml

@@ -0,0 +1,134 @@
+---
+name: test-ipa-keycloak-with-action
+run-name: Run local FreeIPA tests using a Github Action
+on:
+  push:
+    # branches:
+    #   - main
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test-ipa-keycloak:
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Clone the repository
+        uses: actions/checkout@v4
+
+      - name: Create environment with FreeIPA-Cluster-Test
+        uses: rjeffman/[email protected]
+        with:
+          cluster_configuration: ipalab-config/ipa-keycloak/lab_ipa_keycloak.yml
+          shutdown: false
+
+      - name: Trust Keycloak certificate
+        shell: bash
+        run: keycloak/trust_keycloak.sh server
+
+      - name: Add Keycloak OIDC client
+        shell: bash
+        run: keycloak/keycloak_add_oidc_client.sh  server.ipa.test ipa_oidc_client Secret123
+
+      - name: Create Keycloak user
+        shell: bash
+        run: keycloak/keycloak_add_user.sh jdoe [email protected] userPASS
+
+      - name: Configure Keycloak as an IPA IDP endpoint
+        shell: bash
+        run: ansible-playbook -i inventory.yml playbooks/idp_keycloak.yml
+
+      - name: "Add user with 'auth-type: idp'"
+        shell: bash
+        run: ansible-playbook -i inventory.yml playbooks/add_user_auth_idp.yml
+
+      #
+      # The comments below are yet to be implemented as the actual login
+      # requires the access of a one-time link and typing in the console.
+      #
+
+      # - name: Login user jdoe in Keycloak
+
+      # - name: Authorize ipa_oidc_client device authentication for user jdoe
+
+      # - name: Authenticate jdoe on IPA
+      #   shell: bash
+      #   run: |
+      #     podman exec server kinit -n -c /fast.ccache
+      #     podman exec -it server kinit -T /fast.ccache jdoe
+      #     # Retrieve login link
+      #     # Authorize login within keycloak
+      #     # Send ENTER to shell
+
+      - name: Shutdown environment
+        uses: rjeffman/[email protected]
+        with:
+          cluster_configuration: ipalab-config/ipa-keycloak/lab_ipa_keycloak.yml
+          shutdown: true
+
+  minimal-demo:
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Clone the repository
+        uses: actions/checkout@v4
+
+      - name: Build image
+        id: build-image
+        uses: redhat-actions/buildah-build@v2
+        with:
+          image: ipalab-minimal-demo
+          tags: latest
+          containerfiles: ipalab-config/minimal/Containerfile.minimal
+
+      - name: Create environment and record a demo
+        uses: rjeffman/[email protected]
+        with:
+          cluster_configuration: ipalab-config/minimal/minimal.yaml
+
+      - name: Collect server logs in case of a test failure
+        shell: bash
+        if: failure()
+        run: |
+          podman exec -ti dc.minimal.test ls -laR /var/log
+          mkdir -p CONFIG_DIR/results
+          podman exec -ti dc.minimal.test dnf -y install sos
+          podman exec -ti dc.minimal.test sos report \
+                          --profile={identity,webserver,security,system,network} \
+                          -a --all-logs --batch
+          podman exec dc.minimal.test sh -c 'ls /var/tmp/sosreport*' | while read f ; do
+              podman cp dc.minimal.test:$f CONFIG_DIR/results/
+          done
+
+      - name: Upload server logs
+        uses: actions/upload-artifact@v4
+        if: failure()
+        with:
+          name: server-logs
+          path: CONFIG_DIR/results/sosreport*
+          if-no-files-found: ignore
+
+
+      - name: Record demo
+        shell: bash
+        if: success()
+        run: |
+          source venv/bin/activate
+          cd CONFIG_DIR
+          ansible-playbook -i inventory.yml playbooks/record-demo.yaml
+
+      - name: Upload the demo recording
+        uses: actions/upload-artifact@v4
+        if: success()
+        with:
+          name: minimal-demo
+          path: CONFIG_DIR/results/basic-demo.webm
+          if-no-files-found: ignore
+
+      - name: Shut down the environment
+        shell: bash
+        if: always()
+        run: |
+          source venv/bin/activate
+          cd CONFIG_DIR
+          podman-compose down