wehub-resource-sync
d25d482dc2
Publish CLI Package / publish-npm (push) Waiting to run
Publish Python SDK / publish-pypi (push) Waiting to run
Publish TypeScript SDK / publish-npm (push) Waiting to run
CI / Migrate Dev DB (push) Has been skipped
CI / Detect Version (push) Has been cancelled
CI / Migrate DB (push) Has been cancelled
CI / Build Dev ECR (./docker/app.Dockerfile, ECR_APP) (push) Has been cancelled
CI / Build Dev ECR (./docker/db.Dockerfile, ECR_MIGRATIONS) (push) Has been cancelled
CI / Build Dev ECR (./docker/pii.Dockerfile, ECR_PII) (push) Has been cancelled
CI / Build Dev ECR (./docker/realtime.Dockerfile, ECR_REALTIME) (push) Has been cancelled
CI / Deploy Trigger.dev (Dev) (push) Has been cancelled
CI / Build AMD64 (./docker/app.Dockerfile, ECR_APP, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build AMD64 (./docker/db.Dockerfile, ECR_MIGRATIONS, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build AMD64 (./docker/pii.Dockerfile, ECR_PII, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build AMD64 (./docker/realtime.Dockerfile, ECR_REALTIME, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/app.Dockerfile, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/db.Dockerfile, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/pii.Dockerfile, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/realtime.Dockerfile, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Check Docs Changes (push) Has been cancelled
CI / Process Docs (push) Has been cancelled
CI / Create GitHub Release (push) Has been cancelled
CI / Test and Build (push) Has been cancelled
102 lines
3.4 KiB
YAML
102 lines
3.4 KiB
YAML
suite: envDefaults — secret-mode-aware inlining (round-9 regression net)
|
|
release:
|
|
name: t
|
|
namespace: sim
|
|
defaults: &defaults
|
|
app.env.BETTER_AUTH_SECRET: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
|
|
app.env.ENCRYPTION_KEY: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
|
|
app.env.INTERNAL_API_SECRET: x
|
|
app.env.CRON_SECRET: x
|
|
postgresql.auth.password: xxxxxxxx
|
|
tests:
|
|
- it: inline mode renders localhost envDefaults on the app pod
|
|
template: deployment-app.yaml
|
|
set:
|
|
<<: *defaults
|
|
asserts:
|
|
- contains:
|
|
path: spec.template.spec.containers[0].env
|
|
content:
|
|
name: BETTER_AUTH_URL
|
|
value: http://localhost:3000
|
|
|
|
- it: inline mode renders localhost envDefaults on the realtime pod
|
|
template: deployment-realtime.yaml
|
|
set:
|
|
<<: *defaults
|
|
asserts:
|
|
- contains:
|
|
path: spec.template.spec.containers[0].env
|
|
content:
|
|
name: BETTER_AUTH_URL
|
|
value: http://localhost:3000
|
|
|
|
- it: existingSecret mode skips envDefaults on the app pod
|
|
template: deployment-app.yaml
|
|
set:
|
|
app.secrets.existingSecret.enabled: true
|
|
app.secrets.existingSecret.name: my-secret
|
|
postgresql.auth.password: xxxxxxxx
|
|
asserts:
|
|
- notContains:
|
|
path: spec.template.spec.containers[0].env
|
|
content:
|
|
name: BETTER_AUTH_URL
|
|
value: http://localhost:3000
|
|
|
|
- it: existingSecret mode skips envDefaults on the realtime pod
|
|
template: deployment-realtime.yaml
|
|
set:
|
|
app.secrets.existingSecret.enabled: true
|
|
app.secrets.existingSecret.name: my-secret
|
|
postgresql.auth.password: xxxxxxxx
|
|
asserts:
|
|
- notContains:
|
|
path: spec.template.spec.containers[0].env
|
|
content:
|
|
name: BETTER_AUTH_URL
|
|
value: http://localhost:3000
|
|
|
|
- it: existingSecret mode inlines user-set app.env values on the app pod
|
|
template: deployment-app.yaml
|
|
set:
|
|
app.secrets.existingSecret.enabled: true
|
|
app.secrets.existingSecret.name: my-secret
|
|
app.env.NEXT_PUBLIC_APP_URL: "https://prod.example.com"
|
|
postgresql.auth.password: xxxxxxxx
|
|
asserts:
|
|
- contains:
|
|
path: spec.template.spec.containers[0].env
|
|
content:
|
|
name: NEXT_PUBLIC_APP_URL
|
|
value: "https://prod.example.com"
|
|
|
|
- it: existingSecret mode propagates app.env to the realtime pod (round-7 regression)
|
|
template: deployment-realtime.yaml
|
|
set:
|
|
app.secrets.existingSecret.enabled: true
|
|
app.secrets.existingSecret.name: my-secret
|
|
app.env.NEXT_PUBLIC_APP_URL: "https://prod.example.com"
|
|
postgresql.auth.password: xxxxxxxx
|
|
asserts:
|
|
- contains:
|
|
path: spec.template.spec.containers[0].env
|
|
content:
|
|
name: NEXT_PUBLIC_APP_URL
|
|
value: "https://prod.example.com"
|
|
|
|
- it: realtime.env wins over app.env on the realtime pod in existingSecret mode
|
|
template: deployment-realtime.yaml
|
|
set:
|
|
app.secrets.existingSecret.enabled: true
|
|
app.secrets.existingSecret.name: my-secret
|
|
app.env.NEXT_PUBLIC_APP_URL: "https://prod.example.com"
|
|
realtime.env.NEXT_PUBLIC_APP_URL: "https://realtime.example.com"
|
|
postgresql.auth.password: xxxxxxxx
|
|
asserts:
|
|
- contains:
|
|
path: spec.template.spec.containers[0].env
|
|
content:
|
|
name: NEXT_PUBLIC_APP_URL
|
|
value: "https://realtime.example.com"
|