feat: add E2E infrastructure with OCI images, Helm chart, and test crate

.github/workflows/ci.yml

@@ -72,12 +72,93 @@ jobs:
     name: "L3 · E2E Kind"
     needs: [eval-http, csi-grpc]
     runs-on: ubuntu-latest
-    if: false  # placeholder — enable when container images exist
     steps:
       - uses: actions/checkout@v4
       - uses: DeterminateSystems/nix-installer-action@main
       - uses: DeterminateSystems/magic-nix-cache-action@main
+
+      # Build all OCI images in a single nix build (shared cargoArtifacts)
+      - name: Build images
+        run: nix build .#all-images -o result-images
+
+      # Create kind cluster
       - uses: helm/kind-action@v1
         with:
           cluster_name: niphas-test
-      - run: nix develop -c cargo nextest run --workspace --test 'e2e_*'
+          config: hack/kind-config.yaml
+
+      # Load images into kind
+      - name: Load images into kind
+        run: |
+          kind load image-archive result-images/operator.tar.gz --name niphas-test
+          kind load image-archive result-images/eval.tar.gz --name niphas-test
+          kind load image-archive result-images/csi.tar.gz --name niphas-test
+          kind load image-archive result-images/runner.tar.gz --name niphas-test
+          kind load image-archive result-images/mock-eval.tar.gz --name niphas-test
+
+      # Label nodes for CSI
+      - name: Label nodes
+        run: kubectl label nodes --all niphas.io/store=true
+
+      # Verify CRD freshness
+      - name: Verify CRD freshness
+        run: |
+          nix develop -c cargo run --bin niphas-crd-gen 2>/dev/null | grep -v '^niphas devShell ready$' | diff charts/niphas/crds/niphasworkloads.yaml -
+
+      # Install Helm chart
+      - name: Install niphas
+        run: |
+          nix develop -c helm install niphas charts/niphas \
+            --namespace niphas-system \
+            --create-namespace \
+            --set operator.image.pullPolicy=Never \
+            --set operator.image.tag=dev \
+            --set eval.image.repository=ghcr.io/fullzer4/niphas-mock-eval \
+            --set eval.image.pullPolicy=Never \
+            --set eval.image.tag=dev \
+            --set csi.image.pullPolicy=Never \
+            --set csi.image.tag=dev \
+            --set runner.image.tag=dev
+
+      # Wait for rollout
+      - name: Wait for deployments
+        run: |
+          kubectl -n niphas-system rollout status deployment/niphas-operator --timeout=120s
+          kubectl -n niphas-system rollout status deployment/niphas-eval --timeout=120s
+          kubectl -n niphas-system rollout status daemonset/niphas-csi --timeout=120s
+
+      # Debug on failure
+      - name: Debug pods on failure
+        if: failure()
+        run: |
+          echo "=== Pod status ==="
+          kubectl -n niphas-system get pods -o wide
+          echo "=== Pod descriptions ==="
+          kubectl -n niphas-system describe pods
+          echo "=== CSI logs ==="
+          kubectl -n niphas-system logs -l app.kubernetes.io/name=niphas-csi --all-containers --tail=50 || true
+          echo "=== Operator logs ==="
+          kubectl -n niphas-system logs -l app.kubernetes.io/name=niphas-operator --tail=50 || true
+          echo "=== Eval logs ==="
+          kubectl -n niphas-system logs -l app.kubernetes.io/name=niphas-eval --tail=50 || true
+          echo "=== Events ==="
+          kubectl -n niphas-system get events --sort-by=.lastTimestamp
+
+      # Create e2e namespace
+      - name: Create e2e namespace
+        run: kubectl create namespace niphas-e2e
+
+      # Port-forward
+      - name: Port-forward services
+        run: |
+          kubectl -n niphas-system port-forward svc/niphas-eval 8443:8443 &
+          kubectl -n niphas-system port-forward deployment/niphas-operator 8080:8080 &
+          sleep 5
+
+      # Run e2e tests
+      - name: Run E2E tests
+        env:
+          OPERATOR_HEALTH_URL: http://localhost:8080/healthz
+          EVAL_HEALTH_URL: http://localhost:8443/healthz
+          E2E_NAMESPACE: niphas-e2e
+        run: nix develop -c cargo nextest run -p niphas-e2e --test '*'

.gitignore

@@ -5,3 +5,4 @@ result-*
 *.swp
 *.swo
 *~
+docs/book/

Cargo.toml

@@ -6,6 +6,7 @@ members = [
     "crates/niphas-operator",
     "crates/niphas-csi",
     "crates/niphas-mesh",
+    "crates/niphas-e2e",
 ]
 
 [workspace.package]

charts/niphas/Chart.yaml

@@ -0,0 +1,14 @@
+apiVersion: v2
+name: niphas
+description: Nix-native platform for Kubernetes
+version: 0.1.0
+appVersion: "0.1.0"
+type: application
+keywords:
+  - nix
+  - kubernetes
+  - operator
+  - csi
+home: https://github.com/fullzer4/niphas
+sources:
+  - https://github.com/fullzer4/niphas