Skip to content

ci(stepup-behat): generate HAProxy dev certificate before compose up #98

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kayjoosten merged 7 commits into from
Sep 18, 2026
Merged

ci(stepup-behat): generate HAProxy dev certificate before compose up #98

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
258072c
ci(stepup-behat): generate HAProxy dev certificate before compose up
kayjoosten Sep 4, 2026
74b4649
ci(stepup-behat): distribute dev CA cert to app containers
kayjoosten Sep 8, 2026
4faa694
fix(stepup-selfservice): keep logout redirects local
kayjoosten Sep 8, 2026
4713eb4
fix(stepup-selfservice): merge logout redirect override
kayjoosten Sep 9, 2026
856a4ee
Revert incorrect selfservice config merge change
kayjoosten Sep 9, 2026
c758bb4
ci(stepup-behat): also guard on missing haproxy CA cert
kayjoosten Sep 17, 2026
5295ca0
fix(stepup-selfservice): drop local parameters.yaml override
kayjoosten Sep 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions .github/workflows/stepup-behat.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,13 @@ jobs:
cd stepup
cp .env.test .env
cp gateway/surfnet_yubikey.yaml.dist gateway/surfnet_yubikey.yaml
if [ ! -f ../core/haproxy/haproxy.pem ] || [ ! -f ../core/haproxy/haproxy.crt ]; then
../core/scripts/create_dev_ca.sh
fi
# Distribute the dev CA to the app containers: the base image imports
# /config/haproxy/haproxy.crt on startup so services trust each other
# over HAProxy TLS. start-dev-env.sh does this copy; CI must too.
cp ../core/haproxy/haproxy.crt haproxy/haproxy.crt
${DOCKER_COMPOSE} up -d
- name: Install composer dependencies on the Behat container
run: |
Expand Down
4 changes: 2 additions & 2 deletions stepup/tests/behat/features/bootstrap/SelfServiceContext.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -78,9 +78,9 @@ public function logoutOfSelfService()

$this->minkContext->pressButton('Sign out');

$expectBaseUrl = 'https://www.surf.nl/';
$expectBaseUrl = 'https://ssp.dev.openconext.local/';
if (substr($this->minkContext->getSession()->getCurrentUrl(), 0, strlen($expectBaseUrl)) !== $expectBaseUrl) {
throw new Exception("after logout we should be redirected to the surf domain");
throw new Exception("after logout we should be redirected to the local test SP domain");
}
}

Expand Down
Loading