wehub-resource-sync
d25d482dc2
Publish CLI Package / publish-npm (push) Waiting to run
Publish Python SDK / publish-pypi (push) Waiting to run
Publish TypeScript SDK / publish-npm (push) Waiting to run
CI / Migrate Dev DB (push) Has been skipped
CI / Detect Version (push) Has been cancelled
CI / Migrate DB (push) Has been cancelled
CI / Build Dev ECR (./docker/app.Dockerfile, ECR_APP) (push) Has been cancelled
CI / Build Dev ECR (./docker/db.Dockerfile, ECR_MIGRATIONS) (push) Has been cancelled
CI / Build Dev ECR (./docker/pii.Dockerfile, ECR_PII) (push) Has been cancelled
CI / Build Dev ECR (./docker/realtime.Dockerfile, ECR_REALTIME) (push) Has been cancelled
CI / Deploy Trigger.dev (Dev) (push) Has been cancelled
CI / Build AMD64 (./docker/app.Dockerfile, ECR_APP, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build AMD64 (./docker/db.Dockerfile, ECR_MIGRATIONS, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build AMD64 (./docker/pii.Dockerfile, ECR_PII, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build AMD64 (./docker/realtime.Dockerfile, ECR_REALTIME, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/app.Dockerfile, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/db.Dockerfile, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/pii.Dockerfile, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/realtime.Dockerfile, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Check Docs Changes (push) Has been cancelled
CI / Process Docs (push) Has been cancelled
CI / Create GitHub Release (push) Has been cancelled
CI / Test and Build (push) Has been cancelled
87 lines
2.7 KiB
YAML
87 lines
2.7 KiB
YAML
suite: pod rollout — checksum annotations + topology spread
|
|
release:
|
|
name: t
|
|
namespace: sim
|
|
defaults: &defaults
|
|
app.env.BETTER_AUTH_SECRET: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
|
|
app.env.ENCRYPTION_KEY: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
|
|
app.env.INTERNAL_API_SECRET: x
|
|
app.env.CRON_SECRET: x
|
|
postgresql.auth.password: xxxxxxxx
|
|
tests:
|
|
- it: app pod template has checksum/secret annotation
|
|
template: deployment-app.yaml
|
|
set:
|
|
<<: *defaults
|
|
asserts:
|
|
- isNotEmpty:
|
|
path: spec.template.metadata.annotations["checksum/secret"]
|
|
|
|
- it: realtime pod template has checksum/secret annotation
|
|
template: deployment-realtime.yaml
|
|
set:
|
|
<<: *defaults
|
|
asserts:
|
|
- isNotEmpty:
|
|
path: spec.template.metadata.annotations["checksum/secret"]
|
|
|
|
- it: changing a secret value changes the app pod checksum (forces rollout)
|
|
template: deployment-app.yaml
|
|
set:
|
|
<<: *defaults
|
|
app.env.BETTER_AUTH_SECRET: yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
|
|
asserts:
|
|
- notEqual:
|
|
path: spec.template.metadata.annotations["checksum/secret"]
|
|
value: ""
|
|
|
|
- it: topologySpreadConstraints render on the app pod when set
|
|
template: deployment-app.yaml
|
|
set:
|
|
<<: *defaults
|
|
app.topologySpreadConstraints:
|
|
- maxSkew: 1
|
|
topologyKey: topology.kubernetes.io/zone
|
|
whenUnsatisfiable: ScheduleAnyway
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: sim
|
|
asserts:
|
|
- equal:
|
|
path: spec.template.spec.topologySpreadConstraints[0].topologyKey
|
|
value: topology.kubernetes.io/zone
|
|
- equal:
|
|
path: spec.template.spec.topologySpreadConstraints[0].whenUnsatisfiable
|
|
value: ScheduleAnyway
|
|
|
|
- it: topologySpreadConstraints render on the realtime pod when set
|
|
template: deployment-realtime.yaml
|
|
set:
|
|
<<: *defaults
|
|
realtime.topologySpreadConstraints:
|
|
- maxSkew: 1
|
|
topologyKey: topology.kubernetes.io/zone
|
|
whenUnsatisfiable: ScheduleAnyway
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: sim
|
|
asserts:
|
|
- equal:
|
|
path: spec.template.spec.topologySpreadConstraints[0].topologyKey
|
|
value: topology.kubernetes.io/zone
|
|
|
|
- it: app topologySpreadConstraints do not leak onto realtime pod
|
|
template: deployment-realtime.yaml
|
|
set:
|
|
<<: *defaults
|
|
app.topologySpreadConstraints:
|
|
- maxSkew: 1
|
|
topologyKey: topology.kubernetes.io/zone
|
|
whenUnsatisfiable: ScheduleAnyway
|
|
labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: sim
|
|
asserts:
|
|
- isNull:
|
|
path: spec.template.spec.topologySpreadConstraints
|