wmantly
e5167729a8
docker-compose.multisite-e2e.yml boots two full all-in-one instances (master + spoke, each with bundled slapd) and a client that drives the actual HTTP API: seeds admins, mints a join key, joins the spoke, and verifies the spoke persisted its role across restart, adopted the pre-join catalog, is enforced read-only, and reports WAN health. Verified passing locally. Existing docker-compose.test.yml/e2e.yml split ldap+redis+app into separate containers, which doesn't work here -- POST /api/site/export runs slapcat in-process, so master and spoke each need their own bundled slapd (Dockerfile.openldap), not a shared one.
70 lines
2.3 KiB
YAML
70 lines
2.3 KiB
YAML
# End-to-end test of the real, shipped multi-site join flow (docs/site-join.md).
|
|
#
|
|
# Spins up two full all-in-one instances (app + bundled slapd each, like
|
|
# docker-compose.repl-test.yml) — "master" and "spoke" — plus a client that
|
|
# drives the actual HTTP API a human/operator would use: mint a site join key
|
|
# on master, join from spoke, verify the spoke adopted the catalog, went
|
|
# read-only, and reports live WAN health.
|
|
#
|
|
# docker compose -f docker-compose.multisite-e2e.yml up --build --abort-on-container-exit
|
|
# # exit code 0 = MULTISITE E2E PASS
|
|
#
|
|
# slapcat (used by POST /api/site/export) only sees the LDAP data of the
|
|
# container it runs in, so this MUST use the all-in-one image (master and
|
|
# spoke each carry their own slapd) — the split ldap+redis+app harness used
|
|
# by docker-compose.test.yml/e2e.yml won't exercise export/join at all.
|
|
|
|
services:
|
|
master:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile.openldap
|
|
container_name: multisite_e2e_master
|
|
environment:
|
|
- LDAP_BASE_DN=dc=master,dc=test
|
|
- LDAP_ADMIN_PASS=secret
|
|
- ORG_NAME=E2E Master
|
|
- app_oauth__jwtSecret=e2e-multisite-master-jwt-secret
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "wget -qO- http://localhost:3001/health >/dev/null 2>&1"]
|
|
interval: 2s
|
|
timeout: 3s
|
|
retries: 40
|
|
start_period: 5s
|
|
|
|
spoke:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile.openldap
|
|
container_name: multisite_e2e_spoke
|
|
environment:
|
|
- LDAP_BASE_DN=dc=spoke,dc=test
|
|
- LDAP_ADMIN_PASS=secret
|
|
- ORG_NAME=E2E Spoke
|
|
- app_oauth__jwtSecret=e2e-multisite-spoke-jwt-secret
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "wget -qO- http://localhost:3001/health >/dev/null 2>&1"]
|
|
interval: 2s
|
|
timeout: 3s
|
|
retries: 40
|
|
start_period: 5s
|
|
|
|
client:
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile.test-runner
|
|
command: ["sh", "-c", "node test/multisite_join_e2e.js"]
|
|
environment:
|
|
- MASTER_URL=http://master:3001
|
|
- SPOKE_URL=http://spoke:3001
|
|
- MASTER_LDAP_HOST=master
|
|
- MASTER_BASE_DN=dc=master,dc=test
|
|
- SPOKE_LDAP_HOST=spoke
|
|
- SPOKE_BASE_DN=dc=spoke,dc=test
|
|
- LDAP_ADMIN_PASS=secret
|
|
depends_on:
|
|
master:
|
|
condition: service_healthy
|
|
spoke:
|
|
condition: service_healthy
|