chore: change central compat test to roxie

.github/workflows/emailsender-central-compatibility.yaml

@@ -49,6 +49,8 @@ jobs:
           registry: quay.io
           username: ${{ secrets.QUAY_RHACS_ENG_RO_USERNAME }}
           password: ${{ secrets.QUAY_RHACS_ENG_RO_PASSWORD }}
+      - name: Install roxie
+        uses: stackrox/actions/roxie/install-cli@43bb707aa4f32ead5bfb8d5ab11fb409f971ffc8 # ratchet:stackrox/actions@v1
       - name: Checkout this repository
         uses: actions/checkout@v7
         with:

scripts/ci/central_compatibility/roxie-config.yaml

@@ -0,0 +1,14 @@
+central:
+  metadata:
+    annotations:
+      platform.stackrox.io/managed-services: true
+  spec:
+    customize:
+      envVars:
+        - name: ROX_ACSCS_EMAIL_URL
+          value: "http://emailsender.rhacs.svc:443"
+    # Disabling scanner to reduce resource usage, it is not important for this test
+    scanner:
+      scannerComponent: Disabled
+    scannerV4:
+      scannerComponent: Disabled

scripts/ci/central_compatibility/run_compatibility_test.sh

@@ -10,7 +10,6 @@ SOURCE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 
 EMAILSENDER_NS="rhacs"
 CENTRAL_NS="rhacs-tenant"
-export ADMIN_PW="letmein"
 
 cd "$ROOT_DIR"
 
@@ -70,25 +69,22 @@ IMG_NAMES=(
   "main"
   "central-db"
 )
-MAIN_IMG="$IMG_REPO/main:$ACS_VERSION"
 IMG_WAIT_TIMEOUT_SECONDS="${IMG_WAIT_TIMEOUT_SECONDS:-1200}"
 for imgname in "${IMG_NAMES[@]}"; do
   wait_for_img "$IMG_REPO/$imgname:$ACS_VERSION" "$IMG_WAIT_TIMEOUT_SECONDS"
   pull_to_kind "$IMG_REPO/$imgname:$ACS_VERSION" "$imgname"
 done
 
-ROXCTL="docker run --rm --user $(id -u):$(id -g) -v $(pwd):/tmp/stackrox-charts/ $MAIN_IMG"
-# --remove to make this script rerunnable on a local machine
-$ROXCTL helm output central-services --image-defaults opensource --remove --output-dir /tmp/stackrox-charts/central-chart
-
-# Using ACS_VERSION explicitly here since it would otherwise not use the nightly build tag
-helm upgrade --install -n $CENTRAL_NS stackrox-central-services ./central-chart \
-  -f "${SOURCE_DIR}/central-values.yaml" \
-  --set "central.adminPassword.values=$ADMIN_PW" \
-  --set "central.image.tag=$ACS_VERSION" \
-  --set "central.db.image.tag=$ACS_VERSION" \
-  --set "scannerV4.disable=true" \
-  --set "scanner.disable=true" # Disabling scanner to reduce resource usage, it is not important for this test
+roxie_envrc="$(mktemp)"
+
+roxie deploy central --verbose --resources auto --tag "${ACS_VERSION}" \
+  --envrc "${roxie_envrc}" \
+  --set central.namespace="${CENTRAL_NS}" \
+  --config "${SOURCE_DIR}/roxie-config.yaml"
+
+# shellcheck source=/dev/null
+source "${roxie_envrc}"
+export ADMIN_PW="${ROX_ADMIN_PASSWORD}"
 
 KUBECTL="$(which kubectl)"
 wait_for_container_to_become_ready "$CENTRAL_NS" "app=central" "central"