Add tls tests for dapr

Author: Tim Middleton

.github/workflows/build-dapr-tls.yaml

@@ -0,0 +1,85 @@
+# Copyright 2024, 2025 Oracle Corporation and/or its affiliates.
+# Licensed under the Universal Permissive License v 1.0 as shown at
+# https://oss.oracle.com/licenses/upl.
+
+# ---------------------------------------------------------------------------
+# Coherence Go Client GitHub Actions CI build DAPR TLS
+# ---------------------------------------------------------------------------
+name: CI DAPR TLS
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - '*'
+  schedule:
+    # Every day at midnight
+    - cron: '0 0 * * *'
+
+jobs:
+  build:
+    runs-on: ubuntu-22.04
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    strategy:
+      fail-fast: false
+      matrix:
+        coherenceVersion:
+          - 25.09-SNAPSHOT
+          - 25.03.1
+        go-version:
+          - 1.24.x
+
+#   Checkout the source, we need a depth of zero to fetch all of the history otherwise
+#   the copyright check cannot work out the date of the files from Git.
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+
+    - name: Get Docker Images
+      shell: bash
+      run: |
+        docker pull gcr.io/distroless/java17-debian12
+
+    - name: Set up JDK 17 for Build
+      uses: actions/setup-java@v4
+      with:
+        java-version: '17'
+        distribution: 'zulu'
+
+    - name: Cache Go Modules
+      uses: actions/cache@v4
+      with:
+        path: ~/go/pkg/mod
+        key: ${{ runner.os }}-go-mods-${{ hashFiles('**/go.sum') }}
+        restore-keys: |
+          ${{ runner.os }}-go-mods-
+
+    - name: Cache Maven packages
+      uses: actions/cache@v4
+      with:
+        path: ~/.m2
+        key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+        restore-keys: ${{ runner.os }}-m2
+
+    - name: Set up Go
+      uses: actions/setup-go@v5
+      with:
+        go-version: '${{ matrix.go-version }}'
+
+    - name: Test DAPR
+      env:
+        COH_VERSION: ${{ matrix.coherenceVersion }}
+      shell: bash
+      run: |
+        go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.5.1
+        COHERENCE_BASE_IMAGE=gcr.io/distroless/java17-debian12 PROFILES=,jakarta,-javax COHERENCE_VERSION=$COH_VERSION make certs clean generate-proto generate-proto-v1 build-test-images test-cluster-startup
+        make test-dapr
+        make test-cluster-shutdown
+
+    - uses: actions/upload-artifact@v4
+      if: failure()
+      with:
+        name: test-output-${{ matrix.go-version }}-${{ matrix.coherenceVersion }}
+        path: build/_output/test-logs

Makefile

@@ -476,6 +476,13 @@ test-examples: test-clean gotestsum $(BUILD_PROPS) ## Run examples tests with Co
 test-dapr: test-clean gotestsum $(BUILD_PROPS) ## Run dapr tests with Coherence
 	./scripts/run-test-dapr.sh $(DAPR_TEST_DIR) $(DAPR_DIR)
 
+# ----------------------------------------------------------------------------------------------------------------------
+# Executes the tests for DAPR TLS
+# ----------------------------------------------------------------------------------------------------------------------
+.PHONY: test-dapr-tls
+test-dapr-tls: test-clean gotestsum $(BUILD_PROPS) ## Run dapr tests with Coherence with TLS
+	./scripts/run-test-dapr.sh $(DAPR_TEST_DIR) $(DAPR_DIR) true
+
 # ----------------------------------------------------------------------------------------------------------------------
 # Startup cluster members via docker compose
 # ----------------------------------------------------------------------------------------------------------------------

scripts/run-test-dapr.sh

@@ -8,18 +8,25 @@
 
 set -e
 
-if [ $# -ne 2 ]; then
+if [ $# -lt 2 ]; then
    echo "You must specify the dapr test directory and dapr dir to install to"
    exit 1
 fi
 
+TLS=false
+
+if [ $# -eq 3 && "$3" == "tls" ]; then
+  TLS=true
+fi
+
 DAPR_TEST_DIR=$1
 DAPR_TEST_HOME=$2
 
 mkdir -p $DAPR_TEST_HOME
 
 echo "DAPR Test Dir:  $DAPR_TEST_DIR"
 echo "DAPR Test Home: $DAPR_TEST_HOME"
+echo "TLS:            $TLS"
 
 echo "Install DAPR"
 OS=`uname`
@@ -108,7 +115,12 @@ cd $DAPR_TEST_DIR
 cd my-dapr-app
 go mod tidy
 
-dapr run --app-id myapp --resources-path ./components/ --log-level debug  -- go run main.go
+COMPONENTS=./components/
+if [ "$TLS" == "true" ]; then
+  COMPONENTS=./components-tls/
+fi
+
+dapr run --app-id myapp --resources-path $COMPONENTS --log-level debug  -- go run main.go
 
 # Verify the caches
 cohctl get cache -o wide

test/dapr/my-dapr-app/components-tls/coherence.yaml

@@ -0,0 +1,25 @@
+#
+# Copyright (c) 2025 Oracle and/or its affiliates.
+# Licensed under the Universal Permissive License v 1.0 as shown at
+# https://oss.oracle.com/licenses/upl.
+#
+apiVersion: dapr.io/v1alpha1
+kind: Component
+metadata:
+  name: statestore
+spec:
+  type: state.coherence
+  version: v1
+  metadata:
+    - name: serverAddress
+      value: localhost:1408
+    - name: tlsEnabled
+      value: true
+    - name: tlsClientCertPath
+      value: ../../utils/certs/star-lord.crt
+    - name: tlsClientKey
+      value: ../../utils/certs/star-lord.key
+    - name: tlsCertsPath
+      value: ../../utils/certs/guardians-ca.crt
+    - name: ignoreInvalidCerts
+      value: true