@opensoha/contracts 0.1.25 → 0.1.26

package/fixtures/openapi/KubernetesServiceImportRequest/invalid/empty-source-uid.json

@@ -0,0 +1,48 @@
+{
+  "clusterId": "cluster-prod",
+  "namespace": "payments",
+  "applicationKey": "payments",
+  "applicationName": "Payments",
+  "environmentKey": "prod",
+  "environmentName": "Production",
+  "ownershipMode": "observe_only",
+  "workloads": [
+    {
+      "workloadKind": "Deployment",
+      "workloadName": "deployment",
+      "expectedUid": "",
+      "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    {
+      "workloadKind": "StatefulSet",
+      "workloadName": "statefulset",
+      "expectedUid": "uid-StatefulSet",
+      "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    {
+      "workloadKind": "DaemonSet",
+      "workloadName": "daemonset",
+      "expectedUid": "uid-DaemonSet",
+      "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    {
+      "workloadKind": "Job",
+      "workloadName": "job",
+      "expectedUid": "uid-Job",
+      "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    {
+      "workloadKind": "CronJob",
+      "workloadName": "cronjob",
+      "expectedUid": "uid-CronJob",
+      "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    {
+      "workloadKind": "CustomResource",
+      "workloadName": "customresource",
+      "expectedUid": "uid-CustomResource",
+      "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "crdName": "elasticsearches.elasticsearch.k8s.elastic.co"
+    }
+  ]
+}

package/fixtures/openapi/KubernetesServiceImportRequest/valid/pinned-workloads-and-cr.json

@@ -0,0 +1,48 @@
+{
+  "clusterId": "cluster-prod",
+  "namespace": "payments",
+  "applicationKey": "payments",
+  "applicationName": "Payments",
+  "environmentKey": "prod",
+  "environmentName": "Production",
+  "ownershipMode": "observe_only",
+  "workloads": [
+    {
+      "workloadKind": "Deployment",
+      "workloadName": "deployment",
+      "expectedUid": "uid-Deployment",
+      "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    {
+      "workloadKind": "StatefulSet",
+      "workloadName": "statefulset",
+      "expectedUid": "uid-StatefulSet",
+      "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    {
+      "workloadKind": "DaemonSet",
+      "workloadName": "daemonset",
+      "expectedUid": "uid-DaemonSet",
+      "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    {
+      "workloadKind": "Job",
+      "workloadName": "job",
+      "expectedUid": "uid-Job",
+      "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    {
+      "workloadKind": "CronJob",
+      "workloadName": "cronjob",
+      "expectedUid": "uid-CronJob",
+      "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    {
+      "workloadKind": "CustomResource",
+      "workloadName": "customresource",
+      "expectedUid": "uid-CustomResource",
+      "expectedSpecDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "crdName": "elasticsearches.elasticsearch.k8s.elastic.co"
+    }
+  ]
+}

package/fixtures/openapi/ManifestExecutionTaskPayload/invalid/initialization.json

@@ -0,0 +1,7 @@
+{
+  "action": "preflight",
+  "packageId": "pkg",
+  "generation": 1,
+  "idempotencyKey": "initialization:plan:target",
+  "initializationPlanId": ""
+}

package/fixtures/openapi/ManifestExecutionTaskPayload/valid/initialization.json

@@ -0,0 +1,7 @@
+{
+  "action": "preflight",
+  "packageId": "pkg",
+  "generation": 1,
+  "idempotencyKey": "initialization:plan:target",
+  "initializationPlanId": "plan"
+}

package/fixtures/openapi/ManifestRootResource/invalid/root.json

@@ -0,0 +1 @@
+{"apiVersion":"unknown.example/v1","kind":"Database","namespace":"team","name":"db","uid":"","generation":0,"crdName":"databases.unknown.example"}

package/fixtures/openapi/ManifestRootResource/valid/root.json

@@ -0,0 +1 @@
+{"apiVersion": "unknown.example/v1", "kind": "Database", "namespace": "team", "name": "db", "uid": "uid-1", "generation": 2, "crdName": "databases.unknown.example", "targetId": "target", "deliveryPlanId": "plan"}

package/fixtures/openapi/ResourceRelationConfig/invalid/executable-rule.json

@@ -0,0 +1,17 @@
+{
+  "version": "v1",
+  "rootUid": "root",
+  "sources": [],
+  "rules": [
+    {
+      "id": "bad",
+      "type": "script",
+      "target": {
+        "apiVersion": "v1",
+        "resource": "pods",
+        "kind": "Pod",
+        "namespace": "team"
+      }
+    }
+  ]
+}

package/fixtures/openapi/ResourceRelationConfig/valid/unknown-kind.json

@@ -0,0 +1,13 @@
+{
+  "version": "v1",
+  "rootUid": "root",
+  "sources": [
+    {
+      "apiVersion": "widgets.test/v1",
+      "resource": "widgets",
+      "kind": "Widget",
+      "namespace": "team"
+    }
+  ],
+  "rules": []
+}

package/fixtures/openapi/ServiceDeploymentTemplateInput/invalid/migration-missing-guide-valid-yaml.json

@@ -0,0 +1,38 @@
+{
+  "key": "http",
+  "name": "HTTP service",
+  "source": {
+    "renderer": "raw_yaml",
+    "files": [
+      {
+        "path": "deployment.yaml",
+        "content": "kind: Deployment\napiVersion: apps/v1\n"
+      }
+    ]
+  },
+  "parameterSchema": {
+    "type": "object",
+    "properties": {
+      "port": {
+        "type": "integer",
+        "minimum": 1,
+        "maximum": 65535
+      }
+    },
+    "required": [
+      "port"
+    ]
+  },
+  "defaults": {
+    "port": 8080
+  },
+  "health": {
+    "mode": "workload_ready",
+    "timeoutSeconds": 300
+  },
+  "enabled": true,
+  "migrationPolicy": {
+    "sequential": true,
+    "irreversible": false
+  }
+}

package/fixtures/openapi/ServiceDeploymentTemplateInput/valid/migration-valid-yaml.json

@@ -0,0 +1,39 @@
+{
+  "key": "http",
+  "name": "HTTP service",
+  "source": {
+    "renderer": "raw_yaml",
+    "files": [
+      {
+        "path": "deployment.yaml",
+        "content": "kind: Deployment\napiVersion: apps/v1\n"
+      }
+    ]
+  },
+  "parameterSchema": {
+    "type": "object",
+    "properties": {
+      "port": {
+        "type": "integer",
+        "minimum": 1,
+        "maximum": 65535
+      }
+    },
+    "required": [
+      "port"
+    ]
+  },
+  "defaults": {
+    "port": 8080
+  },
+  "health": {
+    "mode": "workload_ready",
+    "timeoutSeconds": 300
+  },
+  "enabled": true,
+  "migrationPolicy": {
+    "sequential": true,
+    "irreversible": true,
+    "guide": "Backup, migrate in order, verify; forward repair only."
+  }
+}

package/fixtures/openapi/TemplateMigrationAssessment/invalid/initialization.json

@@ -0,0 +1,9 @@
+{
+  "fromVersion": 0,
+  "toVersion": 3,
+  "blocked": false,
+  "requiresApproval": true,
+  "reason": "首次发布须先证明不存在并审批",
+  "steps": [],
+  "initialization": "force"
+}

package/fixtures/openapi/TemplateMigrationAssessment/valid/initialization.json

@@ -0,0 +1,9 @@
+{
+  "fromVersion": 0,
+  "toVersion": 3,
+  "blocked": false,
+  "requiresApproval": true,
+  "reason": "首次发布须先证明不存在并审批",
+  "steps": [],
+  "initialization": true
+}

package/fixtures/openapi/TemplateMigrationPolicy/invalid/blank-guide.json

@@ -0,0 +1,5 @@
+{
+  "sequential": false,
+  "irreversible": true,
+  "guide": "  \n"
+}

package/fixtures/openapi/TemplateMigrationPolicy/invalid/missing-guide.json

@@ -0,0 +1,4 @@
+{
+  "sequential": true,
+  "irreversible": false
+}

package/fixtures/openapi/TemplateMigrationPolicy/invalid/unknown-escape-hatch.json

@@ -0,0 +1,6 @@
+{
+  "sequential": true,
+  "irreversible": true,
+  "guide": "manual",
+  "force": true
+}

package/fixtures/openapi/TemplateMigrationPolicy/valid/legacy-safe.json

@@ -0,0 +1,4 @@
+{
+  "sequential": false,
+  "irreversible": false
+}

package/fixtures/openapi/TemplateMigrationPolicy/valid/ordered-data-change.json

@@ -0,0 +1,5 @@
+{
+  "sequential": true,
+  "irreversible": true,
+  "guide": "先备份，再按相邻版本发布；完成业务检查后继续。"
+}

package/fixtures/openapi/TemplateUpdateBatchInput/invalid/duplicate-candidates.json

@@ -0,0 +1,11 @@
+{
+  "previewDigest": "sha256:abc",
+  "candidateIds": [
+    "candidate-1",
+    "candidate-1"
+  ],
+  "waveSize": 2,
+  "stopOnFailure": true,
+  "acknowledgeHistoryGaps": false,
+  "idempotencyKey": "manual-1"
+}

package/fixtures/openapi/TemplateUpdateBatchInput/invalid/empty-identities.json

@@ -0,0 +1,10 @@
+{
+  "previewDigest": "",
+  "candidateIds": [
+    ""
+  ],
+  "waveSize": 2,
+  "stopOnFailure": true,
+  "acknowledgeHistoryGaps": false,
+  "idempotencyKey": ""
+}

package/fixtures/openapi/TemplateUpdateBatchInput/valid/staged-adoption.json

@@ -0,0 +1,10 @@
+{
+  "previewDigest": "sha256:abc",
+  "candidateIds": [
+    "candidate-1"
+  ],
+  "waveSize": 2,
+  "stopOnFailure": true,
+  "acknowledgeHistoryGaps": false,
+  "idempotencyKey": "manual-1"
+}

package/fixtures/openapi/TemplateUpdatePolicyInput/invalid/unknown-mode.json

@@ -0,0 +1,8 @@
+{
+  "kind": "deployment",
+  "templateId": "web-template",
+  "targetId": "binding-test",
+  "mode": "latest",
+  "paused": false,
+  "expectedVersion": 0
+}

package/fixtures/openapi/TemplateUpdatePolicyInput/valid/explicit-automatic.json

@@ -0,0 +1,8 @@
+{
+  "kind": "deployment",
+  "templateId": "web-template",
+  "targetId": "binding-test",
+  "mode": "automatic",
+  "paused": false,
+  "expectedVersion": 0
+}

package/fixtures/openapi/TemplateUpdatePreviewInput/invalid/empty-identities.json

@@ -0,0 +1,10 @@
+{
+  "kind": "deployment",
+  "templateId": "",
+  "toVersion": 4,
+  "targets": [
+    {
+      "targetId": ""
+    }
+  ]
+}

package/fixtures/openapi/TemplateUpdatePreviewInput/invalid/empty-targets.json

@@ -0,0 +1,6 @@
+{
+  "kind": "deployment",
+  "templateId": "web-template",
+  "toVersion": 4,
+  "targets": []
+}

package/fixtures/openapi/TemplateUpdatePreviewInput/valid/cross-version-manual.json

@@ -0,0 +1,14 @@
+{
+  "kind": "deployment",
+  "templateId": "web-template",
+  "toVersion": 4,
+  "targets": [
+    {
+      "targetId": "binding-test",
+      "wave": 0,
+      "useNewDefaults": [
+        "replicas"
+      ]
+    }
+  ]
+}

package/gen/go/sohaapi/client.go

@@ -16,7 +16,7 @@ import (
 	"time"
 )
 
-const defaultUserAgent = "opensoha-contracts/0.1.25"
+const defaultUserAgent = "opensoha-contracts/0.1.26"
 
 type Client struct {
 	BaseURL    string

package/gen/go/sohaapi/client_test.go

@@ -1622,7 +1622,7 @@ func TestCreateServiceAccountTokenEscapesPathPostsBodyAndDecodesData(t *testing.
 		writeJSON(t, w, map[string]any{
 			"data": map[string]any{
 				"value": "soha_sat_secret",
-				"token": map[string]any{
+				"token": map[string]any{ // #nosec G101 -- Synthetic token metadata in an httptest response, not a usable credential.
 					"id":               "sat-2",
 					"serviceAccountId": "svc/1",
 					"name":             "deploy token",
@@ -1682,7 +1682,7 @@ func TestRotateServiceAccountTokenEscapesPathPostsBodyAndDecodesData(t *testing.
 		writeJSON(t, w, map[string]any{
 			"data": map[string]any{
 				"value": "soha_sat_rotated",
-				"token": map[string]any{
+				"token": map[string]any{ // #nosec G101 -- Synthetic token metadata in an httptest response, not a usable credential.
 					"id":               "sat-rotated",
 					"serviceAccountId": "svc-1",
 					"name":             "rotated service token",

package/gen/go/sohaapi/import_source_compat_test.go

@@ -0,0 +1,12 @@
+package sohaapi
+
+import "testing"
+
+func TestDeliveryServiceKindPublishedNamesRemainUsable(t *testing.T) {
+	values := []DeliveryDraftServiceServiceKind{ExternalService, HelmRelease, Job, KubernetesWorkload}
+	for _, value := range values {
+		if !value.Valid() {
+			t.Errorf("published service kind %q is invalid", value)
+		}
+	}
+}