fix(cd): make boundary rollback conflict-free
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m33s
CD Pipeline / build-and-deploy (push) Successful in 6m10s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 51s
CD Pipeline / post-deploy-checks (push) Successful in 2m28s

This commit is contained in:
ogt
2026-07-11 02:11:56 +08:00
parent aae5319a5f
commit 96b38fb17a
2 changed files with 39 additions and 14 deletions

View File

@@ -72,8 +72,11 @@ def test_cd_applies_rolls_back_and_verifies_network_boundary() -> None:
assert "NETWORK_POLICY_ROLLBACK_FILE" in workflow
assert "git show HEAD^:k8s/awoooi-prod/02-network-policy.yaml" not in workflow
assert "BROKER_POLICY_EXISTED" in workflow
assert "$KUBECTL get networkpolicy default-deny-all" in workflow
assert "NETWORK_POLICY_NAMES" in workflow
assert "item[\"metadata\"][\"name\"]" in workflow
assert "item[\"spec\"]" in workflow
assert "$KUBECTL delete networkpolicy '$BROKER_POLICY_NAME'" in workflow
assert workflow.count("--all-namespaces || true)") >= 6
assert "allow-ansible-executor-broker-ssh-egress" in workflow
assert "api_ssh_egress_denied=true" in workflow
assert "worker_ssh_egress_denied=true" in workflow