36d562c15c
Adds the tf verb-group and the resolver substrate beneath it, continuing the v0.1 infra-loop build. - substrate: findInfraRoot (walk up to terragrunt.hcl + stacks/), stack→dir resolver, and repo/remote/git-crypt detection (preferRemote forgejo>origin, hasGitCryptAttr, gitCryptFlags) — the last is for `work` next. - tf plan/validate/fmt/force-unlock/apply, resolving the stack from cwd and delegating to scripts/tg (which owns state decrypt/encrypt, the Vault lock, and the ingress auth-comment check) rather than calling terragrunt directly. - tf apply is presence-coupled: claims stack:<name>, ALWAYS releases on exit (normal, error, or SIGINT/SIGTERM via sync.Once + signal handler) — fixing the documented ~200-claim leak — and prints an out-of-band reminder since CI applies canonically on push. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
52 lines
1.3 KiB
Go
52 lines
1.3 KiB
Go
package main
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
)
|
|
|
|
func newInfraTree(t *testing.T, stacks ...string) string {
|
|
t.Helper()
|
|
root := t.TempDir()
|
|
if err := os.WriteFile(filepath.Join(root, "terragrunt.hcl"), []byte("# root"), 0o644); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
for _, s := range stacks {
|
|
if err := os.MkdirAll(filepath.Join(root, "stacks", s), 0o755); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
return root
|
|
}
|
|
|
|
func TestFindInfraRootWalksUp(t *testing.T) {
|
|
root := newInfraTree(t, "vault")
|
|
got, err := findInfraRoot(filepath.Join(root, "stacks", "vault"))
|
|
if err != nil {
|
|
t.Fatalf("findInfraRoot error: %v", err)
|
|
}
|
|
if got != root {
|
|
t.Fatalf("findInfraRoot = %q, want %q", got, root)
|
|
}
|
|
}
|
|
|
|
func TestFindInfraRootErrorsOutsideInfra(t *testing.T) {
|
|
if _, err := findInfraRoot(t.TempDir()); err == nil {
|
|
t.Fatal("expected error outside an infra checkout")
|
|
}
|
|
}
|
|
|
|
func TestResolveStack(t *testing.T) {
|
|
root := newInfraTree(t, "vault", "monitoring")
|
|
dir, err := resolveStack(root, "vault")
|
|
if err != nil {
|
|
t.Fatalf("resolveStack error: %v", err)
|
|
}
|
|
if want := filepath.Join(root, "stacks", "vault"); dir != want {
|
|
t.Fatalf("resolveStack = %q, want %q", dir, want)
|
|
}
|
|
if _, err := resolveStack(root, "nonesuch"); err == nil {
|
|
t.Fatal("expected error for unknown stack")
|
|
}
|
|
}
|