84 lines
3.1 KiB
Bash
Executable File
84 lines
3.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
repository_root=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
|
|
workspace_venv="$repository_root/../.venv"
|
|
test_tmp=$(mktemp -d)
|
|
chmod 0700 "$test_tmp"
|
|
|
|
export ANSIBLE_COLLECTIONS_PATH="$test_tmp/collections"
|
|
export ANSIBLE_ROLES_PATH="$(dirname "$repository_root")"
|
|
|
|
inventory="$repository_root/tests/inventory"
|
|
converge="$repository_root/tests/converge.yml"
|
|
verify_config="$repository_root/tests/verify-config.yml"
|
|
ansible_playbook="$workspace_venv/bin/ansible-playbook"
|
|
binary_path=/usr/local/bin/audita
|
|
config_path=/usr/local/etc/audita/config.yml
|
|
|
|
cleanup() {
|
|
exit_status=$?
|
|
trap - EXIT
|
|
"$ansible_playbook" -i "$inventory" "$converge" >/dev/null 2>&1 || true
|
|
rm -rf -- "$test_tmp"
|
|
exit "$exit_status"
|
|
}
|
|
trap cleanup EXIT
|
|
|
|
require_clean_recap() {
|
|
grep -Eq 'changed=0 .*failed=0' "$1"
|
|
}
|
|
|
|
run_converge() {
|
|
output_file=$1
|
|
shift
|
|
"$ansible_playbook" -i "$inventory" "$@" "$converge" | tee "$output_file"
|
|
}
|
|
|
|
validate_config() {
|
|
"$binary_path" config validate --config "$config_path"
|
|
}
|
|
|
|
cd "$repository_root"
|
|
"$workspace_venv/bin/ansible-galaxy" collection install \
|
|
-r collections/requirements.yml \
|
|
-p "$ANSIBLE_COLLECTIONS_PATH"
|
|
"$ansible_playbook" -i "$inventory" --syntax-check "$converge"
|
|
"$workspace_venv/bin/ansible-lint" "$converge" "$verify_config"
|
|
|
|
baseline_log="$test_tmp/baseline.log"
|
|
run_converge "$baseline_log"
|
|
validate_config
|
|
baseline_repeat_log="$test_tmp/baseline-repeat.log"
|
|
run_converge "$baseline_repeat_log"
|
|
require_clean_recap "$baseline_repeat_log"
|
|
|
|
representative_config='{"audita_config_version": 1, "audita_pipeline_modules": ["glossary"], "audita_llm_proposal_base_url": "https://openrouter.ai/api/v1", "audita_llm_proposal_model": "openrouter/google/gemma-4-31b-it", "audita_llm_proposal_timeout": "10s", "audita_llm_proposal_max_retries": 0, "audita_context_description": "", "audita_diagnostics_retention": "never", "audita_llm_validation_model": null, "audita_output_schema": null, "audita_diagnostics_work_dir": null}'
|
|
representative_log="$test_tmp/representative-config.log"
|
|
run_converge "$representative_log" -e "$representative_config"
|
|
"$ansible_playbook" -i "$inventory" "$verify_config"
|
|
representative_repeat_log="$test_tmp/representative-config-repeat.log"
|
|
run_converge "$representative_repeat_log" -e "$representative_config"
|
|
require_clean_recap "$representative_repeat_log"
|
|
|
|
custom_go_binary="$test_tmp/go"
|
|
custom_go_invocations="$test_tmp/go-invocations.log"
|
|
printf '%s\n' \
|
|
'#!/usr/bin/env bash' \
|
|
'set -euo pipefail' \
|
|
"printf '%s\\n' \"\$*\" >> '$custom_go_invocations'" \
|
|
'exec /snap/bin/go "$@"' > "$custom_go_binary"
|
|
chmod 0755 "$custom_go_binary"
|
|
sudo rm -f -- "$binary_path"
|
|
recovery_log="$test_tmp/recovery.log"
|
|
run_converge "$recovery_log" \
|
|
-e '{"audita_manage_build_dependencies": false}' \
|
|
-e "audita_go_binary=$custom_go_binary"
|
|
grep -q . "$custom_go_invocations"
|
|
validate_config
|
|
recovery_repeat_log="$test_tmp/recovery-repeat.log"
|
|
run_converge "$recovery_repeat_log" \
|
|
-e '{"audita_manage_build_dependencies": false}' \
|
|
-e "audita_go_binary=$custom_go_binary"
|
|
require_clean_recap "$recovery_repeat_log"
|