Code Queue Review
91 lines
3.2 KiB
Markdown
91 lines
3.2 KiB
Markdown
# M2 DEV Deployment Smoke
|
|
|
|
`m2-dev-deploy-smoke` is a local dry-run smoke harness for the HWLAB DEV
|
|
deployment shape. It validates the frozen route phases, service identities,
|
|
artifact metadata, and safety gates without contacting the real DEV ingress by
|
|
default.
|
|
|
|
Run the dry-run from the repository root:
|
|
|
|
```sh
|
|
node scripts/m2-dev-deploy-smoke.mjs --dry-run
|
|
```
|
|
|
|
## What It Checks
|
|
|
|
- Parses `fixtures/dev-deploy-smoke/dev-deploy-smoke.json`.
|
|
- Verifies the route phases in order:
|
|
`master-edge-proxy`, `frp-tunnel`, `d601-router`, `cloud-surface`,
|
|
`agent-runtime`, and `sim-and-patch-panel`.
|
|
- Validates the frozen HWLAB service IDs for master edge proxy, frp tunnel,
|
|
D601 `hwlab-dev/hwlab-router`, cloud-api/web, agent, sim, and patch-panel.
|
|
- Checks `commitId`, `image`, `digest` or `not_applicable`, `tag`,
|
|
`buildSource`, `deployEnv`, `healthTimestamp`, and failure classification
|
|
for every recorded service contract.
|
|
- Confirms the cloud surface bundles `hwlab-cloud-api` and `hwlab-cloud-web`
|
|
artifacts together under the same route phase.
|
|
- Marks the fixture as dry-run evidence only. Any DB fields in fixture health
|
|
records are contract placeholders, not live DB evidence.
|
|
- Keeps the default mode in dry-run and refuses real requests unless an
|
|
explicit live gate is supplied.
|
|
|
|
## Live Gate
|
|
|
|
The live gate is intentionally strict. It is only for a future real DEV smoke
|
|
observation, not for deployment, and this harness stays fixture-only unless the
|
|
operator supplies the live flags. The public DEV endpoint split is:
|
|
|
|
- browser/frontend: `http://74.48.78.17:16666/`
|
|
- API/edge health: `http://74.48.78.17:16667/health` and
|
|
`http://74.48.78.17:16667/health/live`
|
|
- legacy public `:6667`: deprecated and never accepted as active green evidence
|
|
|
|
Required flags:
|
|
|
|
```sh
|
|
node scripts/m2-dev-deploy-smoke.mjs --live --confirm-dev --confirmed-non-production --report /tmp/hwlab-dev-gate/report.json
|
|
```
|
|
|
|
Before using `--live`, confirm all of the following:
|
|
|
|
- the API/edge target remains `http://74.48.78.17:16667`;
|
|
- the frontend target remains `http://74.48.78.17:16666`;
|
|
- the workspace is not a PROD or shared deployment context;
|
|
- no prohibited action is being attempted;
|
|
- the request is observational only and does not mutate runtime state.
|
|
|
|
The script rejects live execution if any of these are missing:
|
|
|
|
- `--confirm-dev`
|
|
- `--confirmed-non-production`
|
|
- `--prod`
|
|
- `--heavyweight-e2e`
|
|
- `--read-secret`
|
|
- `--force-push`
|
|
|
|
When `--report /tmp/hwlab-dev-gate/report.json` is provided, the script writes
|
|
`/tmp/hwlab-dev-gate/dev-m2-deploy-smoke-active.json`. The report contains only
|
|
read-only GET evidence and marks legacy `:6667` observations as ineligible for
|
|
active green.
|
|
|
|
Validate the written report with:
|
|
|
|
```sh
|
|
node scripts/validate-m2-deploy-smoke-active.mjs
|
|
```
|
|
|
|
## Boundary
|
|
|
|
This harness does not:
|
|
|
|
- deploy to DEV or PROD;
|
|
- call the real DEV endpoint in dry-run mode;
|
|
- run heavy e2e coverage;
|
|
- read secrets or tokens;
|
|
- replace HWLAB runtime services with UniDesk substitutes;
|
|
- touch L5 deploy manifests.
|
|
|
|
The fixture is a dry-run record only. It exists to prove that the M2 smoke
|
|
entry point understands the frozen route and artifact contract before any live
|
|
DEV observation is attempted.
|