tegwick
c8e07615c3
All checks were successful
Map uncaught HTTPError from LLDAP login to a structured dependency_unavailable response, add /readyz as the provisioner-to-directory preflight, keep /healthz as process liveness, and run the contract in CI. Auth rejection is not retried during cooldown. NK-WP-0036-T05 remains in progress until the immutable image is published, pinned with /readyz, and one native login/create/password-setup journey is verified. Assistant: grok Assistant-Session: 01a09dc6-3f0e-78f1-a884-c8c703c24ddf
20 lines
942 B
YAML
20 lines
942 B
YAML
name: Identity provider journey acceptance
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
paths: ["identity-provisioner/**", ".forgejo/workflows/identity-journeys.yaml"]
|
|
workflow_dispatch:
|
|
jobs:
|
|
provider:
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: python:3.12-slim@sha256:d764629ce0ddd8c71fd371e9901efb324a95789d2315a47db7e4d27e78f1b0e9
|
|
steps:
|
|
- name: Run provider and directory-contract tests
|
|
run: |
|
|
set -eu
|
|
mkdir -p identity-source
|
|
python -c 'import os, urllib.request; urllib.request.urlretrieve("https://forgejo.coulomb.social/" + os.environ["GITHUB_REPOSITORY"] + "/archive/" + os.environ["GITHUB_SHA"] + ".tar.gz", "identity-source.tar.gz")'
|
|
tar xzf identity-source.tar.gz -C identity-source --strip-components=1
|
|
cd identity-source
|
|
PYTHONDONTWRITEBYTECODE=1 PYTHONPATH=identity-provisioner python3 -m unittest discover -s identity-provisioner/tests -v
|