@consiliency/agent-board-schema 1.44.0 → 1.48.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/fixtures/already-applied.json +16 -0
- package/migrations/20260925000100_agent_board_ownerless_renew_ttl_cap.sql +166 -0
- package/migrations/20260926000100_agent_board_ownerless_quota_census.sql +268 -0
- package/migrations/20260927000100_agent_board_fleet_domain_no_downgrade.sql +393 -0
- package/migrations/20260928000100_agent_board_ownerless_quota_renew_convergence.sql +562 -0
- package/package.json +1 -1
- package/schema-manifest.json +39 -3
- package/src/tooling.test.mjs +35 -2
- package/tests/agent_board_fleet_machine_hijack.test.sql +270 -1
- package/tests/agent_board_fleet_machine_reclaim.test.sql +28 -2
- package/tests/agent_board_ownerless_quota_census.test.sql +400 -0
- package/tests/agent_board_ownerless_renew_quota.test.sql +551 -0
- package/tests/agent_board_ownerless_renew_ttl.test.sql +226 -0
- package/tests/catalog/p_metadata_parameters.json +12 -0
- package/tests/isolation/expected/fleet_domain_no_downgrade_demote_race.out +447 -0
- package/tests/isolation/specs/fleet_domain_no_downgrade_demote_race.spec +292 -0
|
@@ -0,0 +1,447 @@
|
|
|
1
|
+
Parsed test spec with 7 sessions
|
|
2
|
+
|
|
3
|
+
starting permutation: rl_begin rl_lock rm_begin rm_move rl_demote rl_commit rm_commit chk
|
|
4
|
+
step rl_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
5
|
+
step rl_lock:
|
|
6
|
+
select id from agent_board.fleet_machines
|
|
7
|
+
where id = 'c3970000-0000-4000-8000-000000000001' for update;
|
|
8
|
+
|
|
9
|
+
id
|
|
10
|
+
------------------------------------
|
|
11
|
+
c3970000-0000-4000-8000-000000000001
|
|
12
|
+
(1 row)
|
|
13
|
+
|
|
14
|
+
step rm_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
15
|
+
step rm_move:
|
|
16
|
+
select trust_domain_id
|
|
17
|
+
from agent_board.register_fleet_machine(
|
|
18
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000002',
|
|
19
|
+
'nodowngrade-iso-machine-moved', 'sha256:nodowngrade-iso', 'portal',
|
|
20
|
+
jsonb_build_object('redacted', true));
|
|
21
|
+
<waiting ...>
|
|
22
|
+
step rl_demote:
|
|
23
|
+
update agent_board.fleet_trust_domains
|
|
24
|
+
set lifecycle_state = 'pending', approved_at = null, updated_at = now()
|
|
25
|
+
where id = 'd3970000-0000-4000-8000-000000000002';
|
|
26
|
+
|
|
27
|
+
step rl_commit: COMMIT;
|
|
28
|
+
step rm_move: <... completed>
|
|
29
|
+
ERROR: re-registration would move machine into a less approved trust domain (destination d3970000-0000-4000-8000-000000000002, current d3970000-0000-4000-8000-000000000001) — measured after the move, from one snapshot
|
|
30
|
+
step rm_commit: COMMIT;
|
|
31
|
+
step chk:
|
|
32
|
+
select fm.trust_domain_id, fm.owner_agent_id, fm.lifecycle_state as machine_state,
|
|
33
|
+
ftd.lifecycle_state as domain_state
|
|
34
|
+
from agent_board.fleet_machines fm
|
|
35
|
+
join agent_board.fleet_trust_domains ftd on ftd.id = fm.trust_domain_id
|
|
36
|
+
where fm.id = 'c3970000-0000-4000-8000-000000000001';
|
|
37
|
+
|
|
38
|
+
trust_domain_id |owner_agent_id |machine_state|domain_state
|
|
39
|
+
------------------------------------+------------------------------------+-------------+------------
|
|
40
|
+
d3970000-0000-4000-8000-000000000001|a3970000-0000-4000-8000-000000000001|active |active
|
|
41
|
+
(1 row)
|
|
42
|
+
|
|
43
|
+
|
|
44
|
+
starting permutation: rm_begin rm_move rm_commit chk
|
|
45
|
+
step rm_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
46
|
+
step rm_move:
|
|
47
|
+
select trust_domain_id
|
|
48
|
+
from agent_board.register_fleet_machine(
|
|
49
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000002',
|
|
50
|
+
'nodowngrade-iso-machine-moved', 'sha256:nodowngrade-iso', 'portal',
|
|
51
|
+
jsonb_build_object('redacted', true));
|
|
52
|
+
|
|
53
|
+
trust_domain_id
|
|
54
|
+
------------------------------------
|
|
55
|
+
d3970000-0000-4000-8000-000000000002
|
|
56
|
+
(1 row)
|
|
57
|
+
|
|
58
|
+
step rm_commit: COMMIT;
|
|
59
|
+
step chk:
|
|
60
|
+
select fm.trust_domain_id, fm.owner_agent_id, fm.lifecycle_state as machine_state,
|
|
61
|
+
ftd.lifecycle_state as domain_state
|
|
62
|
+
from agent_board.fleet_machines fm
|
|
63
|
+
join agent_board.fleet_trust_domains ftd on ftd.id = fm.trust_domain_id
|
|
64
|
+
where fm.id = 'c3970000-0000-4000-8000-000000000001';
|
|
65
|
+
|
|
66
|
+
trust_domain_id |owner_agent_id |machine_state|domain_state
|
|
67
|
+
------------------------------------+------------------------------------+-------------+------------
|
|
68
|
+
d3970000-0000-4000-8000-000000000002|a3970000-0000-4000-8000-000000000001|active |active
|
|
69
|
+
(1 row)
|
|
70
|
+
|
|
71
|
+
|
|
72
|
+
starting permutation: rl_begin rl_relocate_dest rm_begin rm_move_current rl_demote_current rl_commit rm_commit chk
|
|
73
|
+
step rl_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
74
|
+
step rl_relocate_dest:
|
|
75
|
+
update agent_board.fleet_machines
|
|
76
|
+
set trust_domain_id = 'd3970000-0000-4000-8000-000000000002', updated_at = now()
|
|
77
|
+
where id = 'c3970000-0000-4000-8000-000000000001';
|
|
78
|
+
|
|
79
|
+
step rm_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
80
|
+
step rm_move_current:
|
|
81
|
+
select trust_domain_id
|
|
82
|
+
from agent_board.register_fleet_machine(
|
|
83
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000001',
|
|
84
|
+
'nodowngrade-iso-machine-relabelled', 'sha256:nodowngrade-iso', 'portal',
|
|
85
|
+
jsonb_build_object('redacted', true));
|
|
86
|
+
<waiting ...>
|
|
87
|
+
step rl_demote_current:
|
|
88
|
+
update agent_board.fleet_trust_domains
|
|
89
|
+
set lifecycle_state = 'pending', approved_at = null, updated_at = now()
|
|
90
|
+
where id = 'd3970000-0000-4000-8000-000000000001';
|
|
91
|
+
|
|
92
|
+
step rl_commit: COMMIT;
|
|
93
|
+
step rm_move_current: <... completed>
|
|
94
|
+
ERROR: re-registration would move machine into a less approved trust domain (destination d3970000-0000-4000-8000-000000000001, current d3970000-0000-4000-8000-000000000002) — measured after the move, from one snapshot
|
|
95
|
+
step rm_commit: COMMIT;
|
|
96
|
+
step chk:
|
|
97
|
+
select fm.trust_domain_id, fm.owner_agent_id, fm.lifecycle_state as machine_state,
|
|
98
|
+
ftd.lifecycle_state as domain_state
|
|
99
|
+
from agent_board.fleet_machines fm
|
|
100
|
+
join agent_board.fleet_trust_domains ftd on ftd.id = fm.trust_domain_id
|
|
101
|
+
where fm.id = 'c3970000-0000-4000-8000-000000000001';
|
|
102
|
+
|
|
103
|
+
trust_domain_id |owner_agent_id |machine_state|domain_state
|
|
104
|
+
------------------------------------+------------------------------------+-------------+------------
|
|
105
|
+
d3970000-0000-4000-8000-000000000002|a3970000-0000-4000-8000-000000000001|active |active
|
|
106
|
+
(1 row)
|
|
107
|
+
|
|
108
|
+
|
|
109
|
+
starting permutation: rl_begin rl_relocate_dest rm_begin rm_move_current rl_commit rm_commit chk
|
|
110
|
+
step rl_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
111
|
+
step rl_relocate_dest:
|
|
112
|
+
update agent_board.fleet_machines
|
|
113
|
+
set trust_domain_id = 'd3970000-0000-4000-8000-000000000002', updated_at = now()
|
|
114
|
+
where id = 'c3970000-0000-4000-8000-000000000001';
|
|
115
|
+
|
|
116
|
+
step rm_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
117
|
+
step rm_move_current:
|
|
118
|
+
select trust_domain_id
|
|
119
|
+
from agent_board.register_fleet_machine(
|
|
120
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000001',
|
|
121
|
+
'nodowngrade-iso-machine-relabelled', 'sha256:nodowngrade-iso', 'portal',
|
|
122
|
+
jsonb_build_object('redacted', true));
|
|
123
|
+
<waiting ...>
|
|
124
|
+
step rl_commit: COMMIT;
|
|
125
|
+
step rm_move_current: <... completed>
|
|
126
|
+
trust_domain_id
|
|
127
|
+
------------------------------------
|
|
128
|
+
d3970000-0000-4000-8000-000000000001
|
|
129
|
+
(1 row)
|
|
130
|
+
|
|
131
|
+
step rm_commit: COMMIT;
|
|
132
|
+
step chk:
|
|
133
|
+
select fm.trust_domain_id, fm.owner_agent_id, fm.lifecycle_state as machine_state,
|
|
134
|
+
ftd.lifecycle_state as domain_state
|
|
135
|
+
from agent_board.fleet_machines fm
|
|
136
|
+
join agent_board.fleet_trust_domains ftd on ftd.id = fm.trust_domain_id
|
|
137
|
+
where fm.id = 'c3970000-0000-4000-8000-000000000001';
|
|
138
|
+
|
|
139
|
+
trust_domain_id |owner_agent_id |machine_state|domain_state
|
|
140
|
+
------------------------------------+------------------------------------+-------------+------------
|
|
141
|
+
d3970000-0000-4000-8000-000000000001|a3970000-0000-4000-8000-000000000001|active |active
|
|
142
|
+
(1 row)
|
|
143
|
+
|
|
144
|
+
|
|
145
|
+
starting permutation: rl_begin rl_lock rm_begin rm_move_current rl_relocate_x rl_demote_current rl_commit rm_commit chk
|
|
146
|
+
step rl_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
147
|
+
step rl_lock:
|
|
148
|
+
select id from agent_board.fleet_machines
|
|
149
|
+
where id = 'c3970000-0000-4000-8000-000000000001' for update;
|
|
150
|
+
|
|
151
|
+
id
|
|
152
|
+
------------------------------------
|
|
153
|
+
c3970000-0000-4000-8000-000000000001
|
|
154
|
+
(1 row)
|
|
155
|
+
|
|
156
|
+
step rm_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
157
|
+
step rm_move_current:
|
|
158
|
+
select trust_domain_id
|
|
159
|
+
from agent_board.register_fleet_machine(
|
|
160
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000001',
|
|
161
|
+
'nodowngrade-iso-machine-relabelled', 'sha256:nodowngrade-iso', 'portal',
|
|
162
|
+
jsonb_build_object('redacted', true));
|
|
163
|
+
<waiting ...>
|
|
164
|
+
step rl_relocate_x:
|
|
165
|
+
update agent_board.fleet_machines
|
|
166
|
+
set trust_domain_id = 'd3970000-0000-4000-8000-000000000003', updated_at = now()
|
|
167
|
+
where id = 'c3970000-0000-4000-8000-000000000001';
|
|
168
|
+
|
|
169
|
+
step rl_demote_current:
|
|
170
|
+
update agent_board.fleet_trust_domains
|
|
171
|
+
set lifecycle_state = 'pending', approved_at = null, updated_at = now()
|
|
172
|
+
where id = 'd3970000-0000-4000-8000-000000000001';
|
|
173
|
+
|
|
174
|
+
step rl_commit: COMMIT;
|
|
175
|
+
step rm_move_current: <... completed>
|
|
176
|
+
ERROR: re-registration would move machine into a less approved trust domain (destination d3970000-0000-4000-8000-000000000001, current d3970000-0000-4000-8000-000000000003) — measured after the move, from one snapshot
|
|
177
|
+
step rm_commit: COMMIT;
|
|
178
|
+
step chk:
|
|
179
|
+
select fm.trust_domain_id, fm.owner_agent_id, fm.lifecycle_state as machine_state,
|
|
180
|
+
ftd.lifecycle_state as domain_state
|
|
181
|
+
from agent_board.fleet_machines fm
|
|
182
|
+
join agent_board.fleet_trust_domains ftd on ftd.id = fm.trust_domain_id
|
|
183
|
+
where fm.id = 'c3970000-0000-4000-8000-000000000001';
|
|
184
|
+
|
|
185
|
+
trust_domain_id |owner_agent_id |machine_state|domain_state
|
|
186
|
+
------------------------------------+------------------------------------+-------------+------------
|
|
187
|
+
d3970000-0000-4000-8000-000000000003|a3970000-0000-4000-8000-000000000001|active |active
|
|
188
|
+
(1 row)
|
|
189
|
+
|
|
190
|
+
|
|
191
|
+
starting permutation: rl_begin rl_lock rm_begin rm_move_current rl_relocate_x rl_commit rm_commit chk
|
|
192
|
+
step rl_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
193
|
+
step rl_lock:
|
|
194
|
+
select id from agent_board.fleet_machines
|
|
195
|
+
where id = 'c3970000-0000-4000-8000-000000000001' for update;
|
|
196
|
+
|
|
197
|
+
id
|
|
198
|
+
------------------------------------
|
|
199
|
+
c3970000-0000-4000-8000-000000000001
|
|
200
|
+
(1 row)
|
|
201
|
+
|
|
202
|
+
step rm_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
203
|
+
step rm_move_current:
|
|
204
|
+
select trust_domain_id
|
|
205
|
+
from agent_board.register_fleet_machine(
|
|
206
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000001',
|
|
207
|
+
'nodowngrade-iso-machine-relabelled', 'sha256:nodowngrade-iso', 'portal',
|
|
208
|
+
jsonb_build_object('redacted', true));
|
|
209
|
+
<waiting ...>
|
|
210
|
+
step rl_relocate_x:
|
|
211
|
+
update agent_board.fleet_machines
|
|
212
|
+
set trust_domain_id = 'd3970000-0000-4000-8000-000000000003', updated_at = now()
|
|
213
|
+
where id = 'c3970000-0000-4000-8000-000000000001';
|
|
214
|
+
|
|
215
|
+
step rl_commit: COMMIT;
|
|
216
|
+
step rm_move_current: <... completed>
|
|
217
|
+
trust_domain_id
|
|
218
|
+
------------------------------------
|
|
219
|
+
d3970000-0000-4000-8000-000000000001
|
|
220
|
+
(1 row)
|
|
221
|
+
|
|
222
|
+
step rm_commit: COMMIT;
|
|
223
|
+
step chk:
|
|
224
|
+
select fm.trust_domain_id, fm.owner_agent_id, fm.lifecycle_state as machine_state,
|
|
225
|
+
ftd.lifecycle_state as domain_state
|
|
226
|
+
from agent_board.fleet_machines fm
|
|
227
|
+
join agent_board.fleet_trust_domains ftd on ftd.id = fm.trust_domain_id
|
|
228
|
+
where fm.id = 'c3970000-0000-4000-8000-000000000001';
|
|
229
|
+
|
|
230
|
+
trust_domain_id |owner_agent_id |machine_state|domain_state
|
|
231
|
+
------------------------------------+------------------------------------+-------------+------------
|
|
232
|
+
d3970000-0000-4000-8000-000000000001|a3970000-0000-4000-8000-000000000001|active |active
|
|
233
|
+
(1 row)
|
|
234
|
+
|
|
235
|
+
|
|
236
|
+
starting permutation: rc_begin rc_reclaim rm_begin rm_move_current rc_commit rm_commit chk
|
|
237
|
+
step rc_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
238
|
+
step rc_reclaim:
|
|
239
|
+
select owner_agent_id, trust_domain_id
|
|
240
|
+
from agent_board.reclaim_fleet_machine(
|
|
241
|
+
'c3970000-0000-4000-8000-000000000001', 'a3970000-0000-4000-8000-000000000003',
|
|
242
|
+
'a3970000-0000-4000-8000-000000000002', 'iso reclaim vs register',
|
|
243
|
+
'd3970000-0000-4000-8000-000000000004');
|
|
244
|
+
|
|
245
|
+
owner_agent_id |trust_domain_id
|
|
246
|
+
------------------------------------+------------------------------------
|
|
247
|
+
a3970000-0000-4000-8000-000000000003|d3970000-0000-4000-8000-000000000004
|
|
248
|
+
(1 row)
|
|
249
|
+
|
|
250
|
+
step rm_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
251
|
+
step rm_move_current:
|
|
252
|
+
select trust_domain_id
|
|
253
|
+
from agent_board.register_fleet_machine(
|
|
254
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000001',
|
|
255
|
+
'nodowngrade-iso-machine-relabelled', 'sha256:nodowngrade-iso', 'portal',
|
|
256
|
+
jsonb_build_object('redacted', true));
|
|
257
|
+
<waiting ...>
|
|
258
|
+
step rc_commit: COMMIT;
|
|
259
|
+
step rm_move_current: <... completed>
|
|
260
|
+
ERROR: machine fingerprint is registered to another owner
|
|
261
|
+
step rm_commit: COMMIT;
|
|
262
|
+
step chk:
|
|
263
|
+
select fm.trust_domain_id, fm.owner_agent_id, fm.lifecycle_state as machine_state,
|
|
264
|
+
ftd.lifecycle_state as domain_state
|
|
265
|
+
from agent_board.fleet_machines fm
|
|
266
|
+
join agent_board.fleet_trust_domains ftd on ftd.id = fm.trust_domain_id
|
|
267
|
+
where fm.id = 'c3970000-0000-4000-8000-000000000001';
|
|
268
|
+
|
|
269
|
+
trust_domain_id |owner_agent_id |machine_state|domain_state
|
|
270
|
+
------------------------------------+------------------------------------+-------------+------------
|
|
271
|
+
d3970000-0000-4000-8000-000000000004|a3970000-0000-4000-8000-000000000003|active |active
|
|
272
|
+
(1 row)
|
|
273
|
+
|
|
274
|
+
|
|
275
|
+
starting permutation: rm_begin rm_move_current rc_begin rc_reclaim rm_commit rc_commit chk
|
|
276
|
+
step rm_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
277
|
+
step rm_move_current:
|
|
278
|
+
select trust_domain_id
|
|
279
|
+
from agent_board.register_fleet_machine(
|
|
280
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000001',
|
|
281
|
+
'nodowngrade-iso-machine-relabelled', 'sha256:nodowngrade-iso', 'portal',
|
|
282
|
+
jsonb_build_object('redacted', true));
|
|
283
|
+
|
|
284
|
+
trust_domain_id
|
|
285
|
+
------------------------------------
|
|
286
|
+
d3970000-0000-4000-8000-000000000001
|
|
287
|
+
(1 row)
|
|
288
|
+
|
|
289
|
+
step rc_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
290
|
+
step rc_reclaim:
|
|
291
|
+
select owner_agent_id, trust_domain_id
|
|
292
|
+
from agent_board.reclaim_fleet_machine(
|
|
293
|
+
'c3970000-0000-4000-8000-000000000001', 'a3970000-0000-4000-8000-000000000003',
|
|
294
|
+
'a3970000-0000-4000-8000-000000000002', 'iso reclaim vs register',
|
|
295
|
+
'd3970000-0000-4000-8000-000000000004');
|
|
296
|
+
<waiting ...>
|
|
297
|
+
step rm_commit: COMMIT;
|
|
298
|
+
step rc_reclaim: <... completed>
|
|
299
|
+
owner_agent_id |trust_domain_id
|
|
300
|
+
------------------------------------+------------------------------------
|
|
301
|
+
a3970000-0000-4000-8000-000000000003|d3970000-0000-4000-8000-000000000004
|
|
302
|
+
(1 row)
|
|
303
|
+
|
|
304
|
+
step rc_commit: COMMIT;
|
|
305
|
+
step chk:
|
|
306
|
+
select fm.trust_domain_id, fm.owner_agent_id, fm.lifecycle_state as machine_state,
|
|
307
|
+
ftd.lifecycle_state as domain_state
|
|
308
|
+
from agent_board.fleet_machines fm
|
|
309
|
+
join agent_board.fleet_trust_domains ftd on ftd.id = fm.trust_domain_id
|
|
310
|
+
where fm.id = 'c3970000-0000-4000-8000-000000000001';
|
|
311
|
+
|
|
312
|
+
trust_domain_id |owner_agent_id |machine_state|domain_state
|
|
313
|
+
------------------------------------+------------------------------------+-------------+------------
|
|
314
|
+
d3970000-0000-4000-8000-000000000004|a3970000-0000-4000-8000-000000000003|active |active
|
|
315
|
+
(1 row)
|
|
316
|
+
|
|
317
|
+
|
|
318
|
+
starting permutation: rf_begin rf_register rm2_begin rm2_register rl_begin rl_demote_race_dest rl_commit rf_commit rm2_commit chkf
|
|
319
|
+
step rf_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
320
|
+
step rf_register:
|
|
321
|
+
select trust_domain_id
|
|
322
|
+
from agent_board.register_fleet_machine(
|
|
323
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000005',
|
|
324
|
+
'nodowngrade-iso-fresh-winner', 'sha256:nodowngrade-iso-fresh', 'portal',
|
|
325
|
+
jsonb_build_object('redacted', true));
|
|
326
|
+
|
|
327
|
+
trust_domain_id
|
|
328
|
+
------------------------------------
|
|
329
|
+
d3970000-0000-4000-8000-000000000005
|
|
330
|
+
(1 row)
|
|
331
|
+
|
|
332
|
+
step rm2_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
333
|
+
step rm2_register:
|
|
334
|
+
select trust_domain_id
|
|
335
|
+
from agent_board.register_fleet_machine(
|
|
336
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000006',
|
|
337
|
+
'nodowngrade-iso-fresh-loser', 'sha256:nodowngrade-iso-fresh', 'portal',
|
|
338
|
+
jsonb_build_object('redacted', true));
|
|
339
|
+
<waiting ...>
|
|
340
|
+
step rl_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
341
|
+
step rl_demote_race_dest:
|
|
342
|
+
update agent_board.fleet_trust_domains
|
|
343
|
+
set lifecycle_state = 'quarantined', approved_at = null, updated_at = now()
|
|
344
|
+
where id = 'd3970000-0000-4000-8000-000000000006';
|
|
345
|
+
|
|
346
|
+
step rl_commit: COMMIT;
|
|
347
|
+
step rf_commit: COMMIT;
|
|
348
|
+
step rm2_register: <... completed>
|
|
349
|
+
ERROR: concurrent registration of machine fingerprint sha256:nodowngrade-iso-fresh — retry
|
|
350
|
+
step rm2_commit: COMMIT;
|
|
351
|
+
step chkf:
|
|
352
|
+
select fm.trust_domain_id, fm.lifecycle_state as machine_state, ftd.lifecycle_state as domain_state
|
|
353
|
+
from agent_board.fleet_machines fm
|
|
354
|
+
join agent_board.fleet_trust_domains ftd on ftd.id = fm.trust_domain_id
|
|
355
|
+
where fm.machine_fingerprint = 'sha256:nodowngrade-iso-fresh';
|
|
356
|
+
|
|
357
|
+
trust_domain_id |machine_state|domain_state
|
|
358
|
+
------------------------------------+-------------+------------
|
|
359
|
+
d3970000-0000-4000-8000-000000000005|active |pending
|
|
360
|
+
(1 row)
|
|
361
|
+
|
|
362
|
+
|
|
363
|
+
starting permutation: rf_begin rf_register rm2_begin rm2_register rl_begin rl_promote_race_src rl_commit rf_commit rm2_commit chkf
|
|
364
|
+
step rf_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
365
|
+
step rf_register:
|
|
366
|
+
select trust_domain_id
|
|
367
|
+
from agent_board.register_fleet_machine(
|
|
368
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000005',
|
|
369
|
+
'nodowngrade-iso-fresh-winner', 'sha256:nodowngrade-iso-fresh', 'portal',
|
|
370
|
+
jsonb_build_object('redacted', true));
|
|
371
|
+
|
|
372
|
+
trust_domain_id
|
|
373
|
+
------------------------------------
|
|
374
|
+
d3970000-0000-4000-8000-000000000005
|
|
375
|
+
(1 row)
|
|
376
|
+
|
|
377
|
+
step rm2_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
378
|
+
step rm2_register:
|
|
379
|
+
select trust_domain_id
|
|
380
|
+
from agent_board.register_fleet_machine(
|
|
381
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000006',
|
|
382
|
+
'nodowngrade-iso-fresh-loser', 'sha256:nodowngrade-iso-fresh', 'portal',
|
|
383
|
+
jsonb_build_object('redacted', true));
|
|
384
|
+
<waiting ...>
|
|
385
|
+
step rl_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
386
|
+
step rl_promote_race_src:
|
|
387
|
+
update agent_board.fleet_trust_domains
|
|
388
|
+
set lifecycle_state = 'active', approved_at = now(), updated_at = now()
|
|
389
|
+
where id = 'd3970000-0000-4000-8000-000000000005';
|
|
390
|
+
|
|
391
|
+
step rl_commit: COMMIT;
|
|
392
|
+
step rf_commit: COMMIT;
|
|
393
|
+
step rm2_register: <... completed>
|
|
394
|
+
ERROR: concurrent registration of machine fingerprint sha256:nodowngrade-iso-fresh — retry
|
|
395
|
+
step rm2_commit: COMMIT;
|
|
396
|
+
step chkf:
|
|
397
|
+
select fm.trust_domain_id, fm.lifecycle_state as machine_state, ftd.lifecycle_state as domain_state
|
|
398
|
+
from agent_board.fleet_machines fm
|
|
399
|
+
join agent_board.fleet_trust_domains ftd on ftd.id = fm.trust_domain_id
|
|
400
|
+
where fm.machine_fingerprint = 'sha256:nodowngrade-iso-fresh';
|
|
401
|
+
|
|
402
|
+
trust_domain_id |machine_state|domain_state
|
|
403
|
+
------------------------------------+-------------+------------
|
|
404
|
+
d3970000-0000-4000-8000-000000000005|active |active
|
|
405
|
+
(1 row)
|
|
406
|
+
|
|
407
|
+
|
|
408
|
+
starting permutation: rf_begin rf_register rf_commit rm2_begin rm2_register rm2_commit chkf
|
|
409
|
+
step rf_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
410
|
+
step rf_register:
|
|
411
|
+
select trust_domain_id
|
|
412
|
+
from agent_board.register_fleet_machine(
|
|
413
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000005',
|
|
414
|
+
'nodowngrade-iso-fresh-winner', 'sha256:nodowngrade-iso-fresh', 'portal',
|
|
415
|
+
jsonb_build_object('redacted', true));
|
|
416
|
+
|
|
417
|
+
trust_domain_id
|
|
418
|
+
------------------------------------
|
|
419
|
+
d3970000-0000-4000-8000-000000000005
|
|
420
|
+
(1 row)
|
|
421
|
+
|
|
422
|
+
step rf_commit: COMMIT;
|
|
423
|
+
step rm2_begin: BEGIN; SET LOCAL "request.jwt.claim.role" = 'service_role';
|
|
424
|
+
step rm2_register:
|
|
425
|
+
select trust_domain_id
|
|
426
|
+
from agent_board.register_fleet_machine(
|
|
427
|
+
'a3970000-0000-4000-8000-000000000001', 'd3970000-0000-4000-8000-000000000006',
|
|
428
|
+
'nodowngrade-iso-fresh-loser', 'sha256:nodowngrade-iso-fresh', 'portal',
|
|
429
|
+
jsonb_build_object('redacted', true));
|
|
430
|
+
|
|
431
|
+
trust_domain_id
|
|
432
|
+
------------------------------------
|
|
433
|
+
d3970000-0000-4000-8000-000000000006
|
|
434
|
+
(1 row)
|
|
435
|
+
|
|
436
|
+
step rm2_commit: COMMIT;
|
|
437
|
+
step chkf:
|
|
438
|
+
select fm.trust_domain_id, fm.lifecycle_state as machine_state, ftd.lifecycle_state as domain_state
|
|
439
|
+
from agent_board.fleet_machines fm
|
|
440
|
+
join agent_board.fleet_trust_domains ftd on ftd.id = fm.trust_domain_id
|
|
441
|
+
where fm.machine_fingerprint = 'sha256:nodowngrade-iso-fresh';
|
|
442
|
+
|
|
443
|
+
trust_domain_id |machine_state|domain_state
|
|
444
|
+
------------------------------------+-------------+------------
|
|
445
|
+
d3970000-0000-4000-8000-000000000006|active |pending
|
|
446
|
+
(1 row)
|
|
447
|
+
|