From 258072c54a3201f1cb3c77ef20907fc2bd6d048c Mon Sep 17 00:00:00 2001 From: Kay Joosten Date: Fri, 4 Sep 2026 10:13:08 +0200 Subject: [PATCH] ci(stepup-behat): generate HAProxy dev certificate before compose up Commit 2291d6f stopped committing core/haproxy/haproxy.pem and moved its generation into core/scripts/create_dev_ca.sh, invoked only by start-dev-env.sh. The stepup-behat workflow runs 'docker compose up' directly, so haproxy.pem was missing; Docker created it as a directory and the haproxy container failed to start, taking down TLS routing and every Behat scenario with it. Run create_dev_ca.sh in the Init step, matching start-dev-env.sh's guard. --- .github/workflows/stepup-behat.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/stepup-behat.yml b/.github/workflows/stepup-behat.yml index 783b49e..57bdfc4 100644 --- a/.github/workflows/stepup-behat.yml +++ b/.github/workflows/stepup-behat.yml @@ -28,6 +28,9 @@ jobs: cd stepup cp .env.test .env cp gateway/surfnet_yubikey.yaml.dist gateway/surfnet_yubikey.yaml + if [ ! -f ../core/haproxy/haproxy.pem ]; then + ../core/scripts/create_dev_ca.sh + fi ${DOCKER_COMPOSE} up -d - name: Install composer dependencies on the Behat container run: |