wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

fix(iwooos): honor production database budget

Browse Source
This commit is contained in:
ogt
2026-07-11 20:24:12 +08:00
parent c241ab72dc
commit caf208315e
2 changed files with 19 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
apps/api/src/services/iwooos_security_asset_control_plane.py
View File

@@ -15,7 +15,7 @@ from src.db.base import get_db_context
logger = structlog.get_logger(__name__)
_SCHEMA_VERSION = "iwooos_security_asset_control_plane_v1"
_QUERY_TIMEOUT_SECONDS = 6.0
_QUERY_TIMEOUT_SECONDS = 20.0
_SOURCE_QUERY_TIMEOUT_SECONDS = 4.0
_CACHE_TTL_SECONDS = 30.0
_DISCOVERY_FRESHNESS_SECONDS = 2 * 60 * 60
@@ -1276,6 +1276,7 @@ def build_unavailable_iwooos_security_asset_control_plane(
async def _read_public_source(
*,
project_id: str,
limiter: asyncio.Semaphore,
source_id: str,
statement: Any,
result_mode: str,
@@ -1295,9 +1296,10 @@ async def _read_public_source(
raise ValueError("unsupported_result_mode")
try:
value = await asyncio.wait_for(
execute_source(), timeout=_SOURCE_QUERY_TIMEOUT_SECONDS
)
async with limiter:
value = await asyncio.wait_for(
execute_source(), timeout=_SOURCE_QUERY_TIMEOUT_SECONDS
)
return value, {
"source_id": source_id,
"status": "ready",
@@ -1370,9 +1372,11 @@ class IwoooSSecurityAssetControlPlaneService:
return payload
async def _load_snapshot(self) -> dict[str, Any]:
source_limiter = asyncio.Semaphore(1)
source_results = await asyncio.gather(
_read_public_source(
project_id="awoooi",
limiter=source_limiter,
source_id="asset_discovery",
statement=_sql(
"""
@@ -1408,6 +1412,7 @@ class IwoooSSecurityAssetControlPlaneService:
),
_read_public_source(
project_id="awoooi",
limiter=source_limiter,
source_id="asset_inventory",
statement=_sql(
"""
@@ -1431,6 +1436,7 @@ class IwoooSSecurityAssetControlPlaneService:
),
_read_public_source(
project_id="awoooi",
limiter=source_limiter,
source_id="automation_coverage",
statement=_sql(
"""
@@ -1452,6 +1458,7 @@ class IwoooSSecurityAssetControlPlaneService:
),
_read_public_source(
project_id="awoooi",
limiter=source_limiter,
source_id="asset_relationship",
statement=_sql(
"""
@@ -1474,6 +1481,7 @@ class IwoooSSecurityAssetControlPlaneService:
),
_read_public_source(
project_id="awoooi",
limiter=source_limiter,
source_id="security_compliance",
statement=_sql(
"""
@@ -1494,6 +1502,7 @@ class IwoooSSecurityAssetControlPlaneService:
),
_read_public_source(
project_id="awoooi",
limiter=source_limiter,
source_id="automation_operations",
statement=_sql(
"""
@@ -1509,6 +1518,7 @@ class IwoooSSecurityAssetControlPlaneService:
),
_read_public_source(
project_id="awoooi",
limiter=source_limiter,
source_id="ai_decision_trace",
statement=_sql(
"""
@@ -1525,6 +1535,7 @@ class IwoooSSecurityAssetControlPlaneService:
),
_read_public_source(
project_id="awoooi",
limiter=source_limiter,
source_id="siem_runtime",
statement=_sql(
"""
@@ -1573,6 +1584,7 @@ class IwoooSSecurityAssetControlPlaneService:
),
_read_public_source(
project_id="awoooi",
limiter=source_limiter,
source_id="audit_runtime",
statement=_sql(
"""

5
apps/api/tests/test_iwooos_security_asset_control_plane.py
View File

@@ -246,6 +246,7 @@ def test_read_public_source_returns_redacted_reason_code_on_query_failure(
value, health = asyncio.run(
_read_public_source(
project_id="awoooi",
limiter=asyncio.Semaphore(1),
source_id="audit_runtime",
statement="SELECT 1",
result_mode="one",
@@ -341,7 +342,7 @@ def test_service_uses_canonical_awoooi_project_scope(monkeypatch) -> None:
assert payload["summary"]["unavailable_source_count"] == 9
def test_service_reads_independent_sources_concurrently(monkeypatch) -> None:
def test_service_serializes_sources_for_single_connection_budget(monkeypatch) -> None:
service = IwoooSSecurityAssetControlPlaneService()
concurrency = {"active": 0, "maximum": 0}
@@ -376,7 +377,7 @@ def test_service_reads_independent_sources_concurrently(monkeypatch) -> None:
)
payload = asyncio.run(service._load_snapshot())
assert concurrency["maximum"] == 9
assert concurrency["maximum"] == 1
assert payload["summary"]["source_count"] == 9
assert payload["summary"]["ready_source_count"] == 9
assert payload["summary"]["unavailable_source_count"] == 0