open-source/qinglong
1
0
Fork 0
mirror of https://github.com/whyour/qinglong.git synced 2026-09-22 10:32:40 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat(ql3): gate console capacity evidence

Browse Source
This commit is contained in:
whyour
2026-08-20 10:04:21 +08:00
parent 0a5f1448f1
commit 3979707f6d
7 changed files with 2289 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/back/ql3ClusterImageReleaseAudit.test.cjs
+52
View File
@@ -30,6 +30,14 @@ test('accepts the reviewed native CI and digest release contracts', () => {
clusterAdminOperatorContext: true,
clusterAdminContextPreflight: true,
clusterAdminContextReadiness: true,
clusterCopilotConsoleCapacityEvidence: {
nativeArchitectures: ['x64', 'arm64'],
memoryLimitMiB: 192,
minimumHeadroomMiB: 32,
assertionRotation: true,
assertionExpiryRejected: true,
sourceBound: true,
},
releaseVersionAudit: true,
deploymentLockMaterialization: true,
ociAttestations: true,
@@ -315,6 +323,50 @@ test('rejects removal of the native Cluster Admin product facade gate', () => {
);
});
test('rejects a Console capacity capture without the exact native live opt-in', () => {
const mutated = ciSource.replace(
"QL3_CLUSTER_COPILOT_CONSOLE_CAPACITY_LIVE: '1'",
"QL3_CLUSTER_COPILOT_CONSOLE_CAPACITY_LIVE: '0'",
);
assert.throws(
() => auditClusterImageCiWorkflow(mutated),
/exact source-bound Console capacity envelope/,
);
});
test('rejects removal of the Console capacity evidence protocol tests', () => {
const mutated = ciSource.replace(
'test/back/ql3ClusterCopilotConsoleCapacityEvidence.test.cjs',
'test/back/ql3ClusterCopilotConsoleCapacityEvidence.removed.cjs',
);
assert.throws(
() => auditClusterImageCiWorkflow(mutated),
/Console capacity evidence protocol tests/,
);
});
test('rejects Console capacity evidence that is not gated by the native image matrix', () => {
const mutated = ciSource.replace(
'cluster-console-capacity-release-evidence:\n name: Cross-architecture Cluster Copilot Console capacity evidence\n needs: cluster-image',
'cluster-console-capacity-release-evidence:\n name: Cross-architecture Cluster Copilot Console capacity evidence\n needs: image-oci',
);
assert.throws(
() => auditClusterImageCiWorkflow(mutated),
/exact native x64 and arm64 reports/,
);
});
test('rejects removal of the offline Console capacity release audit', () => {
const mutated = ciSource.replace(
' --mode=audit \\\n',
' --mode=merge \\\n',
);
assert.throws(
() => auditClusterImageCiWorkflow(mutated),
/exact native x64 and arm64 reports/,
);
});
test('rejects a Cluster Admin live gate that omits operator context injection', () => {
const contract = fs.readFileSync(
path.join(root, 'scripts/ql3-cluster-admin-product-live-contract.cjs'),