mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-08 19:56:53 +00:00
kevinveenbirkenbachandClaude Opus 5.5
4c6f9d5cd7
The handover condition lived as the same inline Jinja in basic.conf.j2,
ws_generic.conf.j2 and Baserow's proxy.conf.j2. Move it into
lookup('network_handover', application_id, domain), which also refuses a
non-boolean flag, and use it at all three places.
A handover sibling still proxies its health, MCP and SSO endpoints to the
backend, and those requests carried the onion Host, which single-URL apps
reject: pretix answered /healthz/ready on the onion with 400 Unknown host
and failed the Prometheus blackbox probe. forwarded.conf.j2 now sends the
canonical domain as Host and X-Forwarded-Host on a handover sibling, so the
onion probe keeps measuring the backend through the onion vhost.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
56 lines
1.9 KiB
Python
56 lines
1.9 KiB
Python
import unittest
|
|
import unittest.mock as mock
|
|
|
|
from ansible.errors import AnsibleError
|
|
|
|
import plugins.lookup.network_handover as network_handover_mod
|
|
from utils.domains.default_primary import default_domain_primary
|
|
|
|
PRIMARY = default_domain_primary()
|
|
ONION = "abcdefghijklmnopqrstuvwxyz234567abcdefghijklmnopqrstuvw.onion"
|
|
CANONICAL = {
|
|
"web-app-moodle": f"academy.{PRIMARY}",
|
|
"web-app-nextcloud": f"cloud.{PRIMARY}",
|
|
}
|
|
HANDOVER = {"web-app-moodle": True, "web-app-nextcloud": False}
|
|
|
|
|
|
def _loader(handover=HANDOVER):
|
|
def _get(name, **_k):
|
|
if name == "config":
|
|
return mock.MagicMock(run=lambda terms, **_kw: [handover[terms[0]]])
|
|
return mock.MagicMock(run=lambda terms, **_kw: [CANONICAL[terms[0]]])
|
|
|
|
loader = mock.MagicMock()
|
|
loader.get.side_effect = _get
|
|
return mock.patch.object(network_handover_mod, "lookup_loader", loader)
|
|
|
|
|
|
class TestNetworkHandover(unittest.TestCase):
|
|
def _run(self, terms, handover=HANDOVER):
|
|
lookup = network_handover_mod.LookupModule()
|
|
lookup._loader = mock.MagicMock()
|
|
with _loader(handover):
|
|
return lookup.run(terms, variables={"domain": terms[-1]})[0]
|
|
|
|
def test_the_onion_sibling_of_a_handover_app_hands_over(self):
|
|
self.assertIs(self._run(["web-app-moodle", f"academy.{ONION}"]), True)
|
|
|
|
def test_the_canonical_vhost_of_a_handover_app_serves(self):
|
|
self.assertIs(self._run(["web-app-moodle", f"academy.{PRIMARY}"]), False)
|
|
|
|
def test_an_app_without_handover_serves_every_sibling(self):
|
|
self.assertIs(self._run(["web-app-nextcloud", f"cloud.{ONION}"]), False)
|
|
|
|
def test_a_non_boolean_flag_fails_loudly(self):
|
|
with self.assertRaises(AnsibleError):
|
|
self._run(["web-app-moodle", f"academy.{ONION}"], {"web-app-moodle": "yes"})
|
|
|
|
def test_both_terms_are_required(self):
|
|
with self.assertRaises(AnsibleError):
|
|
self._run(["web-app-moodle"])
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|