azure - 使用 Go Task 的 Yaml Azure 管道安装 Terratest 时出现问题 - 在子文件夹中触发 terratest 测试时出现问题

Question

我在通过 azure yaml 管道安装 terratest 时遇到此问题:

C:\hostedtoolcache\windows\go\1.17.1\x64\bin\go.exe install -v github.com/gruntwork-io/<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="6f1b0a1d1d0e1b0a1c1b2f195f415b5f4159" rel="noreferrer noopener nofollow">[email protected]</a>
go: downloading github.com/gruntwork-io/terratest v0.40.6
go install: github.com/gruntwork-io/<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="542031262635203127201422647a60647a62" rel="noreferrer noopener nofollow">[email protected]</a>: module github.com/gruntwork-io/<a href="https://stackoverflow.com/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="2f5b4a5d5d4e5b4a5c5b6f591f011b1f0119" rel="noreferrer noopener nofollow">[email protected]</a> found, but does not contain package github.com/gruntwork-io/terratest
##[error]The Go task failed with an error: Error: The process 'C:\hostedtoolcache\windows\go\1.17.1\x64\bin\go.exe' failed with exit code 1
Finishing: Install Go Terratest module - v0.40.6

我的安装代码如下:

            - task: Go@0
              displayName: Install Go Terratest module - v$(TERRATEST_VERSION)
              inputs:
                command: custom
                customCommand: install
                arguments: $(TF_LOG) github.com/gruntwork-io/terratest@v$(TERRATEST_VERSION)
                workingDirectory: $(pipeline_artefact_folder_extract)/$(pathToTerraformRootModule)

但是peharps我在使用terratest时犯了错误。

以下是我的代码树的屏幕截图:

我在(例如)Terraform\azure_v2_X\ResourceModules 子目录中有 terraform 代码，在 Terraform\azure_v2_X\Tests_Unit_ResourceModules 子目录中有 terratest 测试(在屏幕截图 app_configuration 测试中)对于app_configuration资源模块)。

在我的terratest模块中，我调用我的resourceModule，如以下代码所示:

######test in a un isolated Resource Group defined in locals
module "app_configuration_tobetested" {    
    source = "../../ResourceModules/app_configuration"
    resource_group_name = local.rg_name
    location = local.location
    environment = var.ENVIRONMENT
    sku = "standard"
    // rem : here app_service_shared prefix and app_config_shared prefix are the same !
    app_service_prefix = module.app_configuration_list_fortests.settings.frontEnd_prefix
#    stage = var.STAGE
    app_config_list = module.app_configuration_list_fortests.settings.list_app_config
}

在我的 Go 文件中，我测试了关于我想要的预期结果的模块结果:

package RM_app_configuration_Test

import (
    "os"
    "testing"

    //  "github.com/gruntwork-io/terratest/modules/azure"
    "github.com/gruntwork-io/terratest/modules/terraform"
    "github.com/stretchr/testify/assert"
)

var (
    globalBackendConf = make(map[string]interface{})
    globalEnvVars     = make(map[string]string)
)

func TestTerraform_RM_app_configuration(t *testing.T) {
    t.Parallel()

    // terraform Directory
    fixtureFolder := "./"

    // backend specification
    strlocal := "RMapCfg_"

    // input value
    inputStage       := "sbx_we"
    inputEnvironment := "SBX"
    inputApplication := "DEMO"

    // expected value
    expectedRsgName := "z-adf-ftnd-shrd-sbx-ew1-rgp01"
    //  expectedAppCfgPrefix := "z-adf-ftnd-shrd"
    expectedAppConfigReader_ID := "[/subscriptions/f04c8fd5-d013-41c3-9102-43b25880d2e2/resourceGroups/z-adf-ftnd-shrd-sbx-ew1-rgp01/providers/Microsoft.AppConfiguration/configurationStores/z-adf-ftnd-shrd-sbx-ew1-blue-sbx-cfg01 /subscriptions/f04c8fd5-d013-41c3-9102-43b25880d2e2/resourceGroups/z-adf-ftnd-shrd-sbx-ew1-rgp01/providers/Microsoft.AppConfiguration/configurationStores/z-adf-ftnd-shrd-sbx-ew1-green-sbx-cfg01]"

    // getting enVars from environment variables
    /*
        Go and Terraform uses two differents methods for Azure authentification.
        ** Terraform authentification is explained bellow :
        - https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/service_principal_client_secret#configuring-the-service-principal-in-terraform
        ** Go authentification is explained bellow
        - https://learn.microsoft.com/en-us/azure/developer/go/azure-sdk-authorization#use-environment-based-authentication

        ** Terratest is using both authentification methods regarding the work it has to be done :
        - azure existences tests uses Go azure authentification :
            - https://github.com/gruntwork-io/terratest/blob/master/modules/azure/authorizer.go#L11
        - terraform commands uses terraform authentification :
            - https://github.com/gruntwork-io/terratest/blob/0d654bd2ab781a52e495f61230cf892dfba9731b/modules/terraform/cmd.go#L12
            - https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/service_principal_client_secret#configuring-the-service-principal-in-terraform
        so both authentification methods have to be implemented
    */
    // getting terraform EnvVars from Azure Go environment variables
    ARM_CLIENT_ID := os.Getenv("AZURE_CLIENT_ID")
    ARM_CLIENT_SECRET := os.Getenv("AZURE_CLIENT_SECRET")
    ARM_TENANT_ID := os.Getenv("AZURE_TENANT_ID")
    ARM_SUBSCRIPTION_ID := os.Getenv("ARM_SUBSCRIPTION_ID")

    if ARM_CLIENT_ID != "" {
        globalEnvVars["ARM_CLIENT_ID"] = ARM_CLIENT_ID
        globalEnvVars["ARM_CLIENT_SECRET"] = ARM_CLIENT_SECRET
        globalEnvVars["ARM_SUBSCRIPTION_ID"] = ARM_SUBSCRIPTION_ID
        globalEnvVars["ARM_TENANT_ID"] = ARM_TENANT_ID
    }

    // getting terraform backend from environment variables
    resource_group_name := os.Getenv("resource_group_name")
    storage_account_name := os.Getenv("storage_account_name")
    container_name := os.Getenv("container_name")
    key := strlocal + os.Getenv("key")

    if resource_group_name != "" {
        globalBackendConf["resource_group_name"] = resource_group_name
        globalBackendConf["storage_account_name"] = storage_account_name
        globalBackendConf["container_name"] = container_name
        globalBackendConf["key"] = key
    }

    // User Terratest to deploy the infrastructure
    terraformOptions := terraform.WithDefaultRetryableErrors(t, &terraform.Options{
        // website::tag::1::Set the path to the Terraform code that will be tested.
        // The path to where our Terraform code is located
        TerraformDir: fixtureFolder,
        // Variables to pass to our Terraform code using -var options
        Vars: map[string]interface{}{
            "STAGE":       inputStage,
            "ENVIRONMENT": inputEnvironment,
            "APPLICATION": inputApplication,
        },

        EnvVars: globalEnvVars,

        // backend values to set when initialziing Terraform
        BackendConfig: globalBackendConf,

        // Disable colors in Terraform commands so its easier to parse stdout/stderr
        NoColor: true,
    })

    // website::tag::4::Clean up resources with "terraform destroy". Using "defer" runs the command at the end of the test, whether the test succeeds or fails.
    // At the end of the test, run `terraform destroy` to clean up any resources that were created
    defer terraform.Destroy(t, terraformOptions)

    // website::tag::2::Run "terraform init" and "terraform apply".
    // This will run `terraform init` and `terraform apply` and fail the test if there are any errors
    terraform.InitAndApply(t, terraformOptions)

    // tests the resource_group for the app_configuration
    /*
        actualAppConfigReaderPrefix := terraform.Output(t, terraformOptions, "app_configuration_tested_prefix")
        assert.Equal(t, expectedAppCfgprefix, actualAppConfigReaderPrefix)
    */
    actualRSGReaderName := terraform.Output(t, terraformOptions, "app_configuration_tested_RG_name")
    assert.Equal(t, expectedRsgName, actualRSGReaderName)

    actualAppConfigReader_ID := terraform.Output(t, terraformOptions, "app_configuration_tobetested_id")
    assert.Equal(t, expectedAppConfigReader_ID, actualAppConfigReader_ID)
}

事实是在本地，我可以从我的主文件夹 Terraform\Azure_v2_X\Tests_Unit_ResourceModules 执行以下命令来触发原始的所​​有测试:

• (来自 Go v1.11)

Go test ./...

使用 Go 版本 1.12，我可以设置 GO111MODULE=auto 以获得相同的结果。但在 Go 1.17 中，我现在必须设置 GO111MODULE=off 来触发我的测试。

目前，我有两个主要问题困扰着我:

1. 如何从 azure Pipeline 导入 Terratest(和其他)模块？

2. 我需要做什么才能正确使用 terratest 的 Go 模块？我的主文件夹 _Terraform\Azure_v2_X\Tests_Unit_ResourceModules_ 中没有 Go 代码，并且希望在 Azure Pipeline 中的简单命令行中触发所有子文件夹 go 测试。

感谢您提供的任何帮助。

最诚挚的问候，

Answer 1

我将再次回答我自己的问题。 :D

所以，现在使用以下版本:

• -- 政府:1.17.1
• -- TERRAFORM_VERSION:1.1.7
• -- TERRATEST_VERSION:0.40.6

关于 terratest 测试，文件夹层次结构已进行以下更改:

我不再尝试导入我的 Terratest 模块。(显然，上面的第 1 点已得到解答)

我现在只需要:

1. 对我的每个 terratest 模块进行 mod
2. 使用脚本逐一触发它们

所以我的管道变成了以下内容:

    - task: ms-devlabs.custom-terraform-tasks.custom-terraform-installer-task.TerraformInstaller@0
      displayName: Install Terraform $(TERRAFORM_VERSION)
      inputs:
         terraformVersion: $(TERRAFORM_VERSION)

    - task: GoTool@0
      displayName: 'Use Go $(GOVERSION)'
      inputs:
        version: $(GOVERSION)
        goPath: $(GOPATH)
        goBin: $(GOBIN)

    - task: PowerShell@2
      displayName: run Terratest for $(pathToTerraformRootModule)
      inputs:
        targettype : 'filePath'
        filePath: $(pipeline_artefact_folder_extract)/$(pathToTerraformRootModule)/$(Run_Terratest_script)
        workingDirectory: $(pipeline_artefact_folder_extract)/$(pathToTerraformRootModule)
      env:
        # see https://learn.microsoft.com/en-us/azure/developer/go/azure-sdk-authorization#use-environment-based-authentication
        # for Azure authentification with Go
        ARM_SUBSCRIPTION_ID: $(TF_VAR_ARM_SUBSCRIPTION_ID)
        AZURE_CLIENT_ID: $(TF_VAR_ARM_CLIENT_ID)
        AZURE_TENANT_ID: $(TF_VAR_ARM_TENANT_ID)
        AZURE_CLIENT_SECRET: $(TF_VAR_ARM_CLIENT_SECRET) # set as pipeline secret
        resource_group_name: $(storageAccountResourceGroup)
        storage_account_name: $(storageAccount)
        container_name: $(stateBlobContainer)
        key: '$(MODULE)-$(TF_VAR_APPLICATION)-$(TF_VAR_ENVIRONMENT).tfstate'
        GO111MODULE: 'auto'

在我的 terratest 子文件夹的主文件夹中，我有 run_terratests.ps1 脚本和 Terratests 列表文件，如下所示:

run_terratests.ps1

# this file is based on https://github.com/google/go-cloud/blob/master/internal/testing/runchecks.sh
#
# This script runs all go Terratest suites,
# compatibility checks, consistency checks, Wire, etc.

$moduleListFile = "./Terratests"
# regex to filter : not began with #
$regexFilter = "^[^#]"

# read the ModuleListFile
[object] $arrayFromFile = Get-Content -Path $moduleListFile | Where-Object { $_ -match $regexFilter} | ConvertFrom-String -PropertyNames folder, totest

$result = 0 # set no error by default
# get the actual folder 
$main_path = Get-Location | select -ExpandProperty "Path"
#read the array to show if to be tested !
foreach ($line in $arrayFromFile) {
    # write-Host $line
    if ($line.totest -eq "yes") {
        $path = $line.folder
        set-location $main_path\$path
        $myPath = Get-Location
        # Write-Host $myPath
        # trigger terratest for files
        Go test ./...
    }
    if ($false -eq $?)
    {
        $result = 1
    }    
}
# back to school :D
set-location $main_path

if ($result -eq 1)
{
    Write-Error "Msbuild exit code indicate test failure."
    Write-Host "##vso[task.logissue type=error]Msbuild exit code indicate test failure."
    exit(1)
}

代码

  if ($false -eq $?)
    {
        $result = 1
    }  

对于使管道在测试错误时失败而不逃避其他测试很有用。

地形测试

# this file lists all the modules to be tested in the "Tests_Unit_ConfigHelpers" repository.
# it us used by the "run_terratest.ps1" powershell script to trigger terratest for each test.
#
# Any line that doesn't begin with a '#' character and isn't empty is treated
# as a path relative to the top of the repository that has a module in it.
# The 'tobetested' field specifies whether this is a module that have to be tested.
#
# this file is based on https://github.com/google/go-cloud/blob/master/allmodules

# module-directory              tobetested
azure_constants                     yes
configure_app_srv_etc               yes
configure_frontdoor_etc             yes
configure_hostnames                 yes
constants                           yes
FrontEnd_AppService_slots/_main     yes
FrontEnd_AppService_slots/settings  yes
merge_maps_of_strings               yes
name                                yes
name_template                       yes
network/hostname_generator          yes
network/hostnames_generator         yes
replace_2vars_into_string_etc       yes
replace_var_into_string_etc         yes
sorting_map_with_an_other_map       yes

每个 terratest 文件夹中的更改是我将添加 go.mod 和 go.sum 文件:

$ go mod init mytest
go: creating new go.mod: module mytest
go: to add module requirements and sums:
go mod tidy

和

$ go mod tidy
# link each of the go modules needed for your terratest module

因此，powershell 脚本中的 go test ./... 将下载所需的 go 模块并运行该特定测试的测试。

感谢您的阅读，如果您认为有帮助，请投票:)