wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

fix(cd): coalesce stale carriers and harden verifiers
Some checks failed
CD Pipeline / select-latest-carrier (push) Successful in 48s
Details
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m34s
Details
CD Pipeline / revalidate-deploy-carrier (push) Successful in 26s
Details
CD Pipeline / revalidate-post-deploy-carrier (push) Has been cancelled
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Your Name
2026-07-18 18:54:04 +08:00
parent dbabdeab7e
commit 0d3c3b483e
8 changed files with 797 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
apps/api/tests/test_workload_database_identity_projection.py
View File

@@ -297,6 +297,9 @@ def test_workload_database_bootstrap_keeps_secret_values_off_output() -> None:
def test_cd_uses_live_spec_rollback_and_non_mutating_post_verifier() -> None:
workflow = (REPO_ROOT / ".gitea/workflows/cd.yaml").read_text()
normalized_workflow = " ".join(workflow.split())
workload_rollback = workflow.split("WORKLOAD_DB_ROLLBACK_FILE", 1)[1].split(
"# The two directly applied ConfigMaps", 1
)[0]
assert "WORKLOAD_DB_ROLLBACK_FILE" in workflow
assert "WORKLOAD_DB_SECRET_PREEXISTENCE_FILE" in workflow
@@ -305,7 +308,7 @@ def test_cd_uses_live_spec_rollback_and_non_mutating_post_verifier() -> None:
assert "bash -s -- verify" in workflow
assert workflow.index("bash -s -- apply") < workflow.index("bash -s -- verify")
assert '"spec": item["spec"]' in workflow
assert '"data": item' not in workflow
assert '"data": item' not in workload_rollback
assert "get secret '${secret_name}' -n awoooi-prod -o jsonpath" not in workflow
assert "get secret awoooi-api-db -n awoooi-prod -o jsonpath" not in workflow
assert "HEAD^" not in workflow