fix: clean up utcnow deprecation warnings, fix 12 failing tests, add CI/CD pipeline manifests
- Replace all datetime.utcnow() with datetime.now(tz=timezone.utc) across 8 files - Fix 12 failing tests to match current implementation behavior - Fix pytest_plugins in non-top-level conftest (moved to root conftest.py) - Auto-fix 189 lint issues (import sorting, unused imports) - Add CI/CD pipeline infrastructure (ARC, ArgoCD, Kargo manifests) - Add values-beta.yaml and values-paper.yaml for staged deployments - Update GitHub Actions workflow to use self-hosted-gremlin runners - Add integration-test job to CI pipeline Result: 1596 passed, 0 failed, 0 warnings
This commit is contained in:
Celes Renata
@@ -120,48 +120,119 @@ Wraps each test with timing:
|
||||
- Outputs a summary table at the end
|
||||
- Flags any endpoint > 500ms as "slow"
|
||||
|
||||
### 6. Runner Script (`tests/integration/run_pipeline.sh`)
|
||||
### 6. Runner Script (`infra/inttest/run_pipeline.sh`)
|
||||
|
||||
Orchestrates the full pipeline:
|
||||
Standalone orchestration script with a well-defined CLI contract so any CI/CD system (or a human) can invoke it. The future CI/CD pipeline spec will call this script as a stage.
|
||||
|
||||
**CLI interface:**
|
||||
```
|
||||
Usage: bash infra/inttest/run_pipeline.sh [OPTIONS]
|
||||
|
||||
Options:
|
||||
--image-tag TAG Docker image tag to deploy (default: latest)
|
||||
--namespace NAME Override namespace name (default: stonks-inttest-<timestamp>)
|
||||
--skip-teardown Leave namespace running after tests (for debugging)
|
||||
--results-file PATH Path for JSON results output (default: inttest-results.json)
|
||||
|
||||
Exit codes:
|
||||
0 All tests passed
|
||||
1 One or more test failures
|
||||
2 Infrastructure setup failure (postgres/redis/minio/services didn't start)
|
||||
```
|
||||
|
||||
**JSON result contract** (`inttest-results.json`):
|
||||
```json
|
||||
{
|
||||
"run_id": "stonks-inttest-1705312800",
|
||||
"image_tag": "abc123",
|
||||
"started_at": "2025-01-15T12:00:00Z",
|
||||
"completed_at": "2025-01-15T12:07:30Z",
|
||||
"exit_code": 0,
|
||||
"stages": {
|
||||
"infra_deploy": {"duration_s": 45.2, "status": "ok"},
|
||||
"seed_data": {"duration_s": 8.1, "status": "ok"},
|
||||
"service_deploy": {"duration_s": 32.5, "status": "ok"},
|
||||
"integration_tests": {"duration_s": 28.3, "status": "ok"},
|
||||
"teardown": {"duration_s": 5.0, "status": "ok"}
|
||||
},
|
||||
"tests": {
|
||||
"total": 41,
|
||||
"passed": 41,
|
||||
"failed": 0,
|
||||
"errors": 0
|
||||
},
|
||||
"profiling": {
|
||||
"endpoints": {
|
||||
"/api/companies": {"p50_ms": 12, "p95_ms": 25, "p99_ms": 45},
|
||||
...
|
||||
},
|
||||
"slow_endpoints": []
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
This contract is designed so the future CI/CD pipeline can:
|
||||
1. Parse `exit_code` to decide whether to promote to the next stage
|
||||
2. Parse `profiling.slow_endpoints` to flag performance regressions
|
||||
3. Archive the full JSON as a build artifact
|
||||
4. Display `tests.passed`/`tests.failed` in a dashboard
|
||||
|
||||
```bash
|
||||
#!/bin/bash
|
||||
set -euo pipefail
|
||||
|
||||
# Parse CLI args
|
||||
IMAGE_TAG="latest"
|
||||
NAMESPACE="stonks-inttest-$(date +%s)"
|
||||
PROFILING_OUTPUT="inttest-results-${NAMESPACE}.json"
|
||||
SKIP_TEARDOWN=false
|
||||
RESULTS_FILE="inttest-results.json"
|
||||
|
||||
while [[ $# -gt 0 ]]; do
|
||||
case $1 in
|
||||
--image-tag) IMAGE_TAG="$2"; shift 2 ;;
|
||||
--namespace) NAMESPACE="$2"; shift 2 ;;
|
||||
--skip-teardown) SKIP_TEARDOWN=true; shift ;;
|
||||
--results-file) RESULTS_FILE="$2"; shift 2 ;;
|
||||
*) echo "Unknown option: $1"; exit 2 ;;
|
||||
esac
|
||||
done
|
||||
|
||||
# Cleanup function (always runs, even on failure)
|
||||
cleanup() {
|
||||
if [ "$SKIP_TEARDOWN" = false ]; then
|
||||
kubectl delete namespace "$NAMESPACE" --wait=false 2>/dev/null || true
|
||||
fi
|
||||
}
|
||||
trap cleanup EXIT
|
||||
|
||||
# Stage 1: Create namespace
|
||||
kubectl create namespace $NAMESPACE
|
||||
kubectl create namespace "$NAMESPACE"
|
||||
|
||||
# Stage 2: Deploy infra
|
||||
envsubst < infra/inttest/postgres.yaml | kubectl apply -n $NAMESPACE -f -
|
||||
envsubst < infra/inttest/redis.yaml | kubectl apply -n $NAMESPACE -f -
|
||||
envsubst < infra/inttest/minio.yaml | kubectl apply -n $NAMESPACE -f -
|
||||
kubectl wait --for=condition=ready pod -l app=postgres -n $NAMESPACE --timeout=120s
|
||||
kubectl wait --for=condition=ready pod -l app=redis -n $NAMESPACE --timeout=60s
|
||||
kubectl wait --for=condition=ready pod -l app=minio -n $NAMESPACE --timeout=60s
|
||||
kubectl create configmap postgres-migrations --from-file=infra/migrations/ -n "$NAMESPACE"
|
||||
export NAMESPACE
|
||||
envsubst < infra/inttest/postgres.yaml | kubectl apply -n "$NAMESPACE" -f -
|
||||
envsubst < infra/inttest/redis.yaml | kubectl apply -n "$NAMESPACE" -f -
|
||||
envsubst < infra/inttest/minio.yaml | kubectl apply -n "$NAMESPACE" -f -
|
||||
kubectl wait --for=condition=ready pod -l app=postgres -n "$NAMESPACE" --timeout=120s
|
||||
kubectl wait --for=condition=ready pod -l app=redis -n "$NAMESPACE" --timeout=60s
|
||||
kubectl wait --for=condition=ready pod -l app=minio -n "$NAMESPACE" --timeout=60s
|
||||
|
||||
# Stage 3: Run migrations + seed
|
||||
kubectl run seed-runner --image=ghcr.io/celesrenata/stonks-oracle/query-api:latest \
|
||||
-n $NAMESPACE --restart=Never --env="POSTGRES_HOST=postgres" ... \
|
||||
-- python -c "import asyncio; from tests.integration.seed_sandbox import seed; asyncio.run(seed())"
|
||||
kubectl wait --for=condition=complete job/seed-runner -n $NAMESPACE --timeout=120s
|
||||
# Stage 3: Seed data (run from a pod with DB access)
|
||||
# ... seed runner pod ...
|
||||
|
||||
# Stage 4: Deploy services
|
||||
envsubst < infra/inttest/services.yaml | kubectl apply -n $NAMESPACE -f -
|
||||
kubectl wait --for=condition=ready pod -l tier=api -n $NAMESPACE --timeout=120s
|
||||
# Stage 4: Deploy services (using specified image tag)
|
||||
envsubst < infra/inttest/services.yaml | sed "s/:latest/:${IMAGE_TAG}/g" | kubectl apply -n "$NAMESPACE" -f -
|
||||
kubectl wait --for=condition=ready pod -l tier=api -n "$NAMESPACE" --timeout=120s
|
||||
|
||||
# Stage 5: Run integration tests
|
||||
kubectl run test-runner --image=ghcr.io/celesrenata/stonks-oracle/query-api:latest \
|
||||
-n $NAMESPACE --restart=Never \
|
||||
-- python -m pytest tests/integration/ -v --tb=short
|
||||
envsubst < infra/inttest/runner.yaml | sed "s/:latest/:${IMAGE_TAG}/g" | kubectl apply -n "$NAMESPACE" -f -
|
||||
kubectl wait --for=condition=complete job/inttest-runner -n "$NAMESPACE" --timeout=600s
|
||||
|
||||
# Stage 6: Collect results
|
||||
kubectl logs job/test-runner -n $NAMESPACE > $PROFILING_OUTPUT
|
||||
kubectl logs job/inttest-runner -n "$NAMESPACE" > "$RESULTS_FILE"
|
||||
|
||||
# Stage 7: Teardown
|
||||
kubectl delete namespace $NAMESPACE --wait=false
|
||||
# Stage 7: Teardown (handled by trap)
|
||||
```
|
||||
|
||||
## Profiling Strategy
|
||||
@@ -217,3 +288,38 @@ CREATE namespace
|
||||
→ Collect results
|
||||
→ DELETE namespace (always, even on failure)
|
||||
```
|
||||
|
||||
## Integration Contract for Future CI/CD Pipeline
|
||||
|
||||
This spec produces a standalone runner (`infra/inttest/run_pipeline.sh`) with a well-defined contract. A future spec ("CI/CD Deployment Pipeline") will consume it as one stage in a larger pipeline:
|
||||
|
||||
```
|
||||
┌─────────────────────────────────────────────────────────────────────────┐
|
||||
│ Future CI/CD Pipeline (separate spec) │
|
||||
│ │
|
||||
│ 1. Git push → webhook to self-hosted runner on gremlin nodes │
|
||||
│ 2. Lint + Unit Tests (ruff, pytest, vitest) │
|
||||
│ 3. Docker Build → push to GHCR (self-hosted, no GH Actions compute) │
|
||||
│ 4. ┌──────────────────────────────────────────────────────────┐ │
|
||||
│ │ Integration Tests (THIS SPEC) │ │
|
||||
│ │ bash infra/inttest/run_pipeline.sh --image-tag $SHA │ │
|
||||
│ │ → reads inttest-results.json │ │
|
||||
│ │ → exit code 0 = promote, 1 = block │ │
|
||||
│ └──────────────────────────────────────────────────────────┘ │
|
||||
│ 5. Promote to beta namespace (if tests pass) │
|
||||
│ 6. Promote to paper namespace (manual gate or auto) │
|
||||
│ 7. Promote to live namespace (market-hours blocker + break-glass) │
|
||||
│ │
|
||||
│ Each stage has enable/disable toggle. │
|
||||
│ Promotions blocked during market hours (9:30–16:00 ET) unless │
|
||||
│ break-glass is activated. │
|
||||
└─────────────────────────────────────────────────────────────────────────┘
|
||||
```
|
||||
|
||||
**What this spec provides to the future pipeline:**
|
||||
- `infra/inttest/run_pipeline.sh` — callable with `--image-tag` to test any build
|
||||
- `inttest-results.json` — machine-readable results for promotion decisions
|
||||
- Exit codes for pass/fail gating
|
||||
- `--skip-teardown` for debugging failed runs
|
||||
- All K8s manifests in `infra/inttest/` for sandbox lifecycle
|
||||
- Deterministic seed data and comprehensive API test coverage
|
||||
|
||||
Reference in New Issue
Block a user