mirror of
https://github.com/pocket-id/pocket-id.git
synced 2026-08-31 08:11:27 +02:00
22cf4eab93
Adds a matrix entry that starts a SQLite-backed Francis runtime next to Pocket ID and points FRANCIS_HOST at it, so the same Playwright suite runs with the actor state, alarms, and placement owned by the runtime instead of embedded in Pocket ID. The suite needs no changes to work in that topology: the E2E reset seeds every actor through actors.Service() and deliberately leaves the actor store alone, so it behaves the same whichever side owns it. The CLI spec is the exception, since export and import are the two commands whose behaviour genuinely differs. It now picks the right Compose file, expects an export to carry no francis.bin, feeds the import an archive without one, and gains a case asserting that an archive that does carry one is refused. The runtime is reached over the Compose network on its UDP port, so nothing is published to the host, and the cluster CA is left unpinned, which exercises the same trust-on-first-use path an operator gets without FRANCIS_CA. Pinning is covered by a unit test instead.
49 lines
1.9 KiB
YAML
49 lines
1.9 KiB
YAML
# This Docker Compose file is used to set up the environment for the tests.
|
|
# It's the variant where Pocket ID does not embed the Francis actor runtime, but connects to a standalone one instead.
|
|
services:
|
|
lldap:
|
|
extends:
|
|
file: docker-compose.yml
|
|
service: lldap
|
|
scim-test-server:
|
|
extends:
|
|
file: docker-compose.yml
|
|
service: scim-test-server
|
|
francis-runtime:
|
|
image: ghcr.io/italypaleale/francis:0.1.0-rc.2
|
|
volumes:
|
|
- ./francis-config.yaml:/etc/francis/config.yaml:ro
|
|
- francis-test-data:/data
|
|
# The image ships its own HEALTHCHECK, which probes the runtime over the loopback
|
|
# It's repeated here so Pocket ID can wait on it, and so a runtime that never comes up fails fast instead of after the default retries
|
|
healthcheck:
|
|
test: ["CMD", "/bin/francis", "healthcheck"]
|
|
interval: 2s
|
|
timeout: 5s
|
|
retries: 15
|
|
start_period: 5s
|
|
pocket-id:
|
|
extends:
|
|
file: docker-compose.yml
|
|
service: pocket-id
|
|
environment:
|
|
APP_ENV: test
|
|
ENCRYPTION_KEY: test-encryption-key
|
|
FILE_BACKEND: ${FILE_BACKEND}
|
|
# The runtime's port is UDP, since WebTransport runs over HTTP/3
|
|
FRANCIS_HOST: francis-runtime:7400
|
|
# Must match "bootstrap.hostPSK" in francis-config.yaml
|
|
FRANCIS_HOST_PSK: e2e-host-bootstrap-psk-0123456789
|
|
# FRANCIS_CA is intentionally unset, so this exercises the same trust-on-first-use path an operator gets without it
|
|
# The cluster only exists inside this Compose network for the duration of the tests
|
|
#
|
|
# Peers reach actors placed on this host at ACTORS_HOST, which the runtime hands out, so it has to be the address other containers resolve rather than the default wildcard
|
|
ACTORS_HOST: pocket-id
|
|
depends_on:
|
|
francis-runtime:
|
|
condition: service_healthy
|
|
|
|
volumes:
|
|
pocket-id-test-data:
|
|
francis-test-data:
|