bluejay/bluejay-infra
1
0
Fork 0
Code Issues Pull Requests 15 Actions Packages Projects Releases Wiki Activity

deploy(dns): enable production auth profile

Browse Source
This commit is contained in:
Andrew Stoltz
2026-06-15 15:08:03 -05:00
parent 40fd35ba44
commit 6febe1fdb3
2 changed files with 94 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
tests/bluejay-infra-lint/FleetManifestLintTests.cs
View File

@@ -867,7 +867,7 @@ public sealed class FleetManifestLintTests
{
var deployments = new[]
{
(App: "fc-dns", Name: "dns-web", Slug: "dns", Secret: "dns-oidc-client", AuthEnabled: "false"),
(App: "fc-dns", Name: "dns-web", Slug: "dns", Secret: "dns-oidc-client", AuthEnabled: "true"),
(App: "fc-media", Name: "fc-media-web", Slug: "media", Secret: "media-oidc-client", AuthEnabled: "true"),
(App: "fc-distribution", Name: "fc-distribution", Slug: "distribution", Secret: "distribution-oidc-client", AuthEnabled: "true"),
};
@@ -918,6 +918,34 @@ public sealed class FleetManifestLintTests
}
}
[Fact]
public void DnsPhase0_UsesOnePasswordBackedAcmeApiKey()
{
var item = AppDocuments("fc-dns")
.Single(document => document.Kind == "OnePasswordItem" && document.Name == "dns-api-keys");
item.Scalar("spec", "itemPath").Should().Be("vaults/IAmWorkin/items/FlowerCore DNS API Keys");
var dnsWeb = AppDocuments("fc-dns")
.Single(document => document.Kind == "Deployment" && document.Name == "dns-web")
.MainContainerMappings()
.Should()
.ContainSingle()
.Subject;
EnvSecretName(dnsWeb, "FlowerCore__Auth__ApiKey").Should().Be("dns-api-keys");
EnvSecretKey(dnsWeb, "FlowerCore__Auth__ApiKey").Should().Be("api_key");
EnvSecretOptional(dnsWeb, "FlowerCore__Auth__ApiKey").Should().Be("true");
var webhook = AppDocuments("fc-dns")
.Single(document => document.Kind == "Deployment" && document.Name == "dns-acme-webhook")
.MainContainerMappings()
.Should()
.ContainSingle()
.Subject;
EnvSecretName(webhook, "FlowerCore__Dns__AcmeWebhook__ApiKey").Should().Be("dns-api-keys");
EnvSecretKey(webhook, "FlowerCore__Dns__AcmeWebhook__ApiKey").Should().Be("api_key");
EnvSecretOptional(webhook, "FlowerCore__Dns__AcmeWebhook__ApiKey").Should().Be("true");
}
[Fact]
public void DnsAndMediaGitOpsAdoption_PreservesLiveStorageAndImageShape()
{
@@ -927,7 +955,7 @@ public sealed class FleetManifestLintTests
var dnsPvc = AppDocuments("fc-dns")
.Single(document => document.Kind == "PersistentVolumeClaim" && document.Name == "dns-web-data");
ManifestNodeExtensions.Scalar(dnsContainer, "image").Should().Be("localhost/fc-dns-web:v20260613-g5-quota-aa99bd1");
ManifestNodeExtensions.Scalar(dnsContainer, "image").Should().Be("localhost/fc-dns-web:v20260615-phase0-hybrid-f77fb94");
dnsPvc.Scalar("spec", "storageClassName").Should().Be("longhorn");
dnsPvc.Scalar("spec", "resources", "requests", "storage").Should().Be("1Gi");