coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prepare renamed Access Engine runtime twins with exact reviewer scope
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Build and Publish Container Image / build-and-push (push) Successful in 1m2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
This commit is contained in:
tegwick 2026-10-11 22:53:54 +02:00
parent 0bc15925e9
commit dd15d8cf3f
26 changed files with 1480 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

55
cmd/access-engine/readback_pin_test.go
View file

@ -43,30 +43,35 @@ func argAfter(args []string, flag string) []string {
// package at the same digest its own pin runs. The package is baked into the
// image, so same image digest and same path is the same package digest.
func TestReadbackPinMatchesParticipantPins(t *testing.T) {
readback := loadPinValues(t, "application-readback.yaml")
if len(readback.Args) == 0 || readback.Args[0] != "serve-readback" {
t.Fatal("readback pin must run serve-readback, which mounts no /v1/check")
}
participants := map[string]string{"informed-decision": "informed-decision-lifecycle.yaml"}
packages := argAfter(readback.Args, "--package")
if len(packages) != len(participants) {
t.Fatalf("readback packages %v, want one per participant %v", packages, participants)
}
for _, pkg := range packages {
system, path, _ := strings.Cut(pkg, "=")
file, ok := participants[system]
if !ok {
t.Fatalf("readback package for %q has no participant pin", system)
}
own := loadPinValues(t, file)
if own.Image.Digest != readback.Image.Digest {
t.Errorf("%s: readback image %s, own pin %s", system, readback.Image.Digest, own.Image.Digest)
}
if policies := argAfter(own.Args, "--policy"); len(policies) != 1 || policies[0] != path {
t.Errorf("%s: readback package %s, own pin %v", system, path, policies)
}
if !strings.Contains(strings.Join(argAfter(readback.Args, "--registry"), " "), strings.Join(argAfter(own.Args, "--registry"), " ")) {
t.Errorf("%s: readback pin does not load its registry", system)
}
for _, prefix := range []string{"", "access-engine/"} {
t.Run(prefix, func(t *testing.T) {
readback := loadPinValues(t, prefix+"application-readback.yaml")
if len(readback.Args) == 0 || readback.Args[0] != "serve-readback" {
t.Fatal("readback pin must run serve-readback, which mounts no /v1/check")
}
participants := map[string]string{"informed-decision": "informed-decision-lifecycle.yaml"}
packages := argAfter(readback.Args, "--package")
if len(packages) != len(participants) {
t.Fatalf("readback packages %v, want one per participant %v", packages, participants)
}
for _, pkg := range packages {
system, path, _ := strings.Cut(pkg, "=")
file, ok := participants[system]
if !ok {
t.Fatalf("readback package for %q has no participant pin", system)
}
own := loadPinValues(t, prefix+file)
if own.Image.Digest != readback.Image.Digest {
t.Errorf("%s: readback image %s, own pin %s", system, readback.Image.Digest, own.Image.Digest)
}
if policies := argAfter(own.Args, "--policy"); len(policies) != 1 || policies[0] != path {
t.Errorf("%s: readback package %s, own pin %v", system, path, policies)
}
if !strings.Contains(strings.Join(argAfter(readback.Args, "--registry"), " "), strings.Join(argAfter(own.Args, "--registry"), " ")) {
t.Errorf("%s: readback pin does not load its registry", system)
}
}
})
}
}