open-source/qinglong
1
0
Fork 0
mirror of https://github.com/whyour/qinglong.git synced 2026-09-20 16:07:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(ql3): project cnpg runtime trust into private files

Browse Source
This commit is contained in:
whyour
2026-08-26 04:58:09 +08:00
parent eb34662d01
commit f8934b401d
3 changed files with 60 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/back/ql3CloudNativePgDeploymentAudit.test.cjs
+21
View File
@@ -126,6 +126,27 @@ test('rejects runtime DSN authority or a non-primary endpoint', () => {
);
});
test('rejects a runtime projection without both operator CA and keyring', () => {
const report = auditCloudNativePgDeployment({
root: ROOT,
readFile: intercept(
'deploy/kubernetes/ql3-cluster/overlays/cloudnative-pg/postgres-runtime-patch.yaml',
(source) =>
source.replace(
' name: ql3-postgres-ca',
' name: ql3-cluster-control-runtime',
),
),
});
assert.equal(report.compatible, false);
assert.equal(
report.findings.some(
(candidate) => candidate.code === 'QL3_CNPG_RUNTIME_BINDING',
),
true,
);
});
test('rejects migration credentials or CA from the runtime domain', () => {
const report = auditCloudNativePgDeployment({
root: ROOT,