test: harden M3 identity wiring guards

2026-05-23 07:13:49 +00:00
parent 039e81731a
commit 583acd86c6
6 changed files with 259 additions and 42 deletions
@@ -0,0 +1,79 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import {
+  readDevM3CardinalityInputs,
+  validateDevM3Cardinality
+} from "./validate-dev-m3-cardinality.mjs";
+
+const baseline = await readDevM3CardinalityInputs();
+
+function clone(value) {
+  return JSON.parse(JSON.stringify(value));
+}
+
+function cloneInputs() {
+  return clone(baseline);
+}
+
+function deployService(inputs, serviceId) {
+  return inputs.deploy.services.find((service) => service.serviceId === serviceId);
+}
+
+function workloadContainer(inputs, workloadName) {
+  return inputs.workloads.items
+    .find((item) => item.metadata?.name === workloadName)
+    ?.spec?.template?.spec?.containers?.find((container) => container.name === workloadName);
+}
+
+function setWorkloadEnv(inputs, workloadName, envName, value) {
+  const entry = workloadContainer(inputs, workloadName)?.env?.find((item) => item.name === envName);
+  assert.ok(entry, `${workloadName} ${envName} exists`);
+  entry.value = value;
+}
+
+function assertRejected(inputs, pattern) {
+  assert.throws(() => validateDevM3Cardinality(inputs), pattern);
+}
+
+test("accepts the checked-in DEV M3 minimum topology", () => {
+  validateDevM3Cardinality(cloneInputs());
+});
+
+test("rejects duplicate box-simu resource identity in deploy source", () => {
+  const inputs = cloneInputs();
+  deployService(inputs, "hwlab-box-simu").env.HWLAB_BOX_RESOURCE_ID = "res_boxsimu_1,res_boxsimu_1";
+
+  assertRejected(inputs, /hwlab-box-simu deploy HWLAB_BOX_RESOURCE_ID/u);
+});
+
+test("rejects duplicate gateway-simu identity in Kubernetes source", () => {
+  const inputs = cloneInputs();
+  setWorkloadEnv(inputs, "hwlab-gateway-simu", "HWLAB_GATEWAY_ID", "gwsimu_1,gwsimu_1");
+
+  assertRejected(inputs, /hwlab-gateway-simu HWLAB_GATEWAY_ID/u);
+});
+
+test("rejects duplicate gateway session assignment for box-simu resources", () => {
+  const inputs = cloneInputs();
+  deployService(inputs, "hwlab-box-simu").env.HWLAB_GATEWAY_SESSION_ID = "gws_gwsimu_1,gws_gwsimu_1";
+
+  assertRejected(inputs, /hwlab-box-simu deploy HWLAB_GATEWAY_SESSION_ID/u);
+});
+
+test("rejects missing M3 patch-panel route", () => {
+  const inputs = cloneInputs();
+  const patchPanel = deployService(inputs, "hwlab-patch-panel");
+  const wiringConfig = JSON.parse(patchPanel.env.HWLAB_PATCH_PANEL_WIRING_CONFIG);
+  wiringConfig.connections = [];
+  patchPanel.env.HWLAB_PATCH_PANEL_WIRING_CONFIG = JSON.stringify(wiringConfig);
+
+  assertRejected(inputs, /hwlab-patch-panel deploy HWLAB_PATCH_PANEL_WIRING_CONFIG/u);
+});
+
+test("rejects wrong first-class route owner", () => {
+  const inputs = cloneInputs();
+  deployService(inputs, "hwlab-patch-panel").m3Route.patchPanelServiceId = "hwlab-box-simu";
+
+  assertRejected(inputs, /hwlab-patch-panel deploy first-class M3 route/u);
+});