wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/main' into codex/ai-automation-codebase-review-20260710

Browse Source 
# Conflicts:
#	.gitea/workflows/cd.yaml
#	apps/api/tests/test_executor_network_policy_boundary.py
This commit is contained in:
ogt
2026-07-11 02:14:03 +08:00
parent 565edcdfb3 aae5319a5f
commit 6322abde9d
4 changed files with 61 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
apps/api/tests/test_executor_network_policy_boundary.py
View File

@@ -73,6 +73,12 @@ def test_cd_applies_rolls_back_and_verifies_network_boundary() -> None:
assert "get networkpolicy -n awoooi-prod -o json" in workflow
assert "rollback_network_policy_on_exit" in workflow
assert "git show HEAD^:k8s/awoooi-prod/02-network-policy.yaml" not in workflow
assert "BROKER_POLICY_EXISTED" in workflow
assert "$KUBECTL delete networkpolicy '$BROKER_POLICY_NAME'" in workflow
assert "auth_can_i()" in workflow
assert "API_CAN_PATCH=$(auth_can_i" in workflow
assert "BROKER_CAN_DELETE=$(auth_can_i" in workflow
assert "executor_boundary_stage=live_socket_boundary_verified" in workflow
assert "allow-ansible-executor-broker-ssh-egress" in workflow
assert "api_ssh_egress_denied=true" in workflow
assert "worker_ssh_egress_denied=true" in workflow