miki3421 opened a new pull request, #14: URL: https://github.com/apache/openserverless-testing/pull/14
This draft adds the missing `0.9.0` SSO smoke script and mock OIDC provider from `0.9.1` (`e017ff5fb5b1147cdb772aa584223d6e0d6c83da`), including the upstream transient-login retry handling. Deployment names are adapted to namespace `openserverless`, StatefulSet `openserverless-system-api`, and `ops setup openserverless hello`. It also adds the missing ASF headers to `TaskfileAWS.yml`, `TaskfileAzure.yml` and `TaskfileGCloud.yml`, identified during the 0.9.0 RC source audit. The top-level `task license CMD=fix` generated these headers in an isolated copy with a temporary configuration selecting the six audited files across CLI, runtimes and testing. Each Taskfile's remaining bytes and permissions are unchanged. The established `tests/all.sh` and deployment logic remain unchanged. Run the SSO test explicitly with `bash tests/11-sso-mock.sh kind` on a test cluster with the companion task/admin-api backports installed. ### Validation - Targeted top-level `task license CMD=check`: all six audited files valid, zero invalid, including these three Taskfiles. Exact comparison excluding the generated headers and `git diff --check` passed. - Shell syntax, Python compilation and four local HTTP integration scenarios with mocked CouchDB/Kubernetes passed before the header additions. - The smoke test at `7461bcdbc2e801ae28649ece40d0eb99a67e7276` subsequently ran in a KVM guest against the real RC3 operator and companion SSO backports: mock login, WhiskUser provisioning, action listing and hello invocation passed; script exit status was 0. Cleanup has the separate pre-existing defect below. - The same KVM deployment also passed 32/32 checks against real Keycloak 26.4.2 over HTTP, including password/device flows and operator provisioning. These functional tests preceded this comment-only addition. ### Existing findings reported without changing established logic - `tests/all.sh` can record a failed test and still exit with status 0. An isolated reproduction had `6-login.sh` exit 7, `_results` record `FAIL ./6-login.sh`, and the runner exit 0. - Mock-test cleanup leaves its WhiskUser when `ops admin deleteuser` encounters missing legacy ingress resources and aborts before deleting the user. The trap suppresses this failure. Re-running deleteuser returned 1; mock deployment/service/configmap cleanup succeeded. This inherited task behavior is unchanged. - This repository has no `.licenserc.yaml`. A standalone `license-eye header check` therefore uses its default configuration and still returns 1: findings decreased from 13 on the pre-header revision to 10 after adding these three headers. The unchanged findings are `.asf.yaml`, `.env.dist`, `DISCLAIMER`, `shell.nix`, `img/progress.svg`, `conf/aws-install-config.yaml`, `conf/gcp-install-config.yaml`, `conf/install-config.yaml`, `stress-test/nodeport.yaml` and `stress-test/locust-manifest.yaml`. They require classification separately; a default-check finding does not by itself establish that an ASF source header belongs in every listed file. ### Companion drafts - [admin-api PR](https://github.com/apache/openserverless-admin-api/pull/52) - [task PR](https://github.com/apache/openserverless-task/pull/229) - [cli PR](https://github.com/apache/openserverless-cli/pull/52) Supersedes https://github.com/apache/openserverless-testing/pull/13 with the same commits proposed from a personal fork. The previous Apache branch is retained. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
