wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

fix(cd): isolate asset migration verifier network
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m31s
Details
CD Pipeline / build-and-deploy (push) Successful in 7m46s
Details
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
Details
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 21s
Details
CD Pipeline / post-deploy-checks (push) Successful in 2m20s
Details

Browse Source
This commit is contained in:
ogt
2026-07-14 11:08:12 +08:00
parent b6ddee7984
commit 172b461fb0
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.gitea/workflows/cd.yaml
View File

@@ -1832,7 +1832,9 @@ jobs:
echo "::error::MIGRATION_DATABASE_URL secret not set in Gitea" echo "::error::MIGRATION_DATABASE_URL secret not set in Gitea"
exit 1 exit 1
fi fi
docker run --rm --network host -i \ # The migration target is a routed LAN endpoint; the default bridge
# keeps the verifier compatible with the runner's userns-remap policy.
docker run --rm --network bridge -i \
-e DATABASE_URL \ -e DATABASE_URL \
-e MIGRATION_DATABASE_URL \ -e MIGRATION_DATABASE_URL \
-v "$PWD/apps/api/migrations/asset_inventory_database_types_2026-07-14.sql:/tmp/asset_inventory_type.sql:ro" \ -v "$PWD/apps/api/migrations/asset_inventory_database_types_2026-07-14.sql:/tmp/asset_inventory_type.sql:ro" \

2
apps/api/tests/test_asset_inventory_database_type_migration.py
View File

@@ -58,6 +58,8 @@ def test_cd_applies_and_independently_verifies_the_bounded_migration() -> None:
assert "MIGRATION_DATABASE_URL: ${{ secrets.MIGRATION_DATABASE_URL }}" in step assert "MIGRATION_DATABASE_URL: ${{ secrets.MIGRATION_DATABASE_URL }}" in step
assert "DATABASE_URL: ${{ secrets.DATABASE_URL }}" in step assert "DATABASE_URL: ${{ secrets.DATABASE_URL }}" in step
assert "${{ secrets." not in script assert "${{ secrets." not in script
assert "--network bridge" in script
assert "--network host" not in script
assert "asset_inventory_database_types_2026-07-14.sql" in script assert "asset_inventory_database_types_2026-07-14.sql" in script
assert "asset_inventory_type_migration_applied=" in script assert "asset_inventory_type_migration_applied=" in script
assert "database_type_allowed=" in script assert "database_type_allowed=" in script