EVEREST-1023 EVEREST-1025 | [feat] User account management

.github/actions/fe-e2e/action.yml

@@ -11,9 +11,13 @@ inputs:
     type: string
   BACKUP_LOCATION_URL:
     type: string
+  CI_USER:
+    type: string
+  CI_PASSWORD:
+    type: string
 
 runs:
-  using: "composite"
+  using: 'composite'
   steps:
     - uses: pnpm/action-setup@v3
       with:
@@ -118,6 +122,14 @@ runs:
       run: |
         kubectl port-forward -n everest-system deployment/percona-everest 8080:8080 &
 
+    - name: Create Everest test user
+      shell: bash
+      env:
+        CI_USER: '${{ inputs.CI_USER }}'
+        CI_PASSWORD: '${{ inputs.CI_PASSWORD }}'
+      run: |
+        ./bin/everestctl accounts create -u ${CI_USER} -p ${CI_PASSWORD}
+
     - name: Run Everest
       shell: bash
       run: |
@@ -134,6 +146,8 @@ runs:
     - name: Run integration tests
       shell: bash
       env:
+        CI_USER: '${{ inputs.CI_USER }}'
+        CI_PASSWORD: '${{ inputs.CI_PASSWORD }}'
         EVEREST_LOCATION_BUCKET_NAME: '${{ inputs.BACKUP_LOCATION_BUCKET_NAME }}'
         EVEREST_LOCATION_ACCESS_KEY: '${{ inputs.BACKUP_LOCATION_ACCESS_KEY }}'
         EVEREST_LOCATION_SECRET_KEY: '${{ inputs.BACKUP_LOCATION_SECRET_KEY }}'

.github/workflows/dev-be-ci.yaml

@@ -332,10 +332,6 @@ jobs:
             --skip-wizard \
             --namespaces everest
 
-          # API_TOKEN is used later by "make test"
-          echo "API_TOKEN=$(./bin/everestctl token reset --json | jq .token -r)" >> $GITHUB_ENV
-
-
       - name: Patch Everest Deployment to use the PR image
         run: |
           kubectl -n everest-system patch deployment percona-everest --type strategic --patch-file dev/patch-deployment-image.yaml
@@ -345,6 +341,11 @@ jobs:
         run: |
           kubectl port-forward --namespace everest-system deployment/percona-everest 8080:8080 &
 
+      - name: Create Everest test user
+        run: |
+          ./bin/everestctl accounts create -u everest_ci -p password
+          echo "API_TOKEN=$(curl --location -s 'localhost:8080/v1/session' --header 'Content-Type: application/json' --data '{"username": "everest_ci","password": "password"}' | jq -r .token)" >> $GITHUB_ENV
+
       - name: Run integration tests
         run: |
           cd api-tests

.github/workflows/dev-fe-e2e.yaml

@@ -13,6 +13,10 @@ on:
         required: true
       BACKUP_LOCATION_URL:
         required: true
+      CI_USER:
+        required: true
+      CI_PASSWORD:
+        required: true
 
 jobs:
   e2e:
@@ -120,6 +124,11 @@ jobs:
         run: |
           echo "EVEREST_K8_TOKEN=$(./bin/everestctl token reset --json | jq .token -r)" >> $GITHUB_ENV
 
+      - name: Create Everest test user
+        shell: bash
+        run: |
+          ./bin/everestctl accounts create -u ${{ secrets.CI_USER }} -p ${{ secrets.CI_PASSWORD }}
+
       - name: Expose Everest API Server
         shell: bash
         run: |
@@ -146,8 +155,10 @@ jobs:
           EVEREST_LOCATION_SECRET_KEY: '${{ secrets.BACKUP_LOCATION_SECRET_KEY }}'
           EVEREST_LOCATION_REGION: '${{ secrets.BACKUP_LOCATION_REGION }}'
           EVEREST_LOCATION_URL: '${{ secrets.BACKUP_LOCATION_URL }}'
+          CI_USER: '${{ secrets.CI_USER }}'
+          CI_PASSWORD: '${{ secrets.CI_PASSWORD }}'
           MONITORING_USER: 'admin'
           MONITORING_PASSWORD: 'admin'
         run: |
           cd ui
-          pnpm --filter "@percona/everest" e2e
+          pnpm --filter "@percona/everest" e2e

.github/workflows/dev-fe-gatekeeper.yaml

@@ -123,7 +123,7 @@ jobs:
         run: |
           echo "${{ github.triggering_actor }} does not have permissions on this repo."
           exit 1
-          
+
   E2E_tests_workflow:
     uses: ./.github/workflows/dev-fe-e2e.yaml
     secrets:
@@ -132,7 +132,8 @@ jobs:
       BACKUP_LOCATION_SECRET_KEY: ${{ secrets.BACKUP_LOCATION_SECRET_KEY }}
       BACKUP_LOCATION_REGION: ${{ secrets.BACKUP_LOCATION_REGION }}
       BACKUP_LOCATION_URL: ${{ secrets.BACKUP_LOCATION_URL }}
-
+      CI_USER: ${{ secrets.CI_USER }}
+      CI_PASSWORD: ${{ secrets.CI_PASSWORD }}
 
   # e2e_execution:
   #   needs: permission_checks