@intentius/chant-lexicon-aws 0.124.52 → 0.124.54

package/src/testdata/three-cloud/dns.graph.json

@@ -0,0 +1,336 @@
+{
+  "$comment": "The dns member of behold origin/integration/consolidation-graph example-three-cloud, read with chant on integration/consolidation-graph (#4535): chant graph src --format ir --detail 3, ids prefixed with the member as behold composes them.",
+  "nodes": [
+    {
+      "id": "dns/awsCheck",
+      "kind": "AWS::Route53::HealthCheck",
+      "lexicon": "aws",
+      "attrs": {
+        "HealthCheckId": {
+          "$ref": "awsCheck.HealthCheckId"
+        },
+        "HealthCheckConfig": {
+          "Type": "HTTP",
+          "FullyQualifiedDomainName": {
+            "$ref": "awsEndpoint"
+          },
+          "ResourcePath": "/",
+          "RequestInterval": 10,
+          "FailureThreshold": 1
+        }
+      }
+    },
+    {
+      "id": "dns/awsEndpoint",
+      "kind": "AWS::CloudFormation::Parameter",
+      "lexicon": "aws",
+      "attrs": {
+        "parameterType": "String",
+        "description": "The aws member's load balancer hostname"
+      }
+    },
+    {
+      "id": "dns/awsRecord",
+      "kind": "AWS::Route53::RecordSet",
+      "lexicon": "aws",
+      "attrs": {
+        "HostedZoneId": {
+          "$ref": "zone.Id"
+        },
+        "Name": "www.three-cloud.example.",
+        "Type": "CNAME",
+        "TTL": "60",
+        "SetIdentifier": "aws",
+        "Region": "us-east-1",
+        "ResourceRecords": [
+          {
+            "$ref": "awsEndpoint"
+          }
+        ],
+        "HealthCheckId": {
+          "$ref": "awsCheck.HealthCheckId"
+        }
+      }
+    },
+    {
+      "id": "dns/azureCheck",
+      "kind": "AWS::Route53::HealthCheck",
+      "lexicon": "aws",
+      "attrs": {
+        "HealthCheckId": {
+          "$ref": "azureCheck.HealthCheckId"
+        },
+        "HealthCheckConfig": {
+          "Type": "HTTP",
+          "FullyQualifiedDomainName": {
+            "$ref": "azureEndpoint"
+          },
+          "ResourcePath": "/",
+          "RequestInterval": 10,
+          "FailureThreshold": 1
+        }
+      }
+    },
+    {
+      "id": "dns/azureEndpoint",
+      "kind": "AWS::CloudFormation::Parameter",
+      "lexicon": "aws",
+      "attrs": {
+        "parameterType": "String",
+        "description": "The azure member's Container App hostname"
+      }
+    },
+    {
+      "id": "dns/azureRecord",
+      "kind": "AWS::Route53::RecordSet",
+      "lexicon": "aws",
+      "attrs": {
+        "HostedZoneId": {
+          "$ref": "zone.Id"
+        },
+        "Name": "www.three-cloud.example.",
+        "Type": "CNAME",
+        "TTL": "60",
+        "SetIdentifier": "azure",
+        "Region": "eu-west-1",
+        "ResourceRecords": [
+          {
+            "$ref": "azureEndpoint"
+          }
+        ],
+        "HealthCheckId": {
+          "$ref": "azureCheck.HealthCheckId"
+        }
+      }
+    },
+    {
+      "id": "dns/front-door",
+      "kind": "Chant::Op",
+      "lexicon": "chant",
+      "attrs": {
+        "name": "front-door",
+        "overview": "Apply dns, aws, azure and gcp to the emulators, turn Azure off, wait for its health check to fail, export the page to ../export",
+        "phases": [
+          {
+            "name": "Apply",
+            "steps": [
+              {
+                "kind": "activity",
+                "fn": "shellCmd",
+                "args": {
+                  "cmd": "cd .. && ./node_modules/.bin/tsx scripts/front-door.ts apply"
+                },
+                "profile": "atMostOnce",
+                "timeout": "15m"
+              }
+            ]
+          },
+          {
+            "name": "Turn Azure off",
+            "steps": [
+              {
+                "kind": "activity",
+                "fn": "shellCmd",
+                "args": {
+                  "cmd": "cd .. && ./node_modules/.bin/tsx scripts/front-door.ts azure-off"
+                },
+                "profile": "atMostOnce",
+                "timeout": "15m"
+              }
+            ]
+          },
+          {
+            "name": "Wait for Route 53",
+            "steps": [
+              {
+                "kind": "activity",
+                "fn": "shellCmd",
+                "args": {
+                  "cmd": "cd .. && ./node_modules/.bin/tsx scripts/front-door.ts wait"
+                },
+                "profile": "atMostOnce",
+                "timeout": "15m"
+              }
+            ]
+          },
+          {
+            "name": "Export",
+            "steps": [
+              {
+                "kind": "activity",
+                "fn": "shellCmd",
+                "args": {
+                  "cmd": "cd .. && ./node_modules/.bin/tsx scripts/front-door.ts export --out export"
+                },
+                "profile": "atMostOnce",
+                "timeout": "15m"
+              }
+            ]
+          }
+        ]
+      }
+    },
+    {
+      "id": "dns/gcpCheck",
+      "kind": "AWS::Route53::HealthCheck",
+      "lexicon": "aws",
+      "attrs": {
+        "HealthCheckId": {
+          "$ref": "gcpCheck.HealthCheckId"
+        },
+        "HealthCheckConfig": {
+          "Type": "HTTP",
+          "IPAddress": {
+            "$ref": "gcpEndpoint"
+          },
+          "Port": 80,
+          "ResourcePath": "/",
+          "RequestInterval": 10,
+          "FailureThreshold": 1
+        }
+      }
+    },
+    {
+      "id": "dns/gcpEndpoint",
+      "kind": "AWS::CloudFormation::Parameter",
+      "lexicon": "aws",
+      "attrs": {
+        "parameterType": "String",
+        "description": "The gcp member's load balancer IP address"
+      }
+    },
+    {
+      "id": "dns/gcpOrigin",
+      "kind": "AWS::Route53::RecordSet",
+      "lexicon": "aws",
+      "attrs": {
+        "HostedZoneId": {
+          "$ref": "zone.Id"
+        },
+        "Name": "gcp.three-cloud.example.",
+        "Type": "A",
+        "TTL": "60",
+        "ResourceRecords": [
+          {
+            "$ref": "gcpEndpoint"
+          }
+        ]
+      }
+    },
+    {
+      "id": "dns/gcpRecord",
+      "kind": "AWS::Route53::RecordSet",
+      "lexicon": "aws",
+      "attrs": {
+        "HostedZoneId": {
+          "$ref": "zone.Id"
+        },
+        "Name": "www.three-cloud.example.",
+        "Type": "CNAME",
+        "TTL": "60",
+        "SetIdentifier": "gcp",
+        "Region": "ap-northeast-1",
+        "ResourceRecords": [
+          "gcp.three-cloud.example."
+        ],
+        "HealthCheckId": {
+          "$ref": "gcpCheck.HealthCheckId"
+        }
+      }
+    },
+    {
+      "id": "dns/zone",
+      "kind": "AWS::Route53::HostedZone",
+      "lexicon": "aws",
+      "attrs": {
+        "Id": {
+          "$ref": "zone.Id"
+        },
+        "NameServers": {
+          "$ref": "zone.NameServers"
+        },
+        "Name": "three-cloud.example."
+      }
+    }
+  ],
+  "edges": [
+    {
+      "from": "dns/awsCheck",
+      "to": "dns/awsEndpoint",
+      "kind": "ref",
+      "viaAttr": "HealthCheckConfig"
+    },
+    {
+      "from": "dns/awsRecord",
+      "to": "dns/awsCheck",
+      "kind": "ref",
+      "viaAttr": "HealthCheckId"
+    },
+    {
+      "from": "dns/awsRecord",
+      "to": "dns/awsEndpoint",
+      "kind": "ref",
+      "viaAttr": "ResourceRecords"
+    },
+    {
+      "from": "dns/awsRecord",
+      "to": "dns/zone",
+      "kind": "ref",
+      "viaAttr": "HostedZoneId"
+    },
+    {
+      "from": "dns/azureCheck",
+      "to": "dns/azureEndpoint",
+      "kind": "ref",
+      "viaAttr": "HealthCheckConfig"
+    },
+    {
+      "from": "dns/azureRecord",
+      "to": "dns/azureCheck",
+      "kind": "ref",
+      "viaAttr": "HealthCheckId"
+    },
+    {
+      "from": "dns/azureRecord",
+      "to": "dns/azureEndpoint",
+      "kind": "ref",
+      "viaAttr": "ResourceRecords"
+    },
+    {
+      "from": "dns/azureRecord",
+      "to": "dns/zone",
+      "kind": "ref",
+      "viaAttr": "HostedZoneId"
+    },
+    {
+      "from": "dns/gcpCheck",
+      "to": "dns/gcpEndpoint",
+      "kind": "ref",
+      "viaAttr": "HealthCheckConfig"
+    },
+    {
+      "from": "dns/gcpOrigin",
+      "to": "dns/gcpEndpoint",
+      "kind": "ref",
+      "viaAttr": "ResourceRecords"
+    },
+    {
+      "from": "dns/gcpOrigin",
+      "to": "dns/zone",
+      "kind": "ref",
+      "viaAttr": "HostedZoneId"
+    },
+    {
+      "from": "dns/gcpRecord",
+      "to": "dns/gcpCheck",
+      "kind": "ref",
+      "viaAttr": "HealthCheckId"
+    },
+    {
+      "from": "dns/gcpRecord",
+      "to": "dns/zone",
+      "kind": "ref",
+      "viaAttr": "HostedZoneId"
+    }
+  ]
+}

package/src/three-cloud-parity.test.ts

@@ -0,0 +1,49 @@
+/**
+ * #4535: on example-three-cloud's dns member, the aws catalog draws the one
+ * edge behold's matcher (behold src/value-match.ts) drew there: the gcp
+ * latency record is a CNAME to the gcp origin record, by name. The three
+ * records sharing `www.three-cloud.example.` make that name ambiguous, and
+ * none of them is referenced by it.
+ */
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { describe, expect, it } from "vitest";
+import type { IRNode } from "@intentius/chant/graph-ir";
+import { reconstructIndexedEdges } from "@intentius/chant/graph-refs";
+import { awsReferenceCatalog } from "./reference-catalog";
+
+const graph = JSON.parse(readFileSync(join(import.meta.dirname, "testdata", "three-cloud", "dns.graph.json"), "utf-8")) as {
+  nodes: IRNode[];
+  edges: Array<{ from: string; to: string }>;
+};
+
+describe("example-three-cloud's dns member (parity with behold's matcher)", () => {
+  const out = reconstructIndexedEdges(graph.nodes, [{ lexicon: "aws", catalog: awsReferenceCatalog }], () => ({ account: "declared" }));
+  const declared = new Set(graph.edges.map((e) => `${e.from}->${e.to}`));
+
+  it("draws the CNAME edge the matcher drew, and none the declaration lacks besides", () => {
+    expect(out.edges.filter((e) => !declared.has(`${e.from}->${e.to}`)).map((e) => `${e.from} -> ${e.to} (${e.rule})`)).toEqual([
+      "dns/gcpRecord -> dns/gcpOrigin (aws:AWS::Route53::RecordSet:ResourceRecords[])",
+    ]);
+  });
+
+  it("leaves nothing ambiguous or dangling", () => {
+    expect(out.ambiguous).toEqual([]);
+    expect(out.dangling).toEqual([]);
+  });
+});
+
+describe("record and bucket identities (#4535)", () => {
+  it("does not report a record value outside the estate as dangling", () => {
+    const nodes: IRNode[] = [
+      { id: "r", kind: "AWS::Route53::RecordSet", lexicon: "aws", attrs: { Name: "www.example.", Type: "CNAME", ResourceRecords: ["elsewhere.example.net."] } },
+    ];
+    const out = reconstructIndexedEdges(nodes, [{ lexicon: "aws", catalog: awsReferenceCatalog }], () => ({ account: "declared" }));
+    expect(out.edges).toEqual([]);
+    expect(out.dangling).toEqual([]);
+  });
+
+  it("names a bucket by its BucketName", () => {
+    expect(awsReferenceCatalog.identities).toContainEqual({ kind: "AWS::S3::Bucket", ids: ["BucketName"] });
+  });
+});