wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 4 Packages Projects Releases Wiki Activity

fix(cd): allow bounded rollout convergence
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 3m1s
Details
CD Pipeline / build-and-deploy (push) Successful in 14m30s
Details
CD Pipeline / post-deploy-checks (push) Successful in 4m34s
Details
AI 技術雷達監控 / ai-technology-watch (push) Successful in 51s
Details

Browse Source
This commit is contained in:
ogt
2026-07-14 19:29:43 +08:00
parent 1f2be543bb
commit 378d867e9c
2 changed files with 19 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
.gitea/workflows/cd.yaml
View File

@@ -3083,11 +3083,13 @@ jobs:
sleep 5 sleep 5
done done
# 確認 rollout 完成 # Two-replica rollouts can legitimately need more than two minutes
$KUBECTL rollout status deployment/awoooi-api -n awoooi-prod --timeout=120s # before the second replacement is available. Keep this bounded, but
$KUBECTL rollout status deployment/awoooi-web -n awoooi-prod --timeout=120s # do not abort before the independent boundary verifier can run.
$KUBECTL rollout status deployment/awoooi-worker -n awoooi-prod --timeout=120s $KUBECTL rollout status deployment/awoooi-api -n awoooi-prod --timeout=300s
$KUBECTL rollout status deployment/awoooi-ansible-executor-broker -n awoooi-prod --timeout=120s $KUBECTL rollout status deployment/awoooi-web -n awoooi-prod --timeout=300s
$KUBECTL rollout status deployment/awoooi-worker -n awoooi-prod --timeout=300s
$KUBECTL rollout status deployment/awoooi-ansible-executor-broker -n awoooi-prod --timeout=300s
echo "✅ 部署完成" echo "✅ 部署完成"
# AIA-P0-011: production must prove that the public API cannot mutate # AIA-P0-011: production must prove that the public API cannot mutate

12
apps/api/tests/test_executor_network_policy_boundary.py
View File

@@ -224,6 +224,18 @@ def test_cd_concurrency_probe_degrades_to_terminal_false_receipt() -> None:
assert "workload DB identity/budget remains in progress" in workflow assert "workload DB identity/budget remains in progress" in workflow
def test_cd_allows_bounded_rollout_convergence_before_boundary_verifier() -> None:
repo_root = Path(__file__).resolve().parents[3]
workflow = (repo_root / ".gitea/workflows/cd.yaml").read_text()
rollout_gate = workflow.split("# Two-replica rollouts", 1)[1].split(
"# AIA-P0-011:", 1
)[0]
assert rollout_gate.count("--timeout=300s") == 4
assert "--timeout=120s" not in rollout_gate
assert "independent boundary verifier" in rollout_gate
def test_broker_probe_accepts_partial_live_route_evidence(tmp_path: Path) -> None: def test_broker_probe_accepts_partial_live_route_evidence(tmp_path: Path) -> None:
result = _run_broker_probe( result = _run_broker_probe(
tmp_path, tmp_path,