fix(cd): snapshot live network policy for rollback

2026-07-11 01:56:38 +08:00
parent 3eb5d9188c
commit 565edcdfb3
2 changed files with 84 additions and 6 deletions
--- a/apps/api/tests/test_executor_network_policy_boundary.py
+++ b/apps/api/tests/test_executor_network_policy_boundary.py
@@ -70,6 +70,9 @@ def test_cd_applies_rolls_back_and_verifies_network_boundary() -> None:

    assert "02-network-policy.yaml" in workflow
    assert "NETWORK_POLICY_ROLLBACK_FILE" in workflow
+    assert "get networkpolicy -n awoooi-prod -o json" in workflow
+    assert "rollback_network_policy_on_exit" in workflow
+    assert "git show HEAD^:k8s/awoooi-prod/02-network-policy.yaml" not in workflow
    assert "allow-ansible-executor-broker-ssh-egress" in workflow
    assert "api_ssh_egress_denied=true" in workflow
    assert "worker_ssh_egress_denied=true" in workflow