Skip to content

test(deployer): add real deploy test with leak check - #61

Merged
DerekRoberts merged 2 commits into
mainfrom
test/deployer-pr-test
Sep 28, 2026
Merged

DerekRoberts merged 2 commits into
mainfrom
test/deployer-pr-test

Conversation

@DerekRoberts

Copy link
Copy Markdown
Member

Adds a real deployer test to PR CI (the old action-deployer-openshift CI had one; this repo had none).

  • test-deployer job in pr-open.yml: $/deployer matrix (backend, database, frontend) with the existing deployer/templates/, debug: true, lite mode (PR default), database with overwrite: false, frontend on oc 4.13. Deploys only when deployer/ or pr-open.yml change (deployer triggers); same-repo PRs only (needs credentials).
  • Leak regression check: backend gets a fake secret containing &, <, $. After deploying, the job fails if a TEMPLATE env var is visible, if the canary is in the job environment or in any earlier step's GITHUB_ENV/GITHUB_OUTPUT file, or if a $RUNNER_TEMP/deployer-template* file is left behind.
  • New pr-close.yml: $/cleanup-pr removes app=actions-openshift-<PR> resources when a same-repo PR closes.

Requires repo variables OC_NAMESPACE, OC_SERVER and secret OC_TOKEN.

Copilot AI balanced review requested due to automatic review settings September 28, 2026 21:27
@DerekRoberts DerekRoberts self-assigned this Sep 28, 2026
@DerekRoberts
DerekRoberts merged commit ea96510 into main Sep 28, 2026
18 of 19 checks passed
@DerekRoberts
DerekRoberts deleted the test/deployer-pr-test branch September 28, 2026 21:40
@DerekRoberts
DerekRoberts removed the request for review from Copilot September 28, 2026 23:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

1 participant