coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Advance RPF-WP-0021 platform onboarding
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
codex 2026-08-20 23:31:47 +02:00
parent 8caba51801
commit 07ed6217b7
8 changed files with 284 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

42
tests/test_credential_change.py
View file

@ -104,6 +104,48 @@ class CredentialChangeTests(unittest.TestCase):
self.assertEqual(store["spec"]["provider"]["vault"]["path"], "platform")
self.assertEqual(store["spec"]["conditions"][0]["namespaces"], ["core-hub"])
database_policy = (
REPO_DIR / "openbao/policies/external-secrets-core-hub-database.hcl"
).read_text()
self.assertIn('path "database/creds/core-hub-runtime"', database_policy)
self.assertIn('path "database/creds/core-hub-migration"', database_policy)
self.assertNotIn("platform/data/", database_policy)
database_store = credential_change.load_yaml(
REPO_DIR
/ "argocd/platform-addons/openbao-secretstore/openbao-core-hub-database.clustersecretstore.yaml"
)
self.assertEqual(database_store["spec"]["provider"]["vault"]["path"], "database")
self.assertEqual(database_store["spec"]["provider"]["vault"]["version"], "v1")
self.assertEqual(database_store["spec"]["conditions"][0]["namespaces"], ["core-hub"])
with (
REPO_DIR
/ "argocd/platform-addons/openbao-secretstore/core-hub.externalsecrets.yaml"
).open() as stream:
external_secrets = list(credential_change.yaml.safe_load_all(stream))
self.assertEqual(
{item["metadata"]["name"] for item in external_secrets},
{
"core-hub-api-token",
"core-hub-runtime-database",
"core-hub-migration-database",
},
)
for item in external_secrets:
self.assertEqual(item["metadata"]["namespace"], "core-hub")
self.assertEqual(item["spec"]["refreshInterval"], "5m")
runtime = next(
item for item in external_secrets
if item["metadata"]["name"] == "core-hub-runtime-database"
)
migration = next(
item for item in external_secrets
if item["metadata"]["name"] == "core-hub-migration-database"
)
self.assertEqual(runtime["spec"]["dataFrom"][0]["extract"]["key"], "creds/core-hub-runtime")
self.assertEqual(migration["spec"]["dataFrom"][0]["extract"]["key"], "creds/core-hub-migration")
def test_target_rapp_rejects_non_slug(self) -> None:
path = self.unapproved_ccr()
data = credential_change.load_yaml(path)